Privacy policy
Last updated: 1 December 2026
This policy explains what personal data GiftRise collects, why, who we share it with and what rights you have. It applies to the website giftriseapp.com and the GiftRise app.
1. Who is responsible
The controller of your personal data is Keetcode Ltd, Griva Digeni 51, Athineon Court, Office 202, 8047 Paphos, Cyprus, company number HE 434684. Contact: hello@giftriseapp.com.
2. What we collect
| Data | Whose | Why | Legal basis (GDPR) |
|---|---|---|---|
| Name, email, password, account settings | List owners | Create and run your account | Contract (Art. 6(1)(b)) |
| Wishlists, wishes, links, images, target amounts | List owners | Show your wishlists to the people you share them with | Contract |
| Contribution amount, name or “Anonymous”, message, email | Contributors | Process your contribution, show it to the list owner, send you a receipt | Contract |
| Payment details (card type, last 4 digits, payment method, transaction ID) | Contributors | Process payments, handle refunds and disputes | Contract; legal obligation (Art. 6(1)©) |
| Identity verification data (ID document, date of birth, address, bank account) | List owners | Payouts and anti-money-laundering checks - collected by Stripe | Legal obligation |
| Transaction records | Everyone who pays or receives money | Accounting and tax | Legal obligation |
| Device, IP address, log data | All visitors | Security, fraud prevention, fixing errors | Legitimate interest (Art. 6(1)(f)) |
| Usage and advertising events (for example “created a list”) | Visitors who consent | Measure and improve our ads | Consent (Art. 6(1)(a)) |
| Messages to our support | Anyone who writes to us | Answer your request | Legitimate interest |
We do not see or store full card numbers. Stripe collects them directly.
3. Who we share data with
We share personal data only with providers who help us run GiftRise:
- Stripe - payments, payouts and identity verification. Stripe acts as an independent controller for verification and anti-fraud data; see the Stripe Privacy Policy.
- [HOSTING_PROVIDER] - hosting and database.
- [EMAIL_PROVIDER] - sending transactional emails.
- Meta Platforms Ireland - measuring our ads through the Meta Pixel and Conversions API on the website and the Meta SDK in the app, only if you consent to marketing cookies on the website or to tracking in the app.
- Shops and affiliate networks - when you click a “Buy” button, the shop and its affiliate network see that you came from GiftRise. We do not send them your name or email.
- Authorities, when the law requires it.
We do not sell your personal data.
4. International transfers
Some providers (for example Stripe and Meta) may process data outside the European Economic Area. In that case the transfer is protected by the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.
5. How long we keep data
- Account and wishlist data: while your account is open, and deleted within 30 days after you close it.
- Contribution and transaction records: for the period required by tax and accounting law.
- Identity verification data: kept by Stripe for the period required by anti-money-laundering law.
- Security logs: up to 12 months.
- Marketing cookies: see our Cookie policy.
6. Your rights
You can ask us to:
- give you a copy of your data,
- correct it,
- delete it,
- restrict or object to how we use it,
- send it to you or another service in a portable format,
- withdraw your consent at any time (this does not affect what we did before).
Write to hello@giftriseapp.com. We reply within one month.
You can also complain to the Cyprus data protection authority, the Commissioner for Personal Data Protection (dataprotection.gov.cy), or to the authority in the country where you live.
7. Children
GiftRise accounts are for people aged 18 and over.
8. Changes
We will post any changes on this page and, if they matter to you, tell you by email.