Privacy Policy

Private by default. HintVault is not a social wishlist, marketplace, or public profile. Your vault is for you. We do not sell your personal data.

• Account information — email address and sign-in provider details (for example Apple or email/password through Firebase Authentication).
• Vault content you create — people, hints, occasions, inbox captures, past gifts, gift briefs, preferences, notes, links, and related metadata.
• Reminder settings — notification preferences, timezone, quiet hours, and scheduled reminder data.
• Device information for push reminders — if you enable notifications, we store a push token and platform identifier so reminders can reach your device.
• Support messages — if you email us, we receive what you send.

• Provide the app: sync your vault, generate gift briefs, and schedule reminders.
• Authenticate you and keep your account secure.
• Respond to support requests.
• Improve reliability and fix bugs using privacy-safe usage signals.

We do not use your hint text, person names, or gift details for advertising.

When you use AI parsing or gift brief generation, HintVault sends only the data needed for that request to our server, which may call a third-party AI provider (such as Google Gemini). Prompts are handled server-side. We do not log full hint text in analytics.

We do not use your vault content to train AI models unless a future feature explicitly asks for your opt-in and our provider agreement allows it.

Discreet reminders are the default. Unless you turn on detailed previews, notification text avoids revealing specific people, gifts, or occasions on your lock screen.

On iOS, local reminders may be scheduled on your device. Server push reminders, when enabled, are delivered through Apple Push Notification service and Expo's push infrastructure.

We may track privacy-safe product events such as:

• hint_created
• person_created
• brief_generated
• reminder_opened
• paywall_viewed

We do not include hint text, person names, gift names, raw URLs, screenshots, or receipt content in analytics events.

HintVault uses Google Firebase (Authentication and Cloud Firestore) and Vercel for hosting. Data is transmitted over HTTPS. Access to your vault is scoped to your account.

• Export — download a JSON copy of your vault from Settings in the mobile app.
• Delete account — permanently removes your Firebase account and associated vault data.
• App lock — optional Face ID, Touch ID, or device passcode on supported devices.
• Notifications — enable or disable reminders in Settings.

Your vault data stays until you delete it or delete your account. If you delete your account, we remove your user data from our primary systems. Backup copies may persist for a limited period as part of normal infrastructure retention.

HintVault is not directed at children under 13. We do not knowingly collect personal information from children.

We may update this policy as the product evolves. We will post the new version on this page and update the "Last updated" date.

Questions about privacy? Email support@hintvaultapp.com.