Your gift lists stay yours
We built Gift List Tracker so your surprises stay private. Your lists live on your device and in your own iCloud account, not on our servers.
Last updated: September 30, 2026 · Effective: September 30, 2026
At a glance
- We don’t run servers that store your gifts, people, budgets or notes, and we can’t read them.
- With iCloud sync (Pro), your data is stored in your private iCloud account through Apple’s CloudKit.
- We use three service providers: OneSignal (push notifications), RevenueCat (in-app purchases) and Google AdMob with Google’s User Messaging Platform (ads and consent, free version only).
- Personalized ads use your device’s advertising identifier only if you allow tracking when iOS asks.
- Camera, photos, contacts and Face ID are used only for the features you choose, and are processed on your device.
1. Who we are
Gift List Tracker (“the app”, “we”, “us”) is developed and published by Tostorif Apps. We are the controller of the limited personal data described in this policy. For any privacy question or request, contact us at tostorifapps@proton.me.
2. Data you enter in the app
The app stores what you type or add: occasions, people (names, groups, birthdays, sizes, favorite colors, interests, notes and photos), gifts (names, prices, stores, links, status, order and tracking details, hiding spots, notes and photos), budgets, Secret Santa participants and draws, gifts you received and shipping deadlines. The app also keeps your settings (such as currency, reminder preferences and app icon) on your device.
- On your device: this content is saved in the app’s local database, shared only with the app’s own widgets and Share extension on the same device.
- In your iCloud (Pro, optional): when iCloud sync is on, the content is stored in your private CloudKit database under your Apple Account and synced to your devices. Apple processes this data under the Apple Privacy Policy. We have no access to your iCloud data.
- Shared lists (Pro, optional): if you invite someone, the occasions, people and gifts in your list are shared with the people you invite through Apple’s CloudKit sharing, with the permissions you choose. Participants can see each other’s iCloud name as shown by Apple’s sharing screen. Gifts you mark as private are never shared.
We don’t use your content for advertising, and it is never sent to OneSignal, RevenueCat or Google.
3. Product links and images
When you ask the app to fill in details from a product link, load an image from a link, or share a web page to the app, your device contacts that website directly to download the page or image. The website receives a normal web request (including your IP address) and handles it under its own privacy policy. We don’t receive or store these requests.
4. Device permissions
| Permission | What it’s used for | Where it’s processed |
|---|---|---|
| Camera | Taking photos of gifts and people; scanning receipts to read the total and store. | On your device (receipt text is read with Apple’s on-device Vision framework). |
| Photos | Choosing photos of gifts and people with the system photo picker; the app only receives the photos you pick. | On your device (and your iCloud if sync is on). |
| Photos (add only) | Saving exported gift lists or images to your photo library when you choose to. | On your device. The app can add items but can’t read your library with this permission. |
| Contacts | Importing people you choose with the system contact picker (name, birthday and photo). | On your device (and your iCloud if sync is on). Contacts are never uploaded to us. |
| Face ID / Touch ID | Locking the app (Pro). | Entirely by iOS. The app only learns whether authentication succeeded and never receives biometric data. |
| Notifications | Local reminders (buy-by dates, follow-ups, shipping deadlines, wrapping, birthdays, countdown) and occasional push messages. | Local reminders are scheduled on your device. Push messages are delivered through OneSignal and Apple. |
| Tracking (App Tracking Transparency) | Allowing Google AdMob to use your device’s advertising identifier (IDFA) for personalized ads in the free version. | Only if you tap “Allow”. You can change it in iOS Settings > Privacy & Security > Tracking. |
You can change any permission at any time in the iOS Settings app.
5. Service providers
We use the following providers to operate the app. Each receives only the data needed for its purpose.
OneSignal — push notifications
Purpose: delivering push notifications and occasional in-app messages (such as seasonal tips or announcements), and measuring whether they are delivered and opened.
Data: push token and OneSignal subscription ID, device model, OS and app version, language, time zone, IP address (used to estimate country), session and notification and in-app message interaction data, an anonymous user ID shared with RevenueCat (used as the OneSignal external ID), and three tags: whether you have Pro, your app language and whether you’ve added gifts. No gift content is sent.
Policy: onesignal.com/privacy_policy
RevenueCat — purchases
Purpose: validating App Store purchases, managing your Pro subscription or lifetime purchase, and restoring purchases.
Data: an anonymous app user ID, App Store transaction and subscription information (product, price, currency, dates, trial status), device and app information, IP address, and your OneSignal ID so both services refer to the same anonymous user. RevenueCat does not receive your name, email or payment details; payments are handled by Apple.
Policy: revenuecat.com/privacy
Google AdMob & User Messaging Platform — ads and consent
Purpose: showing ads in the free version (banner, native, interstitial and app-open ads), measuring them, preventing fraud, and collecting and storing your consent choices where required by law (for example in the EEA, UK, Switzerland and certain US states).
Data: device and app information, IP address (and approximate location derived from it), ad interactions, your consent choices, and—only if you allow tracking—your device’s advertising identifier (IDFA). If you don’t allow tracking or don’t consent, Google may still show non-personalized or limited ads.
Not used for Pro: the Google Mobile Ads SDK is not started for Pro users, and no ads are shown.
Policies: Google Privacy Policy · How Google uses information from apps that use its services · How Google uses advertising data
Apple — iCloud and the App Store
Purpose: iCloud sync and sharing (CloudKit), in-app purchases and subscriptions, delivery of notifications, and the standard App Store rating prompt. We only receive aggregate information from Apple (such as download and sales numbers) through App Store Connect.
Policy: apple.com/legal/privacy
6. Advertising, tracking and your choices
- Consent: after you finish the first-run setup, the app may show Google’s consent message if required in your region. You can review or change your choices at any time in Settings > Privacy > Ad privacy choices (shown when required for your region).
- App Tracking Transparency: iOS then asks whether Gift List Tracker may track you. If you choose “Ask App Not to Track”, your advertising identifier is not shared.
- Remove ads: upgrading to Pro removes all ads.
7. Legal bases (GDPR / UK GDPR)
If you’re in the European Economic Area, the United Kingdom or Switzerland, we rely on:
- Contract — to provide the app and the Pro features you buy (including purchase validation through RevenueCat).
- Consent — for personalized ads and access to device information for advertising (collected through Google’s consent message and Apple’s tracking prompt), and for push notifications (through the iOS permission prompt). You can withdraw consent at any time.
- Legitimate interests — to keep the app secure, prevent fraud, and understand whether notifications are delivered, balanced against your rights.
Your rights: you can request access, correction, deletion, restriction, portability (the app’s export feature gives you your lists as PDF or CSV) and object to processing, and you can complain to your local data protection authority. Because your lists are stored on your device and in your iCloud, you can view, edit, export and delete them yourself at any time. International transfers to our providers (which may process data in the United States) rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework, where applicable.
8. California and other US state privacy rights
In the last 12 months, the app and our providers may have collected these categories of personal information: identifiers (anonymous app user ID, push token, advertising identifier if you allow tracking, IP address), commercial information (in-app purchase history), internet or other electronic network activity (ad and notification interactions) and approximate geolocation derived from IP address. We collect them for the purposes described above.
We do not sell personal information for money. In the free version, allowing ads to be personalized may be considered “sharing” for cross-context behavioral advertising. You can opt out by choosing “Ask App Not to Track”, updating your choices in Ad privacy choices where available, or upgrading to Pro. We don’t collect sensitive personal information for inferring characteristics. You have the right to know, delete and correct personal information and to not be discriminated against for exercising your rights. To make a request, contact us at the email below; we may need to verify your request.
9. Children
Gift List Tracker is intended for a general audience and is not directed to children under 13 (or under 16 in the EEA). We don’t knowingly collect personal information from children. If you believe a child has provided personal information through the app, contact us and we’ll help remove it.
10. Retention and deletion
- On your device: kept until you delete it in the app or delete the app.
- In iCloud: kept until you delete it. Open iOS Settings > your name > iCloud > Manage Account Storage (or Manage Storage) > Gift List to delete it. Turning off sharing removes access for the people you invited.
- Service providers: OneSignal, RevenueCat and Google keep data according to their policies. To request deletion of data linked to your anonymous IDs, email us and we’ll forward the request.
11. Security
Your data is protected by iOS data protection on your device and by Apple’s iCloud security in transit and at rest. You can add an extra Face ID lock (Pro), which also hides the app’s contents in the app switcher. No method of storage or transmission is 100% secure, but we design the app to minimize the data that ever leaves your device.
12. Changes to this policy
We may update this policy as the app changes. We’ll update the “Last updated” date above and, for significant changes, let you know in the app.
13. Contact
Questions or requests about this policy or your data: tostorifapps@proton.me. We aim to reply within 30 days.