Privacy

Last updated: 2026-10-11

Data controller: Rasmus Lantz. Privacy contact: neonswipe.help@gmail.com.

Your gifts are private

Drafts stay on this device. On publication, Noelli stores the data and media needed to deliver the gift in private storage. Anyone with the link and PIN can access it. Do not share your encrypted backup or phrase. Export or delete your data in Settings.

We store your access identifier, published calendars, openings and purchase benefits to deliver and recover the gift. If you choose Apple to recover access, we receive its identifier and the data you authorize. We do not access your card or contact list.

iCloud backup

iCloud is optional and saves encrypted text and design in your private Apple database. It does not include files, codes, purchases or editing access. Keep the encrypted backup in Files to recover those data.

Deleting Noelli data does not delete the private Apple backup. Remove it in iCloud backup; exported copies remain where you saved them.

Gift activity

Accepting a gift and opening a surprise are separate actions. Sharing openings with the creator is off by default. You can change this in the gift’s More options. Only days and dates are shown, never messages, files or codes. Events are kept for up to 90 days; withdrawing permission deletes shared openings. Private access needed to deliver and save surprises is kept separately.

Opening notifications are optional and require the recipient’s consent. The installation token expires after 90 days without renewal. Disabling removes it and retains minimal revocation proof. Apple receives only a generic notification.

Files and access

Photos, video, audio and PDFs are stored in private Cloudflare R2. Cloudflare hosts the website, API and database. We check access and the opening date before delivering a file. We do not publish your files in a catalog.

The link is an access credential. Share it only with the intended recipient and add a PIN if you wish. The PIN is checked using secure key derivation, not stored in readable text. Necessary cookies maintain access and are not used for advertising.

Draft transfers

Drafts prepared in a browser stay in that browser. When continuing in the app, the temporary copy and its files are encrypted in private storage. The link expires in fifteen minutes. Confirmed receipt, cancellation or expiry schedules deletion of the temporary copy; failed deletion is retried. The original copy is kept.

Retention and deletion

The presentation closes on 31 January. Seasonal content is removed thirty days later. My Gifts keeps only opened personal vouchers and practical gifts, including their files, without automatic deletion while your access remains valid. Replacing the link revokes that access; deleting the account deletes records and files. A stated expiry date does not guarantee redemption.

Deleting data revokes access and removes content and files. We keep a minimal transaction and deletion ledger to prevent duplicate restoration or reactivation of deleted content. Interrupted file deletion is retried by maintenance; access ends immediately.

A copy someone has already downloaded cannot be removed from their device. Replacing the link revokes the previous online access.

Optional metrics

Only with your permission do we count actions such as creating, previewing, sharing or viewing an offer. We send only the action name, web or iPhone, and schema version. No identifiers, cookies, names, content, PINs, private links, codes or files. Daily totals are kept for 90 days; disable them in Settings.

Technical counters and temporary security limits protect the service. We do not sell your data or display advertising. Fever and gift card sales are disabled.

Your rights and contact

Request access, correction or deletion of your data through the privacy contact. Do not email PINs, recovery phrases or gift codes. You can also contact your data protection authority.