What GiftDrop knows about you, and what it does not.

Who we are

GiftDrop is operated by Global Outsource Solutions Pty Ltd, ABN 76 147 725 040, a commercial business registered in Australia. We are not a charity, and we are not a deductible gift recipient. Donations go to registered charities that you choose, and we retain a disclosed service fee. There is no GiftDrop Foundation.

Privacy questions, access requests, corrections and complaints go to donations@giftdrop.app.

Small businesses are generally outside the Australian Privacy Act 1988. We have chosen to be treated as though we are covered, so the Australian Privacy Principles apply to us and you can complain to the Office of the Australian Information Commissioner if we get this wrong.

What this notice covers

The GiftDrop app for iPhone, the GiftDrop website, and any Android app we publish later. Part A is the app on its own. Part B applies once you sign in to donate, on either.

Part A — checking a gift card balance

Everything below stays on your device. We cannot see it and it is never sent to us.

• Card credentials — the card number, expiry, security code and PIN you scan or type — are held in the iOS Keychain in a device-only item that needs Face ID, Touch ID or your passcode each time it is read. Device-only Keychain items are excluded from iCloud Keychain and from device backups.
• Card details for display — a nickname, the provider, the last four digits and the most recent balance — are kept in a local database excluded from backups.
• Provider website data — cookies and site data created by a provider when you check a balance — are kept in an isolated store for that provider, which you can clear in Settings.
• Diagnostics — a short, sanitised log of app stages. It never contains card numbers, expiry dates, security codes, PINs or scanned text, and it leaves the phone only if you send it yourself.

The camera reads the text on a card entirely on the device using Apple's Vision framework. No image or video is saved or uploaded. Face ID and Touch ID are used through Apple's Local Authentication framework; GiftDrop never sees your biometric data.

When you check a balance, GiftDrop opens the provider's own official website inside the app and enters your card details into that site's form. The provider receives those details exactly as if you had typed them yourself, and its site may set cookies, run bot protection and collect analytics under its own privacy policy. GiftDrop only ever opens the verified site for the provider you chose and blocks navigation anywhere else.

Deleting a card removes its credentials from the Keychain and its details from the local database. Deleting the app removes everything Part A describes.

Part B — donating

Donating needs an account, and an account means we hold information about you.

What we collect. The email address and profile details your sign-in provider reports (Google, Apple or Microsoft); sign-in and transaction dates and times; your IP address and a country-level or approximate location derived from it; your browser or device description; the amount you donate, the charity you choose, the status of the donation and whether you asked to stay anonymous; Stripe transaction references; your card brand and last four digits; security alerts; and a record of administrative actions taken on your account.

What we never receive. Your full card number and security code. Stripe's own payment fields handle those, and they do not pass through GiftDrop.

Why. To authenticate you, to process and reconcile donations, to issue transaction records, to prevent fraud and card misuse, to investigate disputes and chargebacks, to meet legal and financial obligations, and to keep an auditable record of privileged administrative activity. Without this information we cannot safely process a payment.

Impact, product and marketing messages are off unless you turn them on in My GiftDrop, and you can turn them off again at any time without affecting receipts or security messages.

Invitation links. If you use or share one we record a random first-party identifier, aggregate visit and share counts, and whether a donation followed. We never upload address books and never tell the person who shared a link who acted on it.

What the charity you choose is told

We tell the charity that a donation was made, what it was for, and how much it receives. If you asked to stay anonymous we do not give them your name or your email address. If you did not, we may.

Staying anonymous to a charity does not make the payment anonymous to GiftDrop, to Stripe, to your bank, to regulators, or to law enforcement acting lawfully. It is a choice about what the charity sees.

Our service fee is shown to you before you donate, on the same screen as the amount. We are paid out of your donation, and the charity receives the rest.

Where your information goes

Google, Apple, Microsoft and Stripe handle information under their own terms and may process it outside Australia. Apple may give us a private relay address if you choose Hide My Email. Our servers are hosted on DigitalOcean infrastructure. Sensitive security records are encrypted before they are stored, IP addresses are matched using a keyed fingerprint rather than the address itself, and access is restricted and audited.

Stripe keeps its own record of every payment. We cannot delete it, and neither can you through us.

Deleting your account

In the app, open Settings and choose Delete GiftDrop Account. On the website, write to the address above. Deletion is immediate and cannot be undone.

What we remove. Your name, your email address, your profile picture and every stored sign-in identity, so no provider can reach the account again. Every session on every device is signed out. If you signed in with Apple, we ask Apple to revoke the authorisation. The email address held in our security records is cleared.

What we keep, and why. The record of each donation, the charity it went to and its receipt number. Fundraising and tax law require us to keep the transaction; they do not require us to keep you. These records no longer carry your name or your address.

We want to be straight about the limit of that. GiftDrop can still tell which closed account a donation belonged to. We have removed the details that identify you to anyone reading the record, but we have not made the record untraceable, and we will not claim otherwise.

What we cannot undo. Receipts already emailed to you are in your own mailbox and cannot be recalled. A refund that settles after you delete is recorded against the transaction, and we do not email you about it. Stripe keeps its own copy of the payment.

If you sign in again afterwards you get a new account with no history. Your saved cards, their balances and their details are never touched by this: they live only on your phone, and Part A applies to them.

An account we have restricted cannot use the in-app control. Write to the address above instead.

How long we keep things

Detailed security records are kept for 90 days unless they are needed for an active fraud, dispute, legal or security investigation. Payment, charity, tax and fundraising records are kept for the periods Australian law requires, which is longer, and they survive the deletion of an account. Invitation link attribution lasts about 30 days.

The encrypted network fingerprint of a deleted account is kept for the 90-day security window. We keep it because clearing it on request would let somebody sever the link between accounts they control.

Children

GiftDrop is not directed at children under 13 and we do not knowingly collect their information. Part A collects nothing from anybody.

Your choices, and complaints

You can ask us what we hold about you, ask us to correct it, ask us to delete your account, or complain, at donations@giftdrop.app. If you are not satisfied with our answer you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change how we handle information we will update this page and its version below, describe the change in the App Store release notes, and ask you to read it again before your next donation.