Festy LTD — Privacy Policy
This Privacy Policy explains how Festy Ltd. ("Festy," "we," "us," or "our") collects, uses, and protects your personal information when you use our mobile and web applications (the "App") and related services (the "Services").
Festy is a socially-driven birthday reminder and gifting platform. Our services include FestySync, which helps you add and manage birthdays through contact syncing, social intelligence, and network suggestions.
1. Introduction
Your privacy matters. This policy explains what data we collect, how we use it, and how you can control it. By using Festy, you agree to the practices described here.
2. Contact List Data
You can choose to allow Festy to access your phone's contact list. If you do, we use it to suggest which of your friends are already on Festy, recommend birthdays already added by others, and help you connect with people you may know. We never access your contacts without your permission.
You can revoke this permission at any time through your device settings. Once revoked, we will stop collecting or updating your contacts, and previously uploaded data will be deleted within a reasonable time (no later than 30 days). Even if you do not sync your contacts, you may still appear in suggestions if your friends have uploaded your details.
3. Facebook and Snapchat Integration
If you choose to connect your Facebook or Snapchat account, Festy will access limited information (such as names and birthdays) solely to populate your calendar and provide core app functionality. We do not sell or share this data with third parties and do not access unrelated personal content. You can disconnect these integrations at any time.
4. Information Provided by Others
We may receive information about you from other users. For example, if a friend adds your birthday manually, we may suggest it to you when you join; if a friend uploads their contacts, your details may be included. If you join Festy, you take control of your own data and can edit or remove it.
5. Invitations and Social Features
When you use features like inviting a contact, Festy may send an invitation on your behalf. We only send invites when triggered by you and allow recipients to opt out of further messages.
6. What Information We Collect
We may collect contact information (e.g., hashed phone numbers, if synced), manually added data (e.g., birthdays you enter), profile information, device and usage data (analytics, logs, performance data), and gift transaction data (details required to process and deliver gifts).
7. Gifting and Third-Party Providers
Festy offers gifting features through third-party providers, including Tillo. When you send or receive a gift, transaction data is processed and stored and shared with our gifting partners only as necessary to fulfil the transaction. Festy does not store payment card details directly, and all payment processing is handled securely by third-party providers.
8. Sign-In Services (Apple & Google)
You may choose to sign in using Apple or Google. When you do, we receive limited information (such as your name and email address) from the provider and use this only to create and manage your account. We do not access any additional data from your Apple or Google account.
9. How We Use Your Information
We use your information to suggest birthdays and connections (via FestySync), deliver reminders and notifications, enable gifting and celebrations, improve and personalise the app experience, and maintain security and prevent misuse. We may also use data to power recommendation systems and automated insights within the app.
10. Legal Basis for Processing
We rely on consent (e.g., contact syncing, integrations), legitimate interest (improving services, safety, recommendations), and contract (providing core app functionality). For your own profile, Festy acts as a Data Controller. For data you upload about others, Festy acts as a Data Processor.
11. Your Rights
You have the right to access, correct, delete, restrict, object to certain uses of, export, and withdraw consent for your data at any time. To exercise these rights, contact roni@myfesty.io. We respond within 30 days. UK/EU users can also contact the Information Commissioner's Office (ICO).
12. Deleting Your Account
You can delete your account in the app. Deletion is scheduled upon request; logging back in within 15 days cancels deletion. After that, data is permanently deleted. Backups are cleared within 90 days. We may retain limited data where legally required.
13. Security
We protect your data using TLS encryption in transit, AES-256 encryption at rest, access controls and audit logs, and regular security reviews.
14. Data Retention
Active accounts are retained while in use. Deleted accounts are removed within 30 days (backups within 90 days). Inactive accounts are deleted after 24 months.
15. International Transfers
Your data may be processed outside your country. Where required, we use Standard Contractual Clauses (SCCs) and equivalent safeguards.
16. Third-Party Partners
We may share limited data with trusted partners (e.g., gifting, analytics, hosting) only when necessary and under strict contractual obligations. We do not sell your personal data.
17. Children's Privacy
Festy is not intended for users under 13 (or 16 in the EU). We do not knowingly collect data from children.
18. Changes to This Policy
We may update this policy. Significant changes will be communicated via the app or email.
19. Business Transfers
If Festy is involved in a merger or acquisition, your data may be transferred in line with this policy.
20. California Privacy Rights
California residents have additional rights under CCPA/CPRA, including access, deletion, and opting out of data sharing.
21. Contact Us
For any questions or privacy requests: roni@myfesty.io
How to delete your account
You can delete your account in the Festy app. For help, contact support@myfesty.io.