Privacy Policy

This policy applies to Secret Santa — the iPhone app and the drawsecret.app website (together, the "Service") — offered by APPLU DIGITAL LTDA (the "Service Provider"). It explains what data the Service handles, why, who it is shared with and how you can delete it.

Data we handle

• Organizer account: the e-mail and password (stored only in encrypted form) of whoever creates an account to organize draws. If you sign in with Apple or Google, we receive the identifier and e-mail that service sends us.
• Device identifier: the app creates an anonymous session on your device to keep your groups before you have an account.
• Group data: group name, event date, participant names (and e-mail, when the organizer chooses to send the links by e-mail), wishlists, attendance confirmations, whether each person has opened their own link, and the messages in the group chat and the anonymous chat.
• Purchases: if you subscribe to Premium, we receive the subscription status from the store, through RevenueCat. We do not receive your card details.
• Technical data: IP address, device type and operating system, and access logs, used for security, abuse prevention and fixing errors.

The Service does not collect your location.

What we use it for

• Running the draw, creating and delivering each participant's individual link, and keeping the group, the wishlist and the chat working.
• Maintaining your account, unlocking Premium and restoring purchases.
• Sending the Service's own e-mails, such as the participant link and password recovery.
• Moderating the chat (reported messages may be reviewed) and protecting the Service against fraud and abuse.
• Showing ads in the free version.

Ads and tracking

The free version of the app shows ads from Google AdMob. The device's advertising identifier is only used if you allow it in the iOS tracking prompt; without that permission, ads do not use this identifier. You can change your choice at any time in Settings > Privacy & Security > Tracking. Premium subscribers do not see ads.

Who we share it with

We do not sell your data. It is shared only with providers that operate the Service on our behalf, each with its own privacy policy:

• RevenueCat — subscriptions and purchases.
• Google AdMob — ads in the free version.
• Hosting and e-mail delivery providers that keep the Service running.

We may also disclose data when required by law, to comply with a court order, or to protect rights and people's safety or investigate fraud.

People taking part in a draw

Participants do not need an account: their name (and e-mail, if the organizer provides it) is entered by the organizer. Each participant sees only their own result through their individual link. In the anonymous chat, the person you drew never sees your name.

How long we keep it

We keep the data for as long as the account and the groups exist. Technical logs are kept for as long as needed for security and legal obligations.

How to delete your data

You can delete your account at any time: in the app, under Settings > Account > Delete account; on the website, in your profile settings. When you delete your account, we delete your account data and the groups you organized. You can also request deletion by e-mail at geral@applu.me.

Children

The Service is not intended for children under 13 and does not knowingly collect their personal data. If you are a parent or guardian and know that a child has given us data, write to geral@applu.me and we will delete it.

Security

Data travels over an encrypted connection (HTTPS), passwords are stored with one-way encryption and internal access is restricted.

Changes

We may update this policy. The version in force is always on this page, with the date at the top.

Contact us

Privacy questions: geral@applu.me.