Effective: 1 April 2025 · Last updated: 1 April 2025
GiftKhata is a free, open community project — not a company. There is no registered entity, no commercial intent, and no investors. We built this to help Indian families manage gift records at functions. This policy is written in plain language so you actually understand how your data is handled.
GiftKhata is a personal side project maintained by a small group of volunteers. There is no registered company, no registered address, and no legal entity behind this application. When we say "we" or "us" in this policy we mean the volunteer contributors to this project.
Questions? Email us at support@giftkhata.com.
We use OAuth 2.0 (Google, Facebook, Apple, LinkedIn). When you sign in, your provider shares your name, email address, and profile photo with us. We store only these three fields. We never see or store your password.
Everything you type into the app — gift records, event details, person names, phone numbers, cities, family tree data — is stored in our database linked to your account. You own this data. We don't read it, analyse it, or use it for any purpose other than showing it back to you.
Our hosting provider (Firebase / Google Cloud) automatically logs standard server request data: IP address, browser type, and timestamps. We do not add any additional analytics, session recording, or behavioural tracking on top of this.
We use your data for exactly one purpose: to run the app for you.
We do not sell your data. We do not share it with advertisers. We do not use it to train AI models. We do not analyse it for business insights.
Your data is private to your account. Nobody else can see it through the app. The volunteer maintainers have administrative access to the database for the sole purposes of keeping the service running and responding to support requests.
We use the following third-party services to run the app. Each receives only the minimum data required:
We will share your data with law enforcement only if required by a valid court order under Indian law.
You can, at any time:
These rights are consistent with the Digital Personal Data Protection Act, 2023 (India).
We take reasonable precautions: data is encrypted in transit (HTTPS/TLS) and at rest on Firebase's infrastructure. Authentication is handled by your OAuth provider — we never handle passwords directly.
GiftKhata is intended for adults (18+). We don't knowingly collect data from children. If you believe a child has signed up, email us and we'll delete the account.
We use only essential session cookies set by Firebase for keeping you signed in. No advertising cookies, no third-party tracking pixels.
If we make material changes we'll update the "Last updated" date at the top of this page and, where possible, notify you in-app. The latest version is always at this URL.
This is a community project so please be patient. For privacy questions or data deletion requests, email support@giftkhata.com. We'll do our best to respond within a week.