Privacy Policy

NotiFly was built with a simple, uncompromising principle: your data belongs to you. We do not maintain any backend servers or databases. All your personal information stays entirely under your control, either on your device or in your private Google storage.

When you use Google Sign-In to set up your profile, we access your basic identity information to personalize your experience. We follow a strict 'Read-Only' policy for this data:

• We read your Name, Email Address, and Profile Picture.
• This data is used ONLY to display your identity within the app.
• We do NOT store this information on any external server.
• When you sign out, the app immediately clears all local references to your account.

Our Backup & Restore feature uses your private Google Drive storage. We prioritize security by using the most restrictive permissions available:

• Scope: We use 'DRIVE_APPDATA', meaning we only access a hidden folder reserved for NotiFly.
• Zero Visibility: We cannot see your personal photos, documents, or other Drive files.
• Local Encryption: Before any data leaves your phone, it is encrypted using AES-256-GCM.
• Secure Keys: Your encryption key is unique to your device and stored in the secure system Keychain.

To provide maximum transparency, here is what NotiFly does NOT do:

• We do not have accounts or store your data on our servers.
• We do not track your location or usage patterns.
• We do not use third-party analytics or advertising trackers.
• We do not sell, rent, or share your data with anyone.

The primary storage for your birthdays and settings is your device's internal storage. This data is handled locally and is only transmitted if you explicitly trigger a manual Google Drive backup.

Our AI Gift Finder uses Google Gemini 1.5 Flash to generate personalized suggestions. When you request gift ideas:

• Only non-identifying data (age, gender, relationship) is sent to the AI service.
• Individual names are never transmitted or shared.
• Requests are processed via a secure Cloudflare worker proxy.

Because your data is local, you have full control over it. You can export your data as a JSON file at any time. We do not have access to these files unless you explicitly share them with us for technical support.

If you have any questions about this Privacy Policy or our Google integration, please reach out directly.