Privacy Policy for Secret Santa App

1. Information We Collect

Personal Information:

• Names: Participant names you provide when creating or joining Secret Santa events
• Event Names: Names you give to Secret Santa events you create

Technical Information:

• Device Identifier: A unique, anonymous identifier (UUID) generated on your device to associate your participation in events. This identifier contains no personal information and cannot be used to identify you personally.
• Event Data: Join codes, event creation timestamps, participant lists, and gift assignments

Information We DO NOT Collect:

• Email addresses or contact information
• Location data or GPS coordinates
• Device information beyond the anonymous identifier
• Usage analytics or behavioral tracking data
• Advertising identifiers
• Photos, videos, or other media
• Access to contacts, camera, microphone, or other device features

2. How We Use Your Information

We use the collected information solely to:

• Create and manage Secret Santa events
• Display participant lists within events
• Randomly assign gift recipients (Secret Santa matching)
• Allow participants to view their assigned gift recipient
• Manage event access through join codes
• Enable event creators to control their events (draw names, refresh join codes)

3. Data Storage and Security

• Database Storage: Data is stored in secure databases with appropriate access controls
• Network Security: All data transmission between the app and servers uses HTTPS encryption
• Local Storage: Your device identifier is stored securely on your device using encrypted storage
• Access Controls: Database access is restricted and protected by authentication mechanisms
• Data Minimization: We only store the minimum information necessary for app functionality
• Server Security: Our servers are hosted with appropriate security measures and monitoring

4. Data Sharing and Third Parties

We do not share, sell, or transfer your personal information to any third parties.

• No advertising networks or analytics services
• No social media integrations that share data
• No data brokers or marketing companies
• No external services beyond essential app infrastructure

5. Your Data Rights and Control

Data Deletion:

• Leave Events: Remove yourself from any event, which permanently deletes your name from that event
• Delete Events: If you created an event, you can delete the entire event, removing all participant data
• Complete Removal: When you leave/delete events, your data is permanently removed from our servers

Data Access:

You can view all your data within the app by accessing the events you've created or joined.

Data Portability:

Your data (participant names and event information) is always visible and accessible within the app.

6. Data Retention

• Active Events: Data is retained while events remain active
• Automatic Cleanup: Event data may be automatically removed after extended periods of inactivity
• User-Initiated Deletion: Data is immediately and permanently deleted when you choose to leave or delete events

7. Children's Privacy (COPPA/GDPR-K Compliance)

This app does not knowingly collect personal information from children under 13 years of age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

8. International Data Transfers

Your data may be stored and processed on servers located in the United States. Data is transmitted securely using HTTPS encryption. We ensure appropriate technical and organizational safeguards are in place for international data transfers in compliance with applicable privacy laws.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes by updating the "Last Updated" date. Your continued use of the app after any changes indicates your acceptance of the updated policy.

10. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your personal data based on:

• Legitimate Interest: Providing Secret Santa event organization functionality
• Consent: When you provide your name to create or join events

11. Regional Privacy Rights

California Residents (CCPA):

You have the right to know what personal information we collect, delete your personal information, and opt-out of the sale of personal information (though we do not sell personal information).

European Residents (GDPR):

You have rights including access, rectification, erasure, portability, and objection to processing of your personal data.

Other Regions:

We respect privacy rights as required by applicable local laws.

12. Contact Information

If you have any questions, concerns, or requests regarding this privacy policy or your personal data, please contact us at:

Email: rfk4plt@gmail.com

Subject Line: "Secret Santa App - Privacy Policy"

We will respond to your inquiry within 30 days of receipt.

13. App Store Compliance

This app complies with Google Play Store and Apple App Store privacy requirements. We do not engage in any practices that would violate app store policies regarding user privacy and data protection.