Privacy

The short version

• Gifts you make and open in person stay on your phone.
• When you send a gift as a link, we store what the link needs to show it, for up to 90 days. You can take the link back sooner.
• There are no accounts. We don't show ads, and we don't use analytics or tracking.
• Apple handles purchases. We never see your payment details.

Who we are

For You is made by Devois, Inc., a company based in California, USA (“we”, “us”). You can reach us at our support page.

Gifts that stay on your phone

Everything you make in the app (names, messages, and the box, gift and style you choose) is saved on your device. We don't receive it. It may be included in your normal device backups, depending on your settings. Deleting a creation or the app removes it from your phone.

Gifts you send as a link

When you tap Send, the app uploads the gift to our server so the link can open it. We store:

• the recipient's name, your message and the optional second line;
• your name, if you added one;
• the design you chose (occasion, box, gift, theme and type style);
• when the gift was created and when it expires.

The link contains a long random code and nothing else. It can't be guessed, and we ask search engines not to index gift pages. Anyone who has the link can open the gift, so share it only with the person it is for.

We keep a shared gift for 90 days and then delete it. You can take a link back earlier from the app, and it stops working right away. To let you do that, your phone keeps a private key; our server stores only a one-way hash of it.

Shared gifts are stored with our database provider, Supabase, and the website and gift service run on Vercel. Both act on our behalf and may process data in the United States.

Preventing abuse

To limit how many gifts can be created or opened from one place, we use a salted hash of the IP address that made the request. We don't store the IP address itself with the gift, and the hash is kept only for a short time. Our hosting provider may also keep standard server logs, including IP addresses and the pages requested, for security and reliability. These logs can include a gift link's code but never the message.

What we don't do

For You has no accounts, contacts upload or social features. We don't show ads, sell or share personal information, or use analytics, advertising identifiers or tracking cookies in the app or on this website. If that ever changes, we will update this page first and ask for consent where the law requires it.

Purchases

Midnight Velvet and any future collections are sold through Apple's App Store. Apple processes the payment under its own privacy policy. The app only receives Apple's confirmation that the purchase is valid, and checks it on your device.

Permissions

The app uses the iPhone Duo hinge and motion sensors to animate the reveal. This happens on the device and nothing from these sensors is sent to us. On the web, a gift may use your device's motion for a small tilt effect where the browser allows it without asking.

Children

For You is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has sent us information, contact us and we will delete it.

Your choices and rights

You can take back any gift link from the app at any time. Because there are no accounts, we can't look up gifts by your name. If you want a shared gift removed and no longer have the app, send us the link and we will delete it.

Depending on where you live, including California, you may have the right to know what personal information we hold about you, to ask us to correct or delete it, and to not be treated differently for using these rights. We don't sell or share personal information as those terms are defined under California law. To make a request, contact us at our support page.

Changes

If we change this policy, we will update the date at the top of this page. If a change is significant, we will also mention it in the app.

Contact

Devois, Inc., California, USA. our support page.