This Privacy Policy explains how dm.gifts ("dm.gifts", "we", "our", or "us") collects, uses, stores, shares, and protects your information when you use our mobile application, website, and related services (collectively, the "Service").
dm.gifts allows users to create profiles, send direct messages, purchase credits, and send gifts to other users. By using the Service, you agree to the practices described in this Privacy Policy.
1. Information We Collect
1.1 Information You Provide
- Email address
- Display name, username, and profile photo
- Bio, social links, and other profile information you choose to add
- Account role or preference, such as sender or receiver
- Messages, gift notes, and other content you submit through the Service
- Support requests, reports, or communications you send to us
1.2 Authentication Information
If you sign in using a third-party provider, we may receive certain account information from that provider.
- Google Sign-In: We may receive your name, email address, profile photo, and Google account identifier.
- TikTok Login: We may receive your TikTok user ID, username, display name, avatar, and public profile link, depending on the permissions granted. We do not access your private messages, follower lists, or unpublished content unless expressly authorized and supported by the provider.
1.3 Payment and Transaction Information
- Payments, credit purchases, and payouts are processed by Stripe and related payment partners.
- We do not store full credit card numbers or full bank account details on our own servers.
- We may store transaction-related records such as transaction ID, sender ID, recipient ID, amount, currency, status, timestamps, payout status, refund status, and related fraud or compliance signals.
- Where required for payouts, tax, identity verification, or legal compliance, Stripe or its partners may collect additional information directly from you.
1.4 Automatically Collected Information
- Device type, operating system, app version, language, time zone, and approximate location based on IP address
- Log data, crash reports, performance data, and diagnostic information
- Usage data such as features used, screens viewed, session duration, and interaction events
- Firebase Analytics, Firebase Crashlytics, and similar service-generated analytics data
2. How We Use Your Information
We use your information to:
- Provide, operate, maintain, and improve the Service
- Create and manage your account
- Authenticate users and prevent unauthorized access
- Process payments, gifts, withdrawals, refunds, and payouts
- Display your profile and facilitate interactions between users
- Deliver messages, gift notifications, confirmations, receipts, and support responses
- Detect, investigate, and prevent fraud, abuse, chargebacks, money laundering, and other harmful activity
- Enforce our Terms of Service and other platform rules
- Monitor service performance, fix bugs, and improve user experience
- Comply with legal obligations, financial recordkeeping requirements, and lawful requests from authorities
3. Public Profiles, Messages, and Gifts
3.1 Public Profile Information
Your username, display name, profile photo, bio, and other information you choose to make public may be visible to other users or visitors of the Service.
3.2 Direct Messages
Messages and related metadata are processed and stored so that the Service can deliver conversations between users. Message content is intended to be visible only to the sender, recipient, and authorized service providers acting on our behalf, unless disclosure is required for safety, abuse investigations, legal compliance, or enforcement of our Terms.
3.3 Gifts and Transaction Visibility
When you send a gift, certain information may be visible to the recipient, such as your username, display name, profile photo, message or gift note, amount sent, and transaction date, depending on the product design and your settings.
We may also maintain internal records linking gift senders and recipients for fraud prevention, accounting, dispute handling, legal compliance, and customer support.
4. Legal Bases for Processing
Depending on your location, we may process personal information on one or more of the following legal bases:
- To perform our contract with you and provide the Service
- To comply with legal obligations
- For our legitimate interests, such as security, fraud prevention, analytics, and service improvement
- Based on your consent, where consent is required by applicable law
5. How We Share Information
We do not sell your personal information. We may share information in the following circumstances:
- Service providers: Including Google Firebase / Google Cloud for authentication, hosting, databases, storage, analytics, notifications, and technical operations.
- Payment processors: Including Stripe for payment processing, fraud checks, identity verification, Stripe Connect onboarding, payouts, and financial compliance.
- Other users: Information included in your public profile, sent messages, and gift activity as necessary for the Service to function.
- Professional advisors and business transfers: Such as auditors, lawyers, insurers, or in connection with a merger, acquisition, financing, or sale of assets.
- Legal and safety reasons: When we believe disclosure is necessary to comply with applicable law, enforce our terms, respond to lawful requests, protect rights or property, or protect users and the public from fraud, abuse, or illegal activity.
6. Data Retention
We retain personal information for as long as reasonably necessary to provide the Service, maintain business and financial records, resolve disputes, enforce our agreements, and comply with legal obligations.
- Account information is generally retained while your account remains active.
- Transaction and payout records may be retained for longer periods to satisfy accounting, tax, anti-fraud, and legal requirements.
- Messages and related content may remain stored until deleted by you, the other user, or us under our retention practices.
- Backup copies may persist for a limited period after deletion.
7. Data Storage and Security
We use administrative, technical, and organizational measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
- Data is stored using Firebase and Google Cloud infrastructure
- Sensitive financial state changes are restricted to trusted backend logic, such as server-side functions
- Authentication tokens and sessions are transmitted using encrypted connections
- Access controls, security rules, and monitoring are used to reduce unauthorized access
- We may review logs and account activity to detect abuse, fraud, and security incidents
8. Your Rights and Choices
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Correct or update inaccurate information
- Delete your account and certain personal data
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
- Request data portability where applicable
- Unlink Google, TikTok, or other connected sign-in methods, subject to account security requirements
Some information may be retained where required for legal compliance, fraud prevention, dispute resolution, or financial recordkeeping.
9. Account Deletion
You may request deletion of your account by using in-app settings, if available, or by contacting us. When we process an account deletion request, we will delete or de-identify personal information unless we need to retain certain data for legal, security, fraud-prevention, accounting, tax, or payment-related reasons.
10. Cookies, SDKs, and Tracking Technologies
We may use cookies, local storage, software development kits (SDKs), and similar technologies for authentication, security, analytics, crash reporting, and service functionality.
- Essential technologies may be required for login, session management, and security
- Analytics tools such as Firebase Analytics may collect app interaction and performance data
- We do not use third-party advertising cookies unless specifically disclosed in an updated policy
11. International Data Transfers
Your information may be transferred to, stored in, or processed in countries other than the country where you live. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we take steps designed to provide appropriate safeguards for such transfers.
12. Children's Privacy
The Service is not intended for individuals under the age of 18, or any higher minimum age required by local law. We do not knowingly collect personal information from children. If we learn that a child has provided personal information in violation of this policy, we will take reasonable steps to delete the information and close the account.
13. Fraud Prevention and Compliance
Because dm.gifts involves monetary transfers between users, we may monitor activity, transaction patterns, device signals, and account behavior to detect suspicious activity, abuse, fraud, chargebacks, unauthorized transactions, or violations of law. We may suspend transactions, limit features, or request verification where reasonably necessary.
14. Third-Party Services
The Service may contain links to or integrations with third-party services, including Google, TikTok, and Stripe. Their privacy practices are governed by their own policies, and we are not responsible for their independent practices.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date. If changes are material, we may provide additional notice through the app, website, or email. Your continued use of the Service after the effective date of an updated Privacy Policy means the updated policy will apply going forward.
16. Contact Us
If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact us at support@dm.gifts.