Festy Privacy Policy
Last updated: [25/09/25]

​

This Privacy Policy explains how Festy Ltd. ("Festy," "we," "us," or "our") collects, uses, and protects your personal information when you use our mobile and web applications (the "App") and related services (the "Services").

Festy is a socially-driven birthday reminder and gifting platform. Our services include FestySync, which helps you add and manage birthdays through contact syncing, social intelligence, and network suggestions.

​

 1. Introduction

Your privacy matters. This policy explains:

What data we collect

How we use it

How you can control it

By using Festy, you agree to the practices described here.

​

2. Contact List Data

You can choose to let Festy access your phone’s contact list. If you allow this, we use it to:

Suggest which of your friends are already on Festy

Recommend birthdays already added by other users with the same contact

Help you connect with people you may know

We never access your contacts without your permission.

You can revoke this permission anytime through your device settings. Once revoked, we will stop collecting or updating your contacts, and previously uploaded data will be deleted within a reasonable time (no later than 30 days).

Even if you don’t sync your contacts, you may still appear in suggestions if your friends have uploaded your details. This works both ways - just as you can upload theirs.

​

3. Information Provided by Others

We may receive information about you from other users. For example:

If a friend adds your birthday manually, we may suggest it to you when you join.

If a friend uploads their contacts, your name and number may be included.

This is part of our data-sharing model. If you later join Festy, you take full control of your own birthday data.

​

4. Invitations and Social Features

When you use certain features (like inviting a contact), Festy may send an invitation or link on your behalf using your contact information.

Recipients can opt out of further messages.

We never send invites without your action.

​

5. What Information We Collect

Contact Information (hashed phone numbers) if you choose to sync contacts.

Manually Added Data like birthdays you type in yourself.

Your Profile Information (your own birthday, settings, preferences).

Device & Usage Data (logs, crash reports, analytics, app performance).

Gift Transactions (only the details required to deliver e-cards or gift cards).

​

6. How We Use Your Information

We use your information to:

Suggest birthdays and friends (via FestySync)

Deliver reminders and notifications

Enable gifting and shared celebration features

Improve our services and keep them secure

​

7. Legal Basis for Processing

We rely on:

Consent: For syncing contacts, sending invites, and marketing.

Legitimate Interest: For improving Festy, keeping it safe, and suggesting connections.

Contract: To provide the services you signed up for (e.g., reminders, gifting).

For your own profile, Festy is a Data Controller. For data you upload about your friends, Festy acts as a Data Processor, handling it on your behalf.

​

8. Your Rights

No matter where you live, you have the right to:

Access: Get a copy of your data

Rectification: Correct inaccurate information

Erasure: Delete your account and data

Restriction: Limit how we use your data

Objection: Stop certain processing (e.g., marketing)

Portability: Export your data in a machine-readable format

Withdraw Consent: Anytime in app settings (doesn’t affect past lawful use)
To exercise these rights, email us at info@myfesty.io
. We reply within 30 days.

If you are in the UK or EU, you can also complain to your local authority. Our lead supervisory authority is the UK Information Commissioner’s Office (ICO).

​

9. Deleting Your Account

You can delete your account anytime in the app settings.

When you request deletion, your account is scheduled for removal.

If you log back in within 15 days, the deletion is cancelled.

If you don’t log back in, your data is permanently deleted.

Backup copies are erased within 90 days.

We may retain some data if required by law (for example, to comply with financial regulations or defend against legal claims).

​

10. Security

We protect your data with:

TLS encryption in transit

AES-256 encryption at rest

Access controls and audit logs

Regular security reviews

Only authorised staff and partners can access your data, and only for the purpose of providing services.

​

11. How Long We Keep Your Data

Active accounts: data kept while your account is active.

Deleted accounts: removed within 30 days (backups cleared in 90 days).

Inactive accounts: deleted after 24 months of inactivity.

​

12. International Transfers

Your data may be processed outside your country. When we transfer it outside the UK/EU, we use Standard Contractual Clauses (SCCs) and the UK Addendum to protect your rights.

​

13. Third-Party Partners

We may share limited data with trusted partners (e.g., for gifting, analytics, or hosting) — but only:

If it’s necessary to provide the service,

If you have consented where required, and

Under contracts that comply with GDPR and other laws.

We never sell your personal information.

​

14. Children’s Privacy

Festy is not for children under 13 (or under 16 in the EU). We don’t knowingly collect data from minors.

​

15. Changes to This Policy

We may update this policy. If changes are significant, we’ll let you know in the app or by email.

​

16. Business Transfers

If Festy is involved in a merger, acquisition, or similar transaction, your data may be transferred as part of that process — always in line with this Privacy Policy.

​

17. California Privacy Rights

If you live in California, you also have rights under the CCPA/CPRA, including:

Knowing what personal data we collect and use

Requesting deletion or correction

Opting out of sale or sharing (note: Festy does not sell personal data)

You can exercise these rights via app settings or by emailing info@myfesty.io
.

18. Contact Us

For any questions or privacy requests:
info@myfesty.io