Privacy policy
Last updated 12 October 2026
Got You is a private notebook for gift giving. What you put in it is yours. We keep it so that you can get it back — on this phone or the next one — and for nothing else: no advertising, no analytics, no tracking, and nothing is sold or shared for marketing.
What we keep
- What you add: the people you give to (the name you call them, relationship, birthday, and a photo if you add one), what you remember about them (facts, a wishlist — with links and prices if you add them —, notes), occasions — and what you mean to spend on one, if you set a budget —, and gifts: names, notes, prices, links, photos and their status.
- If you create an account: your first name, your email address and your password (stored only as an argon2 hash, which we cannot read). If you sign in with Google or Apple: the identifier and the email address they give us — never your password with them. With Apple we also keep, encrypted, a token Apple gives us, used only to tell Apple when you delete your account or disconnect Apple from it.
- Your settings: currency, country, language, appearance, reminder times, whether budget tracking is on. The country is the region your phone is set to, or the one you pick in Settings — it decides which occasions Got You suggests (Mother's Day is not the same day everywhere). The language is the one the app speaks on your phone; the emails we send you are written in it.
- Sessions: a hashed token per signed-in phone, so you stay signed in.
You can use Got You without an account. It then holds no email and no name of yours: just what you add, tied to your phone.
What stays on your phone
- Your contacts. "Import birthdays" reads them on the phone; only the people you tick are added to Got You, as a name and a birthday.
- Your photo library and camera. Only a photo you attach to a gift or to a person is uploaded.
- Reminders. They are planned and shown by your phone; we send no push notifications.
- Face ID, your fingerprint or your phone's code. Secret ideas are hidden on your phone until you unlock them this way; the check happens on your phone and nothing of it reaches us. A secret idea is otherwise stored, synced and exported like any other — hidden on the phone, not from us — and it is never sent to the suggestions service.
- Your location. Got You never asks for it and never reads it.
Links you save
When you add a link, our server opens that page to read its title, picture and price, and keeps a copy of the picture. Some shops turn our server away; then the app on your phone opens the page and the picture itself, as your browser would, and that shop sees a request from your phone. What it read goes no further than when our server reads it. A LEGO set on lego.com is looked up on Brickset instead, by the set number in the link and nothing else.
Gift suggestions
Nothing here happens until you ask for suggestions and say yes to this. You can take that back in Settings at any time.
When you ask Got You to help you find a gift, our server sends what you saved about that person — their relationship to you, roughly how old they are, what they like and dislike, their sizes, their wishlist, the names of gifts you gave or are considering — with the occasion, the budget you typed for that search and your country, to an AI service, which answers with ideas.
Names are taken out first: theirs, yours, and those of the other people you saved. Your email, your account and your phone are never part of it.
The request goes through OpenRouter, a gateway to AI models, set to use only providers that do not keep what they are sent and do not train on it. We keep neither the question nor the answer — only that a request was made, to keep costs in check.
"Search the web" on a suggestion opens your browser on a Google search for that kind of gift — a few words about the gift, nothing about you or them. What happens from there is between you and the search engine.
Where it is kept, and who else is involved
- Your data is in a database on a server we run. Traffic between the app and the server is encrypted (HTTPS).
- Pictures — of gifts, and of people if you add them — are stored with Cloudflare (R2 object storage). A picture can be opened by anyone who has its address, which is long and random and is only ever given to your app.
- Emails (password resets, and the codes that confirm it is you before your account is deleted or a password is added) are sent through an email delivery provider, which sees your address and the message.
- Google or Apple, if you choose to sign in with them, learn that you use Got You.
Our server logs keep the time, the route and the result of each request — never what you wrote, and not your email. Your network address is used briefly, in memory, to stop abuse.
When the app or our server crashes, a crash report is sent to an error tracker we run ourselves, on our own server — no outside company receives it. It holds what went wrong, where in the code, the app version and the kind of phone and system ("iPhone, iOS 27"). It holds no name, no email, nothing you wrote and no account of yours, is not linked to you, and is deleted after 60 days.
This website is the same server: it sets no cookies, runs no scripts and no analytics, and asks you for nothing. A visit is logged like any request, as above.
How long
- Until you delete it. Deleting a person, an occasion or an item removes it from the app at once.
- Deleting your account (Settings › Delete account) erases everything we hold about you, pictures included, immediately. Database backups are kept for 14 days, after which nothing is left there either.
- A guest account that holds nothing and has not been opened for twelve months is removed.
Your choices
- See and correct: everything we hold is what you see in the app.
- Take it with you: Settings › Export my data gives you all of it as a file.
- Erase it: Settings › your account › Delete account — or see how to delete your account without the app.
If you are in the European Union or the United Kingdom, these are your rights under the GDPR, and you may also complain to your data protection authority. We keep your data because you asked us to (to provide the app to you).
Children
Got You is not meant for children under 13, and we do not knowingly keep their data.
Changes and contact
If this policy changes, this page changes, with a new date at the top. Questions: hello@trygotyou.com.