Privacy Policy

Introduction

Egregius Digital ("we," "our," or "us") is a company based in Alberta, Canada, and operates the Kindred: The Giving List mobile application (the "App"). This privacy policy explains how we collect, use, and protect your information when you use our App.

Governing Law and Jurisdiction

Egregius Digital is subject to the laws of Alberta, Canada, including the Personal Information Protection Act (PIPA). While we welcome users from around the world, our privacy practices are governed by Canadian and Alberta provincial law.

• Our primary legal obligations are to Canadian privacy laws
• We implement reasonable measures to comply with international privacy standards
• Users from other jurisdictions use our service subject to Canadian privacy law
• Where local laws provide additional protections, we will honor them where reasonably possible

Information We Collect

Account Information

• Email address (required for account creation)
• Display name (can be real or chosen name)
• Birthday (optional - can be real or chosen date)
• Country/region (selected during setup)
• Profile photo (if using Google sign-in)

App Usage Data

• Gift lists and wish list items
• Group memberships and family connections
• Children's information (names and birthdays - can be real or chosen)
• Events, occasions, and birthday reminders
• Activity within groups (adding items, joining groups, etc.)
• App preferences and settings

Technical Information

• Device information (model, operating system)
• App version and platform (Android/iOS)
• Firebase Cloud Messaging tokens (for notifications)
• Error logs and crash reports (for debugging)
• Anonymous usage analytics

How We Use Your Information

We use your information exclusively to:

• Provide Core Functionality: Enable gift coordination, group management, and list sharing
• Send Notifications: Birthday reminders, holiday alerts, and group activity updates
• Improve the App: Fix bugs, analyze usage patterns, and enhance features
• Ensure Security: Authenticate users and prevent unauthorized access
• Legal Compliance: Maintain records required by law

Information Sharing

Within Groups

When you join groups, the following information is shared with other group members:

• Your display name and birthday (if provided)
• Your gift lists and children's information
• Your activity within the group

Third-Party Services

We use these trusted services to operate the app:

• Firebase (Google): Data storage, authentication, and notifications
• Google Sign-In: Optional authentication method
• Apple Sign-In: Optional authentication method (iOS)
• Google AdMob: Non-intrusive banner advertisements

Your Privacy Controls

What You Can Control

• Choose any display name (real or fictional)
• Optionally provide birthday (real or fictional)
• Control which groups you join and leave
• Delete your account and all data at any time
• Manage notification preferences

Group Privacy

• Information is only shared within groups you voluntarily join
• You can leave groups at any time
• Anonymous gift claiming protects surprises

Data Security

• All data is stored securely using Firebase with industry-standard encryption
• Communications between your device and our servers are encrypted
• We implement appropriate security measures to protect your information
• Access to your data is limited to essential app functionality

Children's Information

• The app allows users 13+ to create accounts
• Parents may add children's information (names/birthdays) for gift coordination
• Children's information is only shared within family groups
• Parents control all information about their children
• Real names and birthdates are not required

Data Retention

• Your data is stored as long as your account is active
• When you delete your account, all personal data is permanently removed
• We may retain anonymous usage statistics for app improvement
• Legal compliance records are kept as required by law

Your Rights

Depending on your location, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Delete your personal information
• Restrict processing of your information
• Data portability (receive your data in a common format)

Changes to This Policy

We may update this privacy policy periodically. When we do:

• We'll notify you through the app
• The "Last Updated" date will be revised
• Continued use after accepting changes constitutes agreement to the new terms
• You can review the current policy at any time

International Data Transfers

Important Notice for Canadian Users: Your personal information may be stored and processed outside of Canada using Google Firebase services, which may store data on servers located in the United States and other countries. This means your information may be subject to the laws of those jurisdictions, including potential access by government authorities under their legal frameworks.

• Primary data storage: Google Firebase (servers may be located in the US and other countries)
• Authentication services: Google and Apple (servers in multiple countries)
• Your data receives the same protection regardless of server location
• We implement appropriate safeguards for international transfers

Your Rights Under Alberta PIPA

If you are in Alberta, Canada, you have specific rights under the Personal Information Protection Act (PIPA):

Access and Correction Rights

• You can request access to your personal information we hold
• You can request corrections to inaccurate personal information
• We will respond to access requests within 30 days
• We may charge a reasonable fee for access requests (estimate provided in advance)
• You can challenge our response through the Alberta Privacy Commissioner

Consent Withdrawal

• You can withdraw consent for data collection and use at any time
• Withdrawal can be done by deleting your account in app settings
• Some services may no longer be available after withdrawal
• We will stop collecting and using your data upon withdrawal notification
• Legal obligations may require us to retain some information even after withdrawal

Privacy Officer

Our designated Privacy Officer responsible for PIPA compliance:

Filing Complaints

You can file privacy complaints with:

• Office of the Information and Privacy Commissioner (OIPC) of Alberta
• Website: oipc.ab.ca
• Phone: 1-888-878-4044

Data Retention and Destruction

Retention Periods

• Account Data: Retained while account is active
• Gift Lists: Retained while account is active
• Group Activity: Retained for 2 years for functionality
• Analytics Data: Anonymized and retained for 26 months
• Legal Compliance Records: 7 years as required by law
• Error Logs: 90 days for debugging purposes

Destruction Procedures

• Personal data is permanently deleted when retention periods expire
• Account deletion removes all personal data within 30 days
• Backups containing personal data are deleted within 90 days
• Anonymous usage statistics may be retained indefinitely

Legal Compliance

This privacy policy complies with:

• Google Play Store privacy requirements
• Apple App Store privacy guidelines
• General Data Protection Regulation (GDPR) where applicable
• California Consumer Privacy Act (CCPA) where applicable
• Other applicable privacy laws

For more information about our terms of service and legal compliance, please review our Terms of Service within the app.