Privacy Policy

Account data: name, email, username (your personal link), and a hashed password.

Profile and gift data: the occasions you create, and the product links and descriptions you add.

Reservation data: we record that a gift is 'reserved' to avoid duplicates, without revealing who reserved it — reservations are anonymous by design.

Technical and usage data: IP address (stored as a hashed visitor_hash, not raw IP), device and browser type, and cookies.

Store click data: a click_id when you tap the buy button, used for commission attribution — after you consent to tracking.

To operate the platform, publish your public profile, and enable gift reservations (performing the service you requested).

To measure clicks to stores and attribute the commission (based on your explicit consent).

To improve the service and protect it from fraud and abuse (legitimate interest and legal compliance).

We do not sell your personal data, nor use it for purposes not described in this policy.

We request your explicit consent via a banner shown before enabling any advertising tracking.

If you decline, we do not activate advertising tracking links; only cookies strictly necessary to run the site remain.

You can change your choice at any time by clearing your browser data or resetting your consent.

When you tap the buy button we redirect you via a tracking link to the store or a referral partner. A click_id and referral data may be shared with these parties to attribute the commission.

We may work with stores directly or via trusted referral partners to measure conversions and attribute the commission.

Your data with these parties is governed by their own privacy policies, which we do not control. We recommend reviewing them.

We apply data minimization: we share only the minimum needed for attribution, not your full personal data.

Traffic measurement: we use Google Analytics to understand how the platform is used (pages visited, device type). It is enabled only after you consent in the cookie notice; if you decline, no data is sent to Google.

Some stores, referral partners, and infrastructure providers operate servers outside the Kingdom of Saudi Arabia, which may involve transferring some of your data abroad.

Any external transfer is carried out in line with the transfer controls of the Personal Data Protection Law (PDPL) and its regulations.

Reserving a gift does not require creating an account. We do not ask for the reserving guest's name nor disclose it to the profile owner or anyone else.

We store a reservation token in your browser only, so you can cancel your reservation, without linking it to your identity.

We keep your account data as long as your account exists. On account deletion your data is deleted or anonymized within a reasonable period, unless the law requires retention.

Click and referral logs are kept for a limited period for commission proof and fraud prevention.

We apply technical and organizational safeguards, including password hashing, access restriction, and using a hashed visitor fingerprint instead of storing raw IPs.

No transmission or storage method is 100% secure, but we strive to protect your data with best practices.

Access: request a copy of the personal data we hold about you.

Correction: correct any inaccurate or incomplete data.

Deletion: request deletion of your personal data under the legal controls.

Withdraw consent: withdraw your consent to tracking or processing at any time, without affecting processing done before withdrawal.

Object and complain: file a complaint with the Saudi Data & AI Authority (SDAIA) if you believe there is a violation.

We may update this policy from time to time. We publish the updated version on this page with the last-updated date, and your continued use of the platform constitutes acceptance of the changes.

For any inquiry or to exercise your data rights, contact us through the platform's support channels.