1. Scope and Definitions

This Privacy Policy applies to information collected through the Service. It does not apply to information collected by third-party retailers, websites, or apps linked from the Service.

For purposes of this Privacy Policy:

• "Personal Information" means information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
• "Sensitive Personal Information" has the meaning given to it under applicable law (such as the California Consumer Privacy Act, as amended).

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: name, mobile phone number, email address, date of birth, profile photo, and password (where applicable).
• Profile Attributes: sizes, preferences, interests, family relationships, important dates, and other attributes you add to your profile or to shared lists.
• User Content: s, task lists, spending records, notes, comments, photos, and any other content you create or upload.
• Information About Others: names, preferences, sizes, dates, and other attributes you record about family members, friends, or recipients of gifts you plan, including information about minors where you are a parent or guardian.
• Communications: messages you send to us, support requests, survey responses, and other communications.

2.2 Information Collected Automatically

• Device Information: device type, model, operating system, mobile network information, and language preference.
• Usage Information: features used, screens viewed, search queries, items added to lists, products viewed or clicked, time and duration of use.
• Approximate Location: derived from IP address or device settings. We do not collect precise geolocation unless you grant permission.
• Log Data: IP address, browser type, access times, and other diagnostic information.
• Cookies and Similar Technologies: we use cookies and similar technologies to operate the Service and remember your preferences. See Section 5.

2.3 Information From Third Parties

• Authentication Providers: if you sign in through a third-party service (e.g., Apple, Google), we receive basic profile information that you authorize to be shared.
• Affiliate and Retail Partners: when you use affiliate links or retailer integrations, we may receive information about your clicks or qualifying purchases (such as Amazon Associates conversion data).
• Other Users: we may receive information about you from other users — for example, if a friend adds you to a shared list.

2.4 Sensitive Personal Information

In limited cases, you may provide Sensitive Personal Information through the Service (for example, religious holiday preferences or precise location if enabled). We use Sensitive Personal Information only for the purposes for which you provided it and as described in this Privacy Policy.

3. How We Use Your Information

We use Personal Information for the following purposes:

• To operate and provide the Service: create and manage your account, enable list creation and sharing, deliver features, send verification codes, and respond to support requests.
• To personalize your experience: tailor recommendations, surface relevant products, and customize content.
• To power AI features: generate gift suggestions, product recommendations, and automated insights. See Section 3.1.
• To communicate with you: send transactional messages (verification, security, account notices), service updates, and our own marketing emails or push notifications (where permitted and subject to your choices).
• For analytics and product improvement: understand how the Service is used, measure engagement, and develop new features.
• For safety, security, and fraud prevention: detect, investigate, and respond to fraudulent activity, security incidents, abuse, and violations of our Terms of Service.
• To comply with legal obligations: respond to legal process, enforce our rights, and comply with applicable laws.
• For other purposes with your consent.

3.1 AI and Machine Learning

We may use de-identified, aggregated, or anonymized data derived from your use of the Service to train, develop, evaluate, and improve our AI features, models, and algorithms; to improve recommendations and personalization; and to develop new AI-driven features. We do not use information that personally identifies you to train publicly available AI models.

When you use AI features powered by third-party providers (such as our AI Gift Finder), the content you submit may be processed by those providers under their enterprise agreements with us. Those providers are contractually restricted from using your data to train their own models.

4. How We Share Your Information

4.1 Other Users (Through Shared Lists and Groups)

Information you add to your profile or to shared lists may be visible to other users you invite or who invite you. This is a core function of the Service.

4.2 Service Providers and Vendors

We share Personal Information with companies that provide services on our behalf, including hosting, infrastructure, customer support, communications (SMS delivery, email), analytics, fraud prevention, identity verification, AI services, and product search. These providers are authorized to use Personal Information only as necessary to provide services to us and are contractually required to protect it.

4.3 Affiliate and Retail Partners

When you click an affiliate link or interact with a retailer integration, limited information may be shared with the relevant retailer or affiliate network (e.g., Amazon) so they can attribute the click and complete the transaction. We may receive commission and conversion data in return. We do not share your account profile, contact information, or list contents with these partners.

4.4 Corporate Transactions

If LystGenie is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, Personal Information may be transferred as part of that transaction. We will notify you of any change in ownership or material change in how your Personal Information is handled.

4.5 Legal, Safety, and Compliance

We may disclose Personal Information when we believe in good faith that disclosure is necessary to comply with legal process, respond to lawful requests by public authorities, enforce our Terms of Service, protect the rights, property, or safety of LystGenie, our users, or others, or detect and prevent fraud or security incidents.

4.6 With Your Consent

We may share Personal Information for other purposes with your consent or at your direction.

5. Cookies and Similar Technologies

We use cookies, software development kits (SDKs), and similar technologies to:

• Operate and secure the Service
• Remember your preferences and settings
• Understand how the Service is used and improve it
• Personalize content and recommendations

We do not use cookies or similar technologies to deliver third-party advertising or to track you across other apps or websites. You can manage cookies through your browser settings. Some features of the Service may not function properly if you disable certain technologies.

6. Your Privacy Rights and Choices

6.1 Rights Available to All Users

• Access your information: request a copy of the Personal Information we hold about you.
• Correct your information: update inaccurate or incomplete information.
• Delete your account and information: delete your account through Settings or by emailing support@lystgenie.com.
• Export your information: request a portable copy of your information in a commonly used format.
• Manage marketing communications: unsubscribe from marketing emails (link at the bottom of each email), opt out of SMS by replying STOP, and manage push notifications in your device settings.

6.2 California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights, subject to limited exceptions:

• Right to know the categories and specific pieces of Personal Information we have collected, the sources, the purposes for collection, and the categories of third parties with whom we have disclosed Personal Information.
• Right to delete Personal Information we have collected from you.
• Right to correct inaccurate Personal Information.
• Right to limit the use and disclosure of Sensitive Personal Information.
• Right to non-discrimination for exercising your rights.
• Right to designate an authorized agent to make a request on your behalf.

As noted above, LystGenie does not sell or share Personal Information for cross-context behavioral advertising, so the right to opt out of sale or sharing is not applicable.

To exercise these rights, submit a request through support@lystgenie.com or use the LystGenie app's Settings → Privacy section. We will verify your identity before responding. We will respond within 45 days, with a possible 45-day extension where allowed by law.

6.3 Residents of Other U.S. States

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you may have rights similar to those described above, including the rights to access, correct, delete, and obtain a copy of your Personal Information. To exercise your rights, contact support@lystgenie.com. If we deny your request, you may appeal by replying to our response with the subject line "Appeal."

6.4 European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and equivalent laws, including the rights to access, correct, delete, restrict processing, object to processing, and data portability. You also have the right to lodge a complaint with your local data protection authority.

Our legal bases for processing include: performance of a contract (to provide the Service), legitimate interests (to improve and secure the Service), consent (for marketing communications and certain cookies), and compliance with legal obligations.

6.5 How to Exercise Your Rights

To exercise any rights described in this Section, contact us at support@lystgenie.com or use the privacy settings within the LystGenie app. We may request information to verify your identity. We will not discriminate against you for exercising your privacy rights.

7. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect Personal Information from children under 13. If we learn that we have collected Personal Information from a child under 13 without verifiable parental consent, we will delete it as soon as practicable.

Parents and guardians: if you become aware that your child has provided us with Personal Information without your consent, contact us at support@lystgenie.com and we will take steps to remove that information.

8. Data Retention

We retain Personal Information for as long as necessary to:

• Provide the Service to you;
• Comply with legal obligations (such as tax, accounting, and recordkeeping);
• Resolve disputes and enforce our agreements;
• Protect against fraud and security incidents.

When Personal Information is no longer needed, we will delete, anonymize, or de-identify it. Aggregated and de-identified information may be retained and used indefinitely. Backup copies may be retained for a limited period after deletion of active records.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect Personal Information. These include encryption in transit, restricted access controls, monitoring, and routine security reviews.

No security measure is perfect. We cannot guarantee the security of Personal Information transmitted to or stored on the Service. You are responsible for safeguarding your account credentials and for the security of devices used to access the Service.

10. International Data Transfers

LystGenie is based in the United States. Personal Information we collect may be processed in the United States or other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your country.

Where required by applicable law (such as for transfers from the EEA, UK, or Switzerland), we use appropriate safeguards such as Standard Contractual Clauses to protect Personal Information.

11. Third-Party Links and Services

The Service may contain links to third-party websites, apps, products, and services (including retailer integrations and affiliate links). This Privacy Policy does not apply to information collected by those third parties. We encourage you to review the privacy policies of any third party before providing information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this Policy indicates when it was last revised. For material changes, we will provide notice through the Service (in-app notification, email, or website banner) at least 30 days before the change takes effect, where required by law. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

13. Contact Us

For questions, concerns, or to exercise your privacy rights, contact us at: