Privacy Policy
Last updated: 5 August 2026
Sandy Gift is a social wishlist: you post things you wish for, and friends can fund them or call dibs. Running that well means we collect and use data about you. This policy explains what we collect, how we use it, and — importantly — how we monetize it. We have tried to write it plainly.
1. What we collect
Account information: your name, email address, handle, profile photo, and the important dates you add (birthdays, anniversaries and similar).
Content: your posts (titles, links, prices, images), comments, likes, wishlist adds, dibs, and who you follow.
Funding activity: contributions you make or receive, amounts, and payout details. Card payments are processed by Paystack — we never see or store your full card number. Bank account details you link for payouts are stored to route payments.
Usage data: what you search for, which posts you view and for how long, taps, session information, and device information (model, OS, app version, IP-derived approximate location).
2. How we use it
To run the product: showing your wishlist to friends, processing funding, sending activity notifications, and keeping the platform safe.
To personalise: our recommendation systems use your activity — including which posts you have seen — to rank the For You feed, suggest people to follow, and surface gift ideas.
To show sponsored content: business accounts pay to promote posts, and we use your activity to decide which sponsored posts are relevant to you.
3. How we monetize your data
We sell and share insights derived from platform activity with advertisers, retailers and other commercial partners. Knowing what people wish for, and when they want it (for example, ahead of birthdays and holidays), is commercially valuable, and this is part of how Sandy Gift makes money.
Where feasible this data is aggregated or de-identified (for example, "wishlist trends for Johannesburg in June"). Where permitted by applicable law and your consent settings, it may include identifiable information such as your wishlist contents and important dates.
We do not sell your payment credentials, bank details, email address or password. Ever.
You can object to the sale or sharing of your personal information by emailing privacy@sandygift.app from your account email. We will honour opt-outs within 30 days and where the law requires it (including POPIA and, where applicable, the GDPR and CCPA).
4. Who else sees your data
Payment processing: Paystack receives what it needs to process contributions and payouts.
Service providers: hosting, storage, analytics and crash-reporting vendors process data on our behalf under contract.
Legal: we disclose data when the law requires it, or to protect users — for example when responding to valid law-enforcement requests or reports of child safety violations.
5. Your rights
You can access and edit your profile, and delete your account in Settings. Deleting your account removes your profile and wishlist from the platform; some records (such as payment records) are retained where the law requires it.
Depending on where you live, you may also have rights to access, correct, port, or delete your personal information, and to object to processing. Contact privacy@sandygift.app to exercise them.
6. Children
Sandy Gift is not for children under 13, and we do not knowingly collect their data. Funding features require you to be old enough to hold the payment instrument you use. If you believe a child under 13 is using Sandy Gift, email safety@sandygift.app and we will remove the account.
7. Changes and contact
We will notify you about material changes to this policy before they take effect.
Questions: privacy@sandygift.app.