This policy explains what the Wrapd app and this website collect, why, who else handles it, and what you can do about it.
Wrapd is run by Fireball Apps Ltd, a company registered in England and Wales. We decide how your information is used, which makes us its “controller” under UK data protection law. You can reach us at info@wrapd.gifts.
The short version
- Wrapd stores what you and your groups put into it, so you can plan gifts together. It’s stored securely by Supabase, in London.
- Wrapd’s AI (Claude, made by Anthropic) only reads your messages if you agree to it. You can change your mind at any time in Account.
- We don’t sell your information.
- You can delete your account from the app, whenever you like.
What we collect
Your account: Your email address, your name and your password. We never see your password: it is stored as a one-way hash. We email you codes to confirm your address and to reset your password.
Your profile: Anything you choose to add about yourself, such as your date of birth, things you’d like, things you don’t need, and wish tags.
Your wishlist and preferences: Things you’d like (wishes), each with a name and, if you add them, a link and details, and which of your groups you share each one with. And what you’d like, what you don’t need and your wish tags. Only you can see your wishlist itself. Each group you share a wish with sees it on its gift list for you, marked as your wish, and plans it like any other gift idea; you never see who’s buying it or what’s said about it.
Your groups: The groups you make or join: their names and descriptions, who is in them, and their Secret Santa settings and draws. If you invite someone, we keep their email address so the invitation can reach them.
Recipients and gifts: The people your groups buy for (recipients) and what you add about them: names, birthdays, likes, dislikes, wish tags and photos. Gift ideas, with their descriptions, links, photos, status (idea, claimed, bought) and votes. Recipients may not use Wrapd themselves, and may be children. Please only add what the people you’re buying for would be comfortable with.
Messages: What you write in recipients’ chats and gift threads. If you @mention someone, we keep who you mentioned with the message, so we can tell them; only the people who can read that chat can see it. A Secret Santa message is shown to the group without your name. We keep a private record that it was yours, apart from the message, so that we can deal with misuse; nobody in the group, or the app, can see it. A question you ask @Wrapd isn’t stored, and Wrapd’s answer is shown only to you.
Reports: If you report a message, we keep the report: which message it was, who reported it, the reason you gave, if any, and when. Only Wrapd staff see reports, and nobody in the group is told who reported what. A report of a Secret Santa message doesn’t say who wrote it. We delete reports within 12 months, unless we need one longer for a legal or safety reason.
Your choices: Your notification settings, which chats you’ve read, whether you’ve agreed to Wrapd’s AI reading your messages, and, when you join a group, which people in it you said you weren’t.
Your device: A notification token, so we can send you push notifications. If the app crashes or something goes wrong, a crash report: what the app was doing, your device model and operating system version, and the app’s version. Basic usage statistics, such as which features are used.
How we use it, and why we’re allowed to
- To run Wrapd for you: your account, groups, recipients, gifts, messages and notifications. We need this to provide the service you’ve signed up for (contract).
- To suggest gifts with AI, if you agree to it (consent). See “Wrapd’s AI” below.
- To keep Wrapd working and secure: crash reports, and checking for misuse (legitimate interests).
- To improve Wrapd: usage statistics, and a comparison between groups with Wrapd’s AI and a small number of groups without it, to learn whether it actually helps (legitimate interests).
Wrapd’s AI
Wrapd uses Claude, an AI made by Anthropic, to spot gift ideas in what you write and to answer questions you ask @Wrapd. It only does this once you’ve agreed. The app asks before anything is sent, and you can change your answer at any time in Account.
When it’s on, Wrapd sends Anthropic: the message you’ve just written; the last few messages in that chat, but only from people who have also agreed; the recipient’s gift list; and the recipient’s likes, dislikes, wish tags and birthdays. Secret Santa messages are never sent, including your own. Anthropic processes this to produce an answer for Wrapd, and does not use it to train its models.
Who else handles your information
We use these trusted services to run Wrapd:
- Supabase: stores Wrapd’s data and photos, and runs sign-in. Your data is stored in London.
- Anthropic: Wrapd’s AI, only if you agree to it.
- Amazon Web Services: sends our emails, from London.
- Google Firebase: push notifications and app settings.
- Sentry: crash reports.
- Google Play and Apple’s App Store, which deliver the app.
How long we keep it
We keep your information while you have an account.
You can delete your account in the app under Account, or without the app. This deletes, straight away, your account, profile, notification and AI settings, notifications, votes, read records, and wishlists.
Your rights
You have the right to ask for a copy of your information, to have it corrected or deleted, to object to or restrict how we use it, and to take it elsewhere. Where we rely on your consent, as with Wrapd’s AI, you can withdraw it at any time. Email info@wrapd.gifts and we’ll respond within a month.
If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office.
Contact
If you have questions about this policy, contact us at info@wrapd.gifts.