Privacy Policy

1. General Overview

This Privacy Policy governs the collection, use, and disclosure of personal data by GiftFlow in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

2. Data Collection

GiftFlow collects the following data types:

• Authentication Data: Email addresses, names, and OAuth tokens provided via Google Sign-In and Apple Sign-In.
• Operational Data: User-inputted viewer profiles, gift transaction logs, coin earnings, and streaming interaction history.
• Media Data: Images captured or selected via device camera and photo library for custom gift or viewer icons.
• Telemetry Data: Crash logs and application performance metrics.

3. Purpose of Collection

Data is utilized strictly for:

• Authenticating users and maintaining persistent sessions.
• Synchronizing operational data across devices via cloud database infrastructure (Google Firebase/Firestore).
• Providing core application functionalities, including analytics generation and viewer tracking.

4. Data Storage and Security

• Infrastructure: Cloud data is hosted on Google Firebase, subject to Google Cloud’s security standards.
• Security Measures: Transport Layer Security (TLS) is enforced for all network transactions. Authentication relies on secure token exchange; passwords are not collected or stored.

5. Data Retention and Deletion

• Data is retained only as long as the user account remains active.
• Users invoke permanent data erasure via the in-app “Delete Account” function. This triggers cascading deletion of authentication records and all associated Firestore documents.

6. User Rights (PDPA Compliance)

Users possess the right to:

• Access personal data held by GiftFlow.
• Correct inaccurate data.
• Withdraw consent for data processing (accomplished via account termination).