Privacy Policy

Your privacy is important to us. It is iFancy's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, https://ifancy.app, and other sites we own and operate.

iFancy is operated by T.A.H. & Associates, LLC, located in Boerne, Texas, United States (“iFancy”, “we”, “us” or “our”). This policy applies to the iFancy website, the iFancy web app, the iFancy mobile app and our related services (together, the “Services”). It forms part of our Terms of Use, and by using the Services you agree to the collection, use and sharing of information described in it.

This policy is effective as of 6 October 2021 and was last updated on 15 October 2026.

Information We Collect

Information we collect includes both information you knowingly and actively provide us when using or participating in any of our services and promotions, and any information automatically sent by your devices in the course of accessing our products and services.

Log Data

When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your device’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, other details about your visit, and technical details that occur in conjunction with any errors you may encounter.

Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.

Personal Information

We may ask for personal information which may include one or more of the following:

• Name
• Email
• Phone/mobile number
• A profile photo, if you choose to add one

We use your phone number to sign you in, which includes sending you one-time verification codes by text message through our authentication provider.

Information You Create in the App

Using iFancy means creating content, and we store it so the app can work: the wishlists you make, the items on them including titles, prices, links, notes and images, who you have marked as a friend, which items have been claimed or purchased, and the privacy settings you choose for each of these.

Your Contacts

iFancy includes an optional feature that reads your device's address book so it can remind you about upcoming birthdays. If you use it, we ask your device for permission first, and we store the names, phone numbers and birthdays of contacts who have a birthday saved. We do not read your address book unless you grant permission and use that feature, and we do not use contact data for advertising or share it with advertisers or data brokers. You can revoke access at any time in your device settings, and you can ask us to delete what we hold using the contact details at the end of this policy.

Please note that this information is about other people. If you choose to share it with us, you are responsible for having their permission to do so.

Technical and Diagnostic Information

To deliver notifications and keep the app working we store a device notification token, and we collect analytics about how the app is used (for example which features are opened and what is searched for) along with crash and performance diagnostics. This information is associated with your account so we can support you and fix problems you actually experience. The search at the top of our website works the same way: our analytics record what is searched for there too, whether or not you are signed in. If you agree when our support chat asks, the app can also record its screen while you show us a problem; see Support Chat below.

Legitimate Reasons for Processing Your Personal Information

We only collect and use your personal information when we have a legitimate reason for doing so. In which instance, we only collect personal information that is reasonably necessary to provide our services to you.

Collection and Use of Information

We may collect personal information from you when you do any of the following on our website:

• Sign up to receive updates from us via email or social media channels
• Use a mobile device or web browser to access our content
• Contact us via email, our support chat, social media, or on any similar technologies
• When you mention us on social media

We may collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed in a manner that is incompatible with these purposes:

• to enable you to customise or personalise your experience of our website
• to contact and communicate with you
• for analytics, market research, and business development, including to operate and improve our website, associated applications, and associated social media platforms
• for marketing, including to send you information about iFancy features, updates, and offers, which you can unsubscribe from at any time
• to enable you to access and use our website, associated applications, and associated social media platforms
• for internal record keeping and administrative purposes
• to keep the Services and their users safe and secure, to prevent and investigate fraud, abuse and violations of our Terms of Use, and to enforce our agreements
• to comply with our legal obligations, and to establish, exercise or defend legal claims

What We Do Not Do

We do not show advertising in iFancy. We do not collect an advertising identifier, and we do not track you across other companies' apps and websites. We do not combine what we know about you with data about you bought or obtained from other companies, and we do not sell or share your personal information with data brokers or advertising networks.

Where iFancy earns a commission — for example on some retailer links you choose to open — that happens through the link itself at the retailer, and it does not involve sharing your personal information with them.

Security of Your Personal Information

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure, and no one can guarantee absolute data security. We will comply with laws applicable to us in respect of any data breach.

You are responsible for selecting any password and its overall security strength, ensuring the security of your own information within the bounds of our services.

Privacy and visibility settings help you decide who sees what, but they are not a guarantee. People you share information with can copy or pass it on, and we are not responsible for anyone getting around our privacy settings or security measures.

How Long We Keep Your Personal Information

We keep your personal information only for as long as we need to. This time period may depend on what we are using your information for, in accordance with this privacy policy. If your personal information is no longer required, we will delete it or make it anonymous by removing all details that identify you.

However, if necessary, we may retain your personal information for our compliance with a legal, accounting, or reporting obligation or for archiving purposes in the public interest, scientific, or historical research purposes or statistical purposes.

Support chats are kept for the periods described under Support Chat below.

Public Profiles and Wishlists

iFancy is built for sharing. Some of what you put into it is deliberately visible to people outside the app, and this section explains exactly what, so there are no surprises.

What is publicly visible

Your profile page — your name, your profile photo if you add one, your profile colour, and any wishlist you have set to Public along with the items on it — can be viewed by anyone who has the link, unless you have made your whole profile private. No account and no login is required. This is the core of how iFancy works: you send a link to family or friends, and it opens for them.

Because these pages are served on the open web, we cannot control who a link is forwarded to once you have shared it.

What is not publicly visible

Wishlists set to Friends Only or Private are never shown to people who are not signed in, and neither are individual items you have limited to specific friends. Purchase information is never included on a publicly viewable page, so opening your own profile while signed out will not spoil a gift. Your phone number and email address are never displayed on your profile.

Search engines

Each wishlist has a Show in Google setting that controls whether search engines may list it. It is switched off by default. Unless you turn it on, we ask search engines not to index your profile, and sharing your link works exactly the same either way.

If you do switch it on, please understand what that means: search engines and other automated services may copy, store, and display your name and the contents of that wishlist, and they operate independently of us. If you later switch it off, we ask them to remove the page, but we cannot control how quickly that happens or whether cached or third-party copies persist. Anything you have made public may also be saved or shared by people who saw it.

Your controls

You decide what is public, at every level: you can make your whole profile private, set each wishlist to Public, Friends Only, or Private, limit individual items to specific friends, and turn the search engine setting on or off per wishlist. These controls are in the app under your profile and wishlist settings.

You are responsible for the content you choose to publish. If you would prefer something not be publicly accessible, do not put it on a public wishlist — the privacy controls above, and ultimately the choice not to use the Services, are the means by which you decide this. Your continued use of iFancy means you accept that content you mark as public is publicly accessible on these terms.

Support Chat

Our support chat is answered by Ellie, an AI assistant, not a person. This section explains what the chat collects, who processes it, who reads it and how long we keep it.

What the chat collects

• What you write in the chat, and any screenshots you add. You can add screenshots only when you are signed in.
• An email address, if you give us one in the chat so we can reply, and your rating of the chat, if you give one.
• Details about your device and browser, such as your browser and operating system, language, time zone and window size, and the page you are on.
• If you are signed in, the chat is linked to your account and includes your name and the email address on your account. To help you, Ellie can also look up details in your account, such as your lists and lists shared with you, their items and who can see them, your notification settings and recent notifications, and the names of people you follow, who follow you or who share lists with you. She can read these details but cannot change anything in your account.
• A screen recording, only if you agree when Ellie asks to record a problem while you try it again. This is offered only in the iFancy app and only when you are signed in. The app records its own screens from when you tap Start recording until you tap Done or it stops by itself, so the recording shows whatever those screens show, such as your lists and their items and images and the names of people on them. The chat itself is not recorded.

Who processes it

To write Ellie's replies, and to summarize chats when they end, we send the chat to AI service providers. That includes your messages and screenshots, the device and browser details above and what Ellie looks up, and it can include your name and, if Ellie asks where we should reply, your email address. The AI service providers we use for this are all based in the United States, and we reach them through an AI gateway run by Vercel, our hosting provider.

We store chats with Upstash, our database provider, and screenshots in private storage at Vercel, and we receive copies of chats by email through Resend, our email provider. Our website analytics provider, PostHog, and, in the iFancy web and mobile apps, our app analytics provider record that the chat was used, for example when a chat is opened, a message is sent or a chat ends, but not what you write.

A chat can also include details about other people. If you are connected to someone who uses the chat while signed in, for example one of you follows the other or you share a list, what Ellie looks up for them can include your name and, for a list you share with them, its name and items. These can be sent to AI service providers and kept with their chat, as this section describes.

A screen recording goes from the app to Sentry, the error-monitoring provider we use to look into problems in the app, and our copy of the chat links to it. It is not sent to AI service providers, and Ellie does not see it.

If you send us a message through the chat's message form instead, for example after choosing “Message us instead”, it comes to us by email with the details above and is not sent to AI service providers.

Who reads your chats

We read support chats and the summaries made of them, and we may watch a screen recording you agreed to. When a chat ends, we usually receive a copy by email, with any screenshots you sent, and we may reply to the email address you gave in the chat or to the one on your account. If a chat reports a problem or suggests an idea, we may copy its summary, your device and browser details and, if you were signed in, your account's ID into the private tool we use to track our work. AI tools that help us with that work may read what we copy there.

Preventing misuse

To keep the chat available and protect it from bots and misuse:

• Your browser makes a random ID for itself and keeps it in its local storage, whether or not you are signed in. If you use the chat without signing in, we also sign a token for that ID, which your browser keeps with it. The ID is sent with your chats, so chats from the same browser can be linked, including ones from before and after you sign in.
• If you are not signed in, a check from our hosting provider (Vercel BotID) runs in your browser to tell people from automated bots, and we use your IP address for a short time to limit how much can be sent from it.
• If a chat is ended for misuse, or if we decide to block you after reading a chat, we may keep a record against your browser's ID and, if you were signed in, your account, and we may limit or block your access to the support chat. Ellie and automated checks decide when a chat is ended for misuse, and any limit or block that follows from it is applied automatically. We keep these records for as long as we need them to prevent further misuse, which after a block can be until we lift it. Records kept against a browser's ID stay even if an account used on that browser is deleted. If you think we have blocked you by mistake, contact us using the details at the end of this policy.
• If you were not signed in, we may also keep your IP address with a chat that was ended for misuse, and it may appear in the copy emailed to us. If we block a visitor who was not signed in, we may block their IP address too, for a limited time.

How long we keep chats

We delete support chats, with any screenshots in them, about 90 days after the chat ends. That schedule does not cover the copies of chats emailed to us, including any screenshots, or messages sent through the chat's message form: those stay in our email until we delete them. Anything we copy into our work tracker stays there. Parts of a chat may also remain for a limited time in our server logs. The AI service providers and the AI gateway handle what we send them under their own terms, which may let them keep it for a limited time, for example to detect abuse.

Screen recordings are kept by Sentry for up to 90 days and then deleted automatically. Deleting the chat does not delete its recording sooner, and you can ask us to delete one using the contact details at the end of this policy.

Deleting your iFancy account also deletes the support chats you had while signed in, with any screenshots in them, and the records we keep against your account to prevent misuse, including blocks. It does not delete chats you had while signed out, records kept against a browser's ID, screen recordings, or the copies of chats already emailed to us. Those are kept as this section describes above, and you can ask us to delete them sooner using the contact details at the end of this policy.

Children’s Privacy

We do not aim any of our products or services directly at children under the age of 13, and we do not knowingly collect personal information from children under 13.

Children under 13 may not have their own iFancy account. A parent or guardian may keep wishlists for a child in their own account; when they do, the parent or guardian decides what to share about the child and who can see it. If we learn that we have collected personal information from a child under 13 without a parent's or guardian's consent, we will delete it. If you believe this has happened, please contact us using the details at the end of this policy.

Disclosure of Personal Information to Third Parties

We may disclose personal information to:

• a parent, subsidiary, or affiliate of our company
• third party service providers for the purpose of enabling them to provide their services, for example, IT service providers, data storage, hosting and server providers, email delivery providers, AI service providers, or analytics and diagnostics platforms
• our employees, contractors, and/or related entities
• our existing or potential agents or business partners
• sponsors or promoters of any competition, sweepstakes, or promotion we run
• courts, tribunals, regulatory authorities, and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise, or defend our legal rights
• third parties, including agents or sub-contractors, who assist us in providing information, products, services, or direct marketing to you, or who collect and process data on our behalf
• other people, as you direct, for example when you share a wishlist, make it public, or invite someone to edit it with you
• anyone, where we believe disclosure is necessary to protect the rights, property or safety of iFancy, our users or others, or to enforce our Terms of Use
• a buyer, successor or other party in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets, in which case your information may be transferred as one of the assets

International Transfers of Personal Information

The personal information we collect is stored and/or processed where we or our partners, affiliates, and third-party providers maintain facilities. Please be aware that the locations to which we store, process, or transfer your personal information may not have the same data protection laws as the country in which you initially provided the information. If we transfer your personal information to third parties in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred personal information in accordance with this privacy policy.

The AI service providers that write Ellie's replies and chat summaries are all based in the United States (see Support Chat above).

Your Rights and Controlling Your Personal Information

You always retain the right to withhold personal information from us, with the understanding that your experience of our website may be affected. We will not discriminate against you for exercising any of your rights over your personal information. If you do provide us with personal information you understand that we will collect, hold, use and disclose it in accordance with this privacy policy. You retain the right to request details of any personal information we hold about you.

Depending on where you live, you may also have the right to ask us to correct or delete your personal information, to receive a copy of it, or to object to or restrict certain uses of it. To make a request, contact us using the details at the end of this policy. We may need to confirm your identity first, and we may decline requests where the law allows.

You can delete your account at any time from Settings in the app. When you do, we delete your account and the content associated with it. That includes the support chats you had while signed in and the records we keep against your account to prevent misuse of the support chat; the Support Chat section above explains what is kept after that. Some information may remain for a limited time in backups and logs, and we may keep information where we need it for legal, security or fraud-prevention reasons. Copies that other people already have, such as information they saved or that was shared with them, and pages that search engines or other third parties have stored, are outside our control.

If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person’s consent to provide the personal information to us.

If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time. We will provide you with the ability to unsubscribe from our email-database or opt out of communications. Please be aware we may need to request specific information from you to help us confirm your identity.

If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us using the details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or out of date.

If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.

Use of Cookies

We and our service providers use “cookies” and similar technologies, such as your browser's local storage, to collect information about you and your activity across the Services. A cookie is a small piece of data that a website stores on your device and reads when you come back. We use these technologies to keep you signed in, remember your preferences and settings, keep the Services secure, and understand how the Services are used.

Our support chat uses your browser's local storage to keep a random ID for your browser, a token we sign for that ID if you use the chat without signing in, which chat you have open, and when you last opened the chat or hid its button. The ID stays until you clear this site's data, and the token lasts 7 days and is renewed when you open the chat. We use these to keep your chat going and to help prevent misuse, not for advertising. If you are not signed in, the chat also runs a check from our hosting provider in your browser to tell people from bots.

You can block or delete cookies and site data in your browser's settings, but parts of the Services may not work properly without them.

Limits of Our Policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

Changes to This Policy

At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here at the same link by which you are accessing this privacy policy.

When we change this policy, we will update the date at the top. If a change is material, we will also let you know by reasonable means, such as by email or a notice in the app or on our website. Your continued use of the Services after a change takes effect means you accept the updated policy, to the extent the law allows.

If required by law, we will get your permission or give you the opportunity to opt in to or opt out of, as applicable, any new uses of your personal information.

Contact Us

For any questions or concerns regarding your privacy, you may contact us using the following details:

iFancy Support
T.A.H. & Associates, LLC
Boerne, TX
United States
support@ifancy.app