Privacy Policy
Last updated: 20 October 2026
This Privacy Policy explains how Nazar Verbytskyi ("I", "me", "my") collects, uses, and protects your personal data when you use GreetPop ("the App") — the mobile application and the website greetpop.org, including the web card builder.
1. Who I Am (Data Controller)
Nazar Verbytskyi
Stanczyka 22, Kraków, 30-126, Poland
Email: verbytskyi.nazar@gmail.com
For users in the EU/UK, I am the data controller responsible for your personal data.
2. What Data I Collect
| Data | Why Collected |
|---|---|
| Account info — name, email address | Create and manage your account |
| Sign-in provider data — name and email from Google or Apple when you sign in with those services | Authenticate your account |
| Friends/contacts — name, birthday, phone number, email, relationship label, notes | Power reminders and greeting suggestions |
| Friends' social handles — Instagram, Snapchat, Discord, Telegram, Facebook usernames (optional, only if you add them) | Provide quick-launch links for sending greetings |
| Events — occasion type, date, notes, recurrence settings | Schedule and personalise reminders |
| Greeting history — occasion, channel used, and a short excerpt of the greeting message sent | Show you a memory timeline of past greetings |
| Device contacts (only if you grant permission) | Import friends from your address book; nothing is uploaded until you explicitly tap Import |
| Photos from your library (only if you grant permission) | Add photos to greeting cards you create |
| Local notification data — title, body, delivery time, and read status | Track your notification history in the in-app Notification Centre |
| Subscription status — whether you have Premium, where you bought it (App Store, Google Play or web), and when it renews or ends | Unlock premium features |
| Web purchase details (only if you buy Premium on greetpop.org) — a Stripe customer ID linked to your account | Connect your web subscription to your account. Your plan, next payment, invoice history and the brand and last four digits of your card are fetched from Stripe to show you on the Account page; I do not store them |
| Money gift data (only if you send or claim a money gift on greetpop.org) — stored with the card: the gift's network, its number in the gift contract, the amount, and a random value that protects the gift code. When a gift is claimed: the wallet address it is sent to. If you use an email wallet: your email address (handled by Coinbase, see Section 4) | Lock, show, claim and return money gifts. The gift code itself is created in your browser and never sent to me |
| Voice data (only if you grant microphone permission) | Process voice commands for the voice assistant (Android) and message dictation; processed entirely on your device and never stored or transmitted |
| Siri shortcuts data | Enable voice-activated reminders (iOS only) |
| Usage analytics — events and user properties (see Section 4) | Understand how the App is used to improve it |
| Device identifiers — iOS Vendor ID (IDFV) or Android Advertising ID (GAID) | Crash reporting and analytics |
| Error and crash data (see Section 4 — Sentry) | Monitor app stability, diagnose crashes, and improve reliability |
I do not collect or store payment card details. Payments are handled by Apple (App Store), Google (Google Play) or, for purchases on greetpop.org, by Stripe and its Link service. Your card details go straight to them and never reach my servers.
I do not store the full text of greeting messages you compose. Only a short excerpt is saved to your greeting history.
I do not access your camera. Photo access is limited to your existing photo library when you choose to add a photo to a card.
3. Legal Basis for Processing (GDPR / UK GDPR)
For users in the EU and UK:
| Processing Activity | Legal Basis |
|---|---|
| Providing the core app service | Contract (Art. 6(1)(b)) |
| Selling and managing a Premium subscription, including web purchases through Stripe | Contract (Art. 6(1)(b)) |
| Sending reminders and notifications | Legitimate interest (Art. 6(1)(f)) |
| Analytics and crash reporting | Legitimate interest (Art. 6(1)(f)) |
| Contacting you about your account | Contract (Art. 6(1)(b)) |
| Money gifts — locking a gift, showing it on a card, and relaying claims | Contract (Art. 6(1)(b)) |
4. Third-Party Services
| Processor | Purpose | Data Shared | Privacy Info |
|---|---|---|---|
| Supabase | Backend database and authentication | Account info, friends, events, reminders, greeting history, notification log | supabase.com/privacy |
| Apple / App Store | Sign-in, in-app purchases, subscriptions, and app delivery | Apple ID name and email (sign-in); purchase receipts | apple.com/privacy |
| Google / Google Play | Sign-in via Google account; in-app purchases and subscriptions (Android) | Google account name and email (sign-in); purchase receipts (Android) | policies.google.com/privacy |
| Stripe / Link (web purchases only) | Payments, subscriptions, receipts, tax, fraud prevention and billing support for Premium bought on greetpop.org. Web purchases are sold through Link, Stripe's reseller service, which is the merchant of record: Stripe and Link process your payment details, billing address and purchase history as independent controllers under their own privacy policies. Card details are entered on Stripe's own checkout page and never reach GreetPop. | Your account email and GreetPop user ID (to create your Stripe customer); your payment details and billing address are given by you directly to Stripe | stripe.com/privacy · link.com/privacy |
| Mixpanel | Usage analytics | A user ID, email address (used to link analytics to your account), platform, country, premium status, friend count, and in-app events (e.g. "reminder saved", "card built"). No message content or friend names are sent. Mixpanel processes this data as our data processor under a Data Processing Agreement. | mixpanel.com/legal/privacy-policy |
| Anthropic | AI greeting message generation — when you create a custom occasion, the occasion label (e.g. "Retirement party") is sent to Claude to generate greeting template suggestions. Do not include personal names or private details in occasion labels. No other personal data (names, emails, or contact details) is sent. Generated templates are stored and shared across all users. Anthropic processes occasion labels as our data processor under a Data Processing Agreement. | Occasion label only | anthropic.com/privacy |
| Sentry | Error tracking and crash reporting — to monitor app stability and diagnose errors, we send crash logs, error stack traces, and performance data to Sentry, a monitoring service operated by Functional Software, Inc. (US). Data sent includes: your user ID (to link errors to your account), application crash logs and exception stack traces, device information (type, OS version, app version), IP address, navigation breadcrumbs (user actions like button taps and screen transitions), and optional custom context. Sentry processes this data as our data processor under a signed Data Processing Agreement (v5.1.0) covering Standard Contractual Clauses for GDPR and UK GDPR compliance. We do not send sensitive or special-category personal data to Sentry. Data is retained for up to 90 days then deleted. | User ID, crash logs, stack traces, device info, IP address, breadcrumbs, performance data | sentry.io/privacy · DPA v5.1.0 |
| Facebook (optional) | Birthday import via in-app browser — only if you choose to use this feature | You authenticate directly with Facebook; I receive only the birthday data you approve | facebook.com/privacy |
| Coinbase (Coinbase Developer Platform) (money gifts only) | Email-login wallets for senders and recipients who have no wallet; Coinbase Onramp, where a sender buys USDC by card on Coinbase's own page; the paymaster that pays network fees for some gift transactions; the Coinbase Smart Wallet a sender may choose; and the Base network service pages use to read the blockchain. Coinbase handles card payments and any identity checks for Onramp as an independent controller under its own terms. Card details never reach GreetPop. | Your email address (email wallets — you give it to Coinbase directly); wallet addresses and transaction data; for Onramp: your GreetPop user ID, the wallet address the money goes to, and your IP address | coinbase.com/legal/privacy |
I do not sell your personal data to any third party.
5. International Data Transfers
Your data is stored on servers which may be located outside your country. Transfers are protected as follows:
- Supabase (US): covered by EU Standard Contractual Clauses (EU Commission Decision 2021/914).
- Stripe / Link (US and Ireland): covered by the EU–US Data Privacy Framework and EU Standard Contractual Clauses, per Stripe's privacy policy.
- Mixpanel (US): covered by EU Standard Contractual Clauses or the EU–US Data Privacy Framework, per Mixpanel's Data Processing Agreement.
- Anthropic (US): covered by EU Standard Contractual Clauses per Anthropic's Data Processing Agreement.
- Sentry (US): covered by EU Standard Contractual Clauses per Sentry's Data Processing Agreement.
- Coinbase (US): covered by the safeguards described in Coinbase's privacy policy, such as EU Standard Contractual Clauses.
For Hong Kong users: transfers outside HK are only made where adequate protection exists or with your consent.
6. Data Security
I take reasonable technical and organisational measures to protect your data, including encrypted connections (TLS), Supabase row-level security, and access controls. No method of transmission over the internet is 100% secure, and I cannot guarantee absolute security.
7. Data Retention
| Data | Retention Period |
|---|---|
| Account data | Retained while your account is active |
| Friends, events, reminders, greeting history | Deleted when you remove them or delete your account |
| After account deletion | All personal data permanently erased within 30 days. A web subscription is cancelled at once, and the Stripe customer ID is deleted with the account |
| Web payment records held by Stripe / Link | Kept by Stripe and Link as their own records, as long as tax and financial law requires, under their privacy policies. You can ask Link to delete your Link account and purchase data at support.link.com |
| Crash reports | Retained for up to 90 days, then deleted |
| Sentry error/crash data | Retained for up to 90 days, then automatically deleted |
| Analytics data (Mixpanel) | Event data retained for up to 25 months; your identity is reset on account deletion and historical event data is retained in aggregated, anonymised form only |
| Money gift details stored with a card | Deleted with the card or your account |
| Blockchain transactions (locking, claiming or returning a gift) | Public and permanent — a blockchain cannot be edited or erased, by me or anyone |
| List of gifts you locked in this browser | Kept only in your browser until each gift is claimed or returned, or you clear the site's data |
8. Your Rights
EU / UK (GDPR / UK GDPR)
- Access, rectify, or erase your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with your local supervisory authority
Australia (Privacy Act 1988)
- Access and correction rights
- Complain to the Office of the Australian Information Commissioner (OAIC)
Canada (PIPEDA / Quebec Law 25)
- Access, correction, and withdrawal of consent
- Complain to the Office of the Privacy Commissioner of Canada
New Zealand (Privacy Act 2020)
- Access and correction
- Complain to the Office of the Privacy Commissioner NZ
Singapore (PDPA)
- Access, correction, and withdrawal of consent
- Complain to the Personal Data Protection Commission (PDPC)
Hong Kong (PDPO)
- Access and correction
- Complain to the Office of the Privacy Commissioner for Personal Data (PCPD)
Brazil (LGPD — Lei Geral de Proteção de Dados)
- Access, correct, anonymise, block, or delete your data
- Data portability
- Information about third parties with whom data is shared
- Withdraw consent at any time
- Complain to the Autoridade Nacional de Proteção de Dados (ANPD)
United States — California (CCPA / CPRA)
- Know what personal information is collected and how it is used
- Access, correct, or delete your personal information
- Opt out of the sale or sharing of personal information for cross-context behavioural advertising (I do not sell or share your data for advertising purposes)
- Limit the use of sensitive personal information
All other jurisdictions
Where local law grants you additional privacy rights not listed above, those rights apply and you may exercise them by contacting me.
To exercise any right, email: verbytskyi.nazar@gmail.com. I will respond within 30 days.
9. Children's Privacy
The App is not directed at children under 13 (or 16 in the EU/UK). I do not knowingly collect data from children. If you believe a child has provided data, contact me and I will delete it promptly.
10. Device Contacts Permission
If you grant access to your device contacts, I read names, phone numbers, and birthdays only to help you import friends. This data is not uploaded until you explicitly tap Import. You can revoke access at any time in your device Settings.
11. Photo Library Permission
The card builder lets you add photos from your library to greeting cards. I access your photo library only when you tap to add a photo and only read the image you select. I do not access your camera. You can revoke photo access at any time in your device Settings.
Cards you create can be saved back to your photo library — this requires a separate save-to-photos permission, which you grant separately.
12. Microphone Permission
If you grant microphone access, voice input is processed entirely on your device using your device's built-in speech recognition. No audio is recorded, stored, or transmitted to any server. You can revoke microphone access at any time in your device Settings.
13. Notifications
Notifications in GreetPop are scheduled locally on your device — no external push server is used. You can disable notifications at any time in your device Settings.
14. Error Monitoring
To help us diagnose crashes and improve app stability, Sentry receives a report when an error occurs: the crash log and stack trace, device information, your user ID, and a short list of the screens and actions before the error (breadcrumbs). The App does not record video or screenshots of your sessions. Reports are retained for up to 90 days then permanently deleted, and are encrypted in transit and at rest.
15. Money Gifts and Blockchain Data
On greetpop.org you can attach a money gift in USDC to a card. Gifts live on a public blockchain (Base, Arbitrum, Optimism or Polygon — whichever the sender picks), which treats your data differently from a normal database:
- Public and permanent. Locking, claiming and returning a gift are blockchain transactions. The wallet addresses involved, the amounts and the times are visible to anyone and can never be changed or deleted — not by me, and not on request. The rights to erasure and rectification cannot apply to them. Do not use a wallet address you want to keep privately unlinked from your identity.
- Non-custodial. I never hold your money or your wallet's keys. A gift sits in a smart contract that only releases it to the wallet named with the gift code, or back to the wallet that locked it.
- The gift code is created in your browser and shown to you once. I never receive or store it. Anyone who has it can claim the gift.
- Claims through GreetPop. When a friend claims a gift, the claim (gift number, recipient wallet address, card link and a signature made with the code) passes through my server, which sends it to the blockchain and pays its network fee. Server logs, including IP address, are kept for a short time for security and troubleshooting.
- Email wallets, card top-ups and Coinbase Smart Wallet are provided by Coinbase (see Section 4). Signing in to an email wallet sends your email address to Coinbase, not to me. Buying USDC by card happens on Coinbase's page, under Coinbase's terms and privacy policy, including any identity checks they require.
- Reading the blockchain. Gift pages read gifts straight from each chain's public network service — Coinbase's for Base, Offchain Labs' for Arbitrum, the Optimism network's own, and Allnodes' (PublicNode) for Polygon. Like any website, these see your IP address; nothing else about you is sent.
- Your browser keeps a list of the gifts you locked in it (gift number, amount and the random value — never the code), so you can take back a gift whose card was never sent.
16. Changes to This Policy
I may update this policy occasionally. I will notify you via the App or email for material changes. The "Last updated" date at the top will always reflect the current version.
17. Contact
Nazar Verbytskyi
Stanczyka 22, Kraków, 30-126, Poland
Email: verbytskyi.nazar@gmail.com