Privacy Policy

• Account & contact: your name, email, and login (via Google sign-in, magic link, or password).
• Photos & facial geometry (biometric): photos you upload, and the facial features the AI analyzes to blend a face into a card. See the biometric section below.
• Card & gift content: your answers, bios about your recipients (“Pong Peeps”), recipient names, emails, and phone numbers (only if you choose to share a card by text), messages, and generated cards.
• Google Calendar & Contacts (only if you connect them): birthdays, events, and contact names you choose to import.
• Payments: handled by Stripe — we never see or store your full card number.
• Usage & device data: basic logs needed to run and secure the service.

When you upload a photo and choose to blend, the AI analyzes the geometry of the face in that photo. This may be a biometric identifier under laws such as the Illinois Biometric Information Privacy Act (BIPA). Here is the short version; the full written policy lives at /biometric-policy:

• Consent & purpose: we collect and use facial geometry only with your consent and only to generate the card you asked for. Nothing else.
• No selling, ever: we never sell, lease, trade, or profit from biometric data, and we never share it except with the processors needed to generate your card (below).
• Retention & destruction: we keep your photos and any facial geometry only as long as needed to create and let you view or re-share your card. We destroy biometric facial geometry when that purpose is satisfied, on your deletion request, or within three (3) years of your last interaction with Gift Pong — whichever comes first.
• Your control: delete your photos and account anytime from your settings or by emailing us.

To create and deliver your cards and gift suggestions, personalize gift picks, send the transactional + reminder emails you opt into, run your subscription, prevent abuse, and comply with law. We do not use your data for third-party advertising.

1. Supabase — our database (row-level security: only you read your own data).
2. Anthropic (Claude) — gift suggestions. Not trained on API data; prompts deleted within 30 days.
3. Google (Gemini) — card artwork and the face-blend step: your uploaded photo is sent here to render your face into the art. Paid-tier prompts not used for training; deleted within 24 hours.
4. fal.ai — the optional Pro “motion” render that animates a finished card cover.
5. Sightengine — automated safety moderation that scans uploaded and AI-generated images for prohibited content.
6. Microsoft (PhotoDNA) — child-safety scanning: a non-reversible hash of each uploaded photo is checked against known-CSAM hash databases. Only the hash leaves our systems — it cannot be reversed back into your image — and any confirmed match is reported to NCMEC as required by law.
7. Stripe — payments.
8. Resend — sending your emails.
9. Tremendous / gift-card provider — gift-card fulfillment (recipient name/email + amount), only if/when gift sending is enabled.

If any vendor ever changed its terms to allow selling our customers’ data, we would migrate off them. The way we make money never involves selling your data — our revenue is affiliate commissions (paid by a retailer when a gift link is clicked), paid subscriptions, and, where offered, gift-card fulfillment. None of those involves selling your data, and those merchants never see your bio or biometric data.

If you connect Google Calendar/Contacts, Gift Pong’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use it only to surface your birthdays/events/contacts inside Gift Pong, never for ads, and never sell or transfer it. Disconnect anytime in settings.

Depending on where you live (e.g., California/CCPA-CPRA and other state laws), you may have the right to know, access, correct, delete, and opt out of the sale or sharing of your personal information. We do not sell or share your personal information for cross-context behavioral advertising. To exercise any right, use your settings or email support@giftpong.com; we will not discriminate against you for exercising them.

Gift Pong is for adults 18 and older. We verify date of birth at signup and block anyone under 18, because our face-blending analyzes biometric identifiers (facial geometry) that a minor cannot lawfully consent to. We do not knowingly collect personal information — including photos or facial templates — from any minor, and never from a child under 13 (consistent with COPPA, 16 CFR Part 312). If we learn a user is under 18, we remove the account and delete the data. A parent or guardian who believes a minor has used Gift Pong may contact support@giftpong.com and we will delete the information.

We keep information only as long as needed for the purposes above or as required by law, then delete or de-identify it. We use reasonable technical and organizational safeguards. You can delete your account and data anytime in settings, or download a copy of your data there first. If a data breach affecting your personal information occurs, we will notify you and regulators as required by applicable law.

One narrow exception to deletion: if specific content has been reported to the National Center for Missing & Exploited Children (NCMEC) because it appears to be child sexual abuse material, federal law requires us to preserve that specific item for one year. That item is retained for the required period for law-enforcement purposes even if you delete your account, and is then destroyed.

We’ll post material changes here with a new date. The legal version of these commitments lives in our Terms & Conditions. Questions or requests: support@giftpong.com.