Privacy policy

1. Data Controller

The data controller is:

Dogivo SASU, 984 Rue du Château de Bagnac, 67470 Wintzenbach, France.
Contact: contact@dogivo.app

2. Data Collected

We only collect the data strictly necessary for the service to work:

• Registered users: Email address (for sign-in and account recovery).
• All users (including guests/nicknames): Nickname, gift ideas suggested, votes, contribution amounts declared.
• Contributing without the app: First name and amount pledged from the invite link, and a random identifier kept in the browser to find your contribution again.
• Secret Santa: Participants' first names, the result of the draw (who gives to whom), wish lists (readable only by their author's Secret Santa), messages and hints exchanged anonymously between a Secret Santa and the person they give to, guesses about the identity of one's Secret Santa, and reports (with the text of the reported message). Without the app, a random identifier kept in the browser lets you find your draw again. A draw made on a single phone without being sent online is not stored anywhere.
• Wish lists (My wishes): Lists and wishes (name, link, photo, price, note, favorite), photos added to a wish, the celebration date and, for a child's list, the child's first name and year of birth. A loved one who claims a gift gives their first name and, if they wish, an email address; a secret idea carries its author's first name. The guest of honor never sees what has been claimed, or by whom, before the celebration. Each time a list is opened, this is recorded, with the loved one's first name in the app and without a name on the web. Without the app, a random identifier kept in the browser lets you find your claim again. After the celebration, the guest of honor finds out who gave them what, unless the loved one declined this when claiming, and can send them a thank-you with a note and a photo: the loved one reads it in the app, by opening the list again in the same browser, or through a link the guest of honor sends them.
• App reviews: The rating out of 5 and the words you choose to write, with the time the review was given, the device type and the app version. No name or account is attached. Only the Dogivo team reads these reviews, to improve the app.
• Communications: Content of messages sent through the app's internal chat, message timestamps and the sender's identity (nickname).
• Technical data: IP address, device type, error logs.
• AI-related data: The descriptions or criteria entered in the gift idea AI assistant are processed to generate suggestions. Note: Do not enter any sensitive or identifying data in the AI assistant.

3. Purposes and Legal Bases

We process your data for the following reasons:

• Account creation, management of group gift events, sharing information between contributors.
• Improving the app (usage analysis), securing the service and fixing bugs.
• Use of analytics tools and, where applicable, receiving notifications or partner offers.
• Providing the instant messaging service between contributors to the same event.
• Organizing a Secret Santa: drawing names, anonymous messages between Secret Santas and giftees, the big reveal, and handling message reports.
• Keeping a wish list: discreetly claiming a gift, secret ideas, a collection for a wish, a reminder before the celebration and an alert if a claimed wish is removed.

4. Sharing and Recipients of Data

Dogivo never sells your personal data. It is shared only with:

• Firebase / Google Cloud: For data hosting and authentication.
• Google reCAPTCHA: On pages that can be used without the app (contributing to a collection, Secret Santa, wish list), to tell visitors apart from bots. To do this, Google analyzes technical data about the visit.
• Google Analytics / Firebase Analytics: For audience analysis (data generally anonymized).
• Google Gemini (AI): Gift idea request data is sent to Google's API for processing. For Secret Santa, only the relevant wish list and the budget are sent, without any first name.
• Merchants and affiliate programs: To fill in a wish added from a link, our servers read the merchant's page: the merchant receives no data about you. A book added by its ISBN is looked up by that number alone on Google Books or Open Library. Some links to a merchant are partner links (for example Amazon Associates): the program then receives a wish identifier, never personal data. Each click to a merchant is counted, without a name.
• Web hosting (Vercel Inc.): For website browsing data.

5. Partner Links

When you tap a button leading to a merchant's site, Dogivo records: the identifier of the wish and of the event concerned, the feature used (wish list, collection or Secret Santa), the merchant, whether or not the link is a partner link, the country or language of your device, and the date of the click. This data is used to measure use of the service and to account for the commissions paid by partner merchants. It contains neither your name, nor your email address, nor your IP address, and is not passed on to merchants. Legal basis: Dogivo's legitimate interest (funding a free service). Retention period: 24 months.

Once you are on the merchant's site, the merchant may set its own cookies and process your data under its own privacy policy, over which Dogivo has no control.

6. Transfers outside the European Union

Some data may be processed in the United States by our service providers (Google). These transfers are governed by the European Commission's standard contractual clauses to ensure a level of protection equivalent to the GDPR.

7. Retention Period

• Account and profile data: Your data (email, nickname) is kept for as long as your account is active.
• Content and messages (Chat): Messages exchanged and ideas suggested are kept to ensure the continuity of the service and so contributors can access the history of events.
• Secret Santa: A group, with its draw, messages and lists, is kept until the organizer deletes it. When you delete your account, your first names remain in groups that have already been drawn, which the other participants need to play, but nothing links them to your account anymore; your wish lists are erased, and the groups you were organizing without having drawn them are deleted. Reports are kept for as long as it takes to handle them.
• Wish lists: A list, its wishes and their photos are kept until their owner deletes them, or deletes their account. Claims, secret ideas and thank-yous disappear with the list. A child's list that you managed with someone else stays with that person. When you delete your account, your thank-yous and their photos are erased, your claims on other people's lists are canceled, your secret ideas stay there without your first name, and you leave your circles. A circle keeps the first names of its members and of those added without the app, until its last member leaves. The email address left by a loved one is only used to notify them and pass on the thank-you: it is erased one month after the celebration.
• App reviews: Kept for as long as they help improve the app. Since they are not linked to any account, they cannot be found to be erased with it: don't write anything in them that identifies you.
• Deletion on request: In accordance with the “right to be forgotten”, all your personal data (account, identifiable messages, contributions) is permanently deleted within 30 days of your account deletion request made through the app or by email.
• Prolonged inactivity: Dogivo reserves the right to delete accounts and associated data after a prolonged period of inactivity (e.g. 3 years without signing in), after informing the user by email.

8. Security

Dogivo implements technical security measures (encryption, restricted access) to protect your data against unauthorized access, modification or deletion.

9. Your Rights (GDPR)

In accordance with the regulations, you have the following rights:

• Right of access and rectification.
• Right to erasure (“right to be forgotten”).
• Right to restriction of processing.
• Right to data portability.
• Right to object.

You can exercise these rights at any time by writing to: contact@dogivo.app. We undertake to respond to any request within one month of receiving it.

10. Cookies and Trackers

Our website uses two kinds of cookies:

• Technical cookies: Strictly necessary for the website to work properly (no consent required).
• Analytics cookies: Used to measure audience and improve our services (e.g. Vercel Analytics). These are only set after you give your consent through the cookie banner shown on your first visit.

You can withdraw your consent at any time through your browser settings or by contacting us at contact@dogivo.app. No advertising or retargeting cookies are used.

11. Protection of Minors

Use of Dogivo by minors under 15 requires, in principle, parental consent for data processing. Dogivo encourages parents to supervise their children's use of the app.