Privacy Policy

2. Information We Collect

Account information

When you create an account we collect your name and email address. Your password is handled by Firebase Authentication and we never see it. If you sign in with Google we also receive your Google profile photo. If you log in with a link we email you, there is no password: your browser keeps the email address you typed for up to a day, so the link opened in that browser can log you in, and forgets it once you are in. If you saved a mobile number for SMS reminders before we paused SMS, we keep it until you remove it or ask us to delete it, and we send no texts to it. On a Premium plan you can still change or remove that number in Account > Notifications on greetigo.com; on other plans, email us and we will remove it. Accounts without a saved number cannot add one. We also save your device's time zone (for example America/New_York), or the one you pick in Account > Notifications, so your reminders arrive in the morning, your time. If SendGrid tells us email to your address bounced, was blocked or was reported as spam, we save that and when (not the email), so Greetigo can ask you to check your address. SendGrid also tells us when your address is on its unsubscribe list, and when a later email is delivered after such a problem; we keep only the latest of these and when.

Google User Data (OAuth)

If you sign in with Google, we receive your name, email address, profile photo and Google account ID (the number Google uses to identify your account) from your Google account. Our sign-in provider, Firebase Authentication, keeps them with your sign-in account until you delete it. We use them only to create and run your Greetigo account. We do not access your Google Contacts, Calendar or other Google data.

People and dates you save

For each person you add we store their name, the occasion (for example a birthday or work anniversary) and the date. You can also add their email address, phone number, notes and tags, and choose when you want to be reminded. We use this only to show your list, send your reminders and, if you choose, send a greeting email to that person. Reminders come by email. A name and date you type on our website before you sign up stay only in your browser, for up to an hour, and reach us only when your new account saves them, or when you ask us to email you a link to log in. In that case we keep them for 24 hours with a one-way coded (SHA-256) form of your email address, so the link can offer them on whatever device opens it, and delete them as soon as you choose to save them or not, once the link has logged you in. If the link is never used, or you never choose, they are deleted automatically after the 24 hours, usually within a day. When a message sent through Greetigo, or a group card you just signed, offers to save a person's birthday and you press it, the date form opens with their name filled in. That name stays only in that browser tab, for up to an hour, and reaches us only if you save the date. Greetigo no longer sends text messages (SMS), including to Premium accounts that turned on SMS reminders before we paused them (see Twilio below).

Someone else who gets your reminders (optional)

In Account > Notifications you can add one more person to get your reminder emails. We store their email address, whether they have confirmed, said no thanks or stopped, and when, and a record of each email we send them (the address, the subject and when). We email them once to ask, with your name and your email address, and send them nothing else until they confirm. After that they get a copy of each reminder email you get: whose date it is, the date and the message, never your notes. They can stop with one click from any of those emails, and you can remove them any time; we then delete their address from this setting. If they say no thanks or stop, we keep a one-way coded form of their address (not the address itself) so your account cannot ask them again. All of it is deleted with your account. If someone added your address and you want it removed, use the link in the email, or write to team@greetigo.com.

Messages

We store the greeting messages you write or pick from templates, including the message you choose for a reminder. If you send a greeting email through Greetigo, the recipient's email address and your message are sent through SendGrid to deliver it, and we keep a record of it in your Sent messages: the recipient's name and email address, the message and when it was sent. The email is set so that replies go to your account's email address, so the person you write to can see that address.

Every greeting email sent through Greetigo ends with an Unsubscribe link for the person who gets it. If they use it, we stop delivering messages sent through Greetigo to that address, from anyone, and if you try to send to it, Greetigo tells you it was not sent. To remember their choice we keep a coded form of their email address made with a secret key (HMAC-SHA256), not the address itself, and when they unsubscribed. Only someone holding both the code and our secret key could check whether an address matches it.

In a greeting email, links to other websites show as plain text. If Greetigo refuses to send a message because it has a link and also mentions passwords, account checks, bank details or crypto wallets, our server log keeps your account ID, the reason and the links in the message, and deletes them after 30 days.

Each greeting you send through Greetigo, and each message we prepare for a reminder email, also gets its own web page at a long link that is hard to guess (greetigo.com/g/...). The link is in the greeting email the person receives, and in your reminder email so you can share the message if you want to. Anyone who has the link can see the message, the name of the person it is for and your name, and for some occasions the page title shows a small symbol (such as a cake for a birthday). The page's stored record also holds the occasion, when the page was made, your account ID and other internal IDs (random codes, not your email address), a view count and when it was last viewed; only you, logged in to your account, and our servers can read that record. We add to that count when the page is opened. These pages are not listed in search engines. A page stops showing the message as soon as you delete the date it was for, the message, or your account. Its stored record stays until you delete your account and is deleted with it (apart from the October 2, 2026 backup described under Data Retention).

A greeting you send from the Greetings page includes a small image and a link that tell us whether it was opened or its web link was clicked, so we can show you whether your greeting was opened. We store only the time. A message you send for a date, from a reminder or the Dates page, includes neither. Our servers' request logs record the IP address and browser of every request, including these, and are deleted after 30 days. We do not use any of this for advertising.

Public profile (optional)

Your public profile page is off unless you turn it on. If you turn on Public profile page in Account > Profile, anyone with the link greetigo.com/profile/<your account ID> can see your name, when you joined, your plan and its status, your badges and how many dates, greetings and referrals you had when you turned it on. Turn it off and the page is deleted; it is also deleted with your account.

Group cards

If you make a group card, we store the recipient's name, the occasion, your name and your account ID. If you sign a card, we store the name you type, your message, your account ID and when you signed. Anyone with a card's link can see the recipient's name, the occasion and each signer's name and message, and can also read the card's stored record, which adds the creator's name, everyone's account IDs and when each message was added. Cards you create are deleted with your account. Messages you add to someone else's card while signed in are removed from it when you delete your account. Messages added while signed out are not linked to an account, so they stay unless you ask us to remove them. If you press Add message while logged out, we save nothing: we ask you to sign up or log in, and the name and message you typed stay only in that browser tab, for up to an hour, so they are still there when you come back.

Birthday links (optional)

You can make a link that asks people for their birthday and share it yourself. For each link we store the name you chose to show on it, a label only you see if you add one, whether it is on or paused, and how many birthdays were added through it. The link is a long random code: it does not contain your account ID or email address. Anyone who opens it sees only the name you chose.

If you add your birthday through someone's link, we store the name and birthday you type, plus the year and your email address if you add them, and which of their links you used. Only the person who made the link can see it, in their account. It waits there until they keep it, and it then becomes a person and date in their list like any date they save, or until they remove it, and we then delete it right away. You do not need an account. Greetigo does not email you unless that person later sends you a greeting through Greetigo, and we never send you marketing. To have your birthday removed, ask the person who sent you the link, or email team@greetigo.com.

To protect these links from abuse, we count how many birthdays are added through each link and from each IP address. For this we store a one-way coded (SHA-256) form of the IP address, not the address itself, and it is deleted within two days. This code is not anonymous: anyone holding it could find an IPv4 address by trying every possible address. We also keep the result of Google reCAPTCHA's check for each birthday added (a score, not your IP address or name) until the birthday is kept or removed, and for no more than about 30 days. Links and the birthdays waiting in them are deleted with the account of the person who made them.

How you use Greetigo

We record basic in-app actions, such as signing up, adding a person or sending a greeting, together with your account ID, the page, the address of the website you came from (not the page) and your browser's user-agent text. When you start a paid plan, we also record your email address with it. On greetigo.com we also count page views and clicks, whether or not you have an account: we store the page, the address of the website you came from (not the page), any campaign tags in the link, which button or step it was (for a Mac download, which file and version), how many seconds the page was on screen, how far down it was scrolled and which parts of it came into view, the links and buttons pressed on it (what kind each one is and the page or website it leads to, never its words or anything you type), your browser's user-agent text (it names your browser, its version and your operating system), a random visitor ID kept in your browser, a random session ID for that visit, plus your account ID if you are logged in. We use this only to run and improve Greetigo. We do not use it for advertising and we do not share it with data brokers.

When you arrive from another website or from a link with campaign tags, your browser keeps where you came from for up to 90 days: the campaign tags, the other website's name (not the page), the first page you opened here and when. When you create an account, we save that once with your account (or, if there is none, just the first page you opened and when), with the random visitor and session IDs your browser used for page views, so we can tell which sites and links bring people who sign up. An account made in the Mac app saves only that it was made there, and when.

Emails we send to you, such as reminders and account, billing and update emails, do not include a tracking image: our email provider, SendGrid, does not tell us whether you opened them.

To protect password reset, sign-in link emails and these counts from abuse, we limit how many requests one IP address can make, and we limit contact form messages, verification emails, sign-in link emails and welcome emails per email address. For these limits we store a one-way coded (SHA-256) form of the IP address or email address, not the address itself. This is not anonymous: anyone holding these codes could find an IPv4 address by trying every possible address, or check whether a known email address matches.

Messages you send us

If you write to us through the Contact page, on the website or in the iPhone or Mac app, we keep your name, email address and message so we can answer you.

Greetigo for Mac

The Mac app uses the same Greetigo account as the website, and keeps a copy of your people, dates and messages on your Mac so you can see them offline; that copy is removed when you log out or delete your account. If you turn on Mac notifications, the app schedules them on your Mac through macOS. The names, occasions and dates needed for those notifications are kept on your Mac and removed the same way. There is no Mac App Store version yet; if one is released, it will not include AI drafting or purchases.

Greetigo for iPhone and iPad

Greetigo for iPhone and iPad uses Greetigo accounts and the same service as the website. You can sign in with Apple, Google or an email address. If you sign in with Apple, we receive the email address Apple shares with us (your own address or a private relay address), your name if you choose to share it, and an identifier Apple uses for your account; Firebase Authentication keeps them with your sign-in account until you delete it. If you use Import from Contacts, the app asks for access first and reads only names, birthdays and anniversaries on your device; it sends us only the names and dates of the people you choose, when you tap Save, and your Contacts list is never uploaded or stored. If you turn on notifications, the app schedules them on your device. The app keeps a copy of your people and dates on your device so it opens offline, and removes it, with any queued notifications, when you log out or delete your account. The app does not include AI drafting or purchases, and has no analytics, advertising or crash reporting tools.

Subscription and Billing Data

If you choose a paid plan (Greetigo Plus or Premium), Stripe processes your payment details and tells us your subscription status, plan, renewal, invoice and cancellation details so we can manage your account. In addition, when you create any account, even a free one, our Stripe add-on creates a customer record at Stripe with your email address and account ID, and we keep a copy of that record (your email address and Stripe customer ID). Neither is deleted when you delete your account.

3. How We Use Your Information

We use your information for the following specific purposes:

• Running the service: To show your list of people and dates and send you reminders.
• AI drafting (Plus and Premium, on greetigo.com and in the Mac app downloaded from greetigo.com): When you ask for a draft, the person's name, the occasion, the style and language you pick and any notes you type are sent to our AI provider. Saving a date never requests a draft: a draft is written only when you ask for one. AI drafting is not part of the free plan.
• Your choice about AI drafts: Before your first AI draft, Greetigo asks whether it may send these details to DeepSeek. Nothing is sent to DeepSeek until you choose Allow AI drafts, and saving a date never requests a draft. We keep your answer, and when you gave it, with your account. To withdraw it, go to Account > Profile > AI drafts and choose Turn off. After that, nothing more is sent to DeepSeek unless you allow AI drafts again. Drafts already written stay in your account until you delete them.
• Update emails: We send a welcome email when you sign up with Google, Apple or an email link; if you sign up with a password, the email that verifies your address takes its place. We may also send tips, an email listing your upcoming dates, holiday message ideas, a Year in Review, a note if you have not used Greetigo for a while, and plan offers. You can turn these off in Account > Notifications, or with the Notification settings link at the bottom of any of these emails. Turning them off never stops your reminder emails.

5. Data Sharing and Third Parties

We share data only with the essential service providers required to run our app:

• Firebase (Google): For secure database hosting, authentication, and core application infrastructure.
• Google reCAPTCHA: On greetigo.com, checks that a person, not a bot, is signing up, asking for a password reset email or a sign-in link, sending a contact form message or opening checkout for a paid plan. It also checks people adding a birthday through someone's birthday link. It loads only for those steps, and Google's script reads information about your browser and device to do this. For a sign-up we keep the check's result (a score from 0 to 1 and Google's reason codes) with your account, and delete it with your account. The Mac app does not load it. Google's Privacy Policy and Terms of Service apply.
• Stripe: For secure payment processing and subscription billing, including Plus and Premium plan management (we never see your full credit card number). Our Stripe add-on also creates a Stripe customer record with your email address for every new account, including free ones (see Subscription and Billing Data above).
• SendGrid: To deliver verification, sign-in link, password reset, reminder, billing and update emails, the greeting emails you choose to send through Greetigo, and the reminder emails for one more person if you add someone to get them too.
• Twilio: Twilio sent our text message (SMS) reminders until we stopped sending texts. Greetigo no longer sends text messages to anyone, including Premium accounts that turned on SMS reminders before we paused them. Twilio keeps its own records of the texts we sent through it (the mobile number, the message, which named the person and the occasion, and when it was sent) under its own policies. A mobile number you saved stays with your Greetigo account until you remove it or ask us to delete it (see Account information above). We do not share mobile information with third parties or affiliates for their marketing or promotional purposes.
• Sentry: To catch errors in the website and web app on greetigo.com. Your browser sends these error reports to our own server at greetigo.com, which passes them on to Sentry without your IP address. Our server uses the IP address only to limit how many reports one address can send each minute, and does not store it anywhere except our servers' request logs, which are deleted after 30 days. If our server cannot take a report, your browser sends that report to Sentry directly, and Sentry then sees your IP address. Our servers do not send their own errors to Sentry, and the Mac app does not send errors to Sentry.
• DeepSeek: To write AI greeting drafts on Plus and Premium, on greetigo.com and in the Mac app downloaded from greetigo.com. Nothing is sent to DeepSeek until you allow AI drafts (see Your choice about AI drafts). DeepSeek processes this data in China. A draft you ask for sends the person's name, the occasion, the style, the language and any notes you type. Saving a date sends nothing to DeepSeek.
• Slack (only if you connect it): When you add Greetigo to Slack and pick a channel, we keep your workspace name and ID, the channel name, a web address for posting to that channel, an access token for the Greetigo app in your workspace, and the Slack member ID of the person who added it. We use them only to post your reminders to that channel, to show which workspace and channel are connected, and to remove Greetigo from your workspace when you disconnect. Slack's reply also includes a few technical details (the channel ID, the app and bot IDs, the permission granted, a settings link for the channel connection and, for Enterprise organizations, the organization ID); we do not keep or use them. Each post says whose date it is, the occasion, the day, a link to the reminder and your first name; it never includes your message. Everyone in that channel can see the posts. We do not read Slack messages or see who is in your workspace. We keep this until you disconnect Slack in Account, remove Greetigo from your workspace in Slack, or delete your Greetigo account; then we delete it right away. To ask about or delete your Slack data, email team@greetigo.com.

The same providers, with what each one handles, are listed on our sub-processors page.

6. Data Retention and Deletion

We keep your data while your account is active. You can delete your account in Account > Profile, with Delete account at the bottom, on the website, in the iPhone app or in the Mac app. If you have a paid plan or a free trial that will renew, cancel it first; once it is set to end, you can delete your account right away. When you do, we delete your account, the people and dates you saved, your reminders and your message history from our live systems at once. If a step fails, we retry it every hour until it is done. A one-time backup of our database made on October 2, 2026 is kept until we delete it, no later than November 1, 2026; if your account existed then, it holds a copy of your data from that day. On the same day we also exported sign-in account records (account ID, email address and whether it was verified, name, profile photo link, Google account ID if you signed in with Google, sign-up and last sign-in dates, and a one-way coded form of the password with its salt, the random value used to code it), Stripe subscription records (plan, status and dates, with the customer's email address and account ID) and a list of the account IDs and email addresses of the accounts we deleted that day. Those exports are kept on our admin computer, and we will delete them by the same date. Wherever this page says something is deleted with your account, these October 2 copies are the exception until then.

A Slack connection is deleted as soon as you disconnect it, remove Greetigo from your workspace in Slack, or delete your account.

Some records follow their own rules:

• Deleted-account marker: When you delete your account, we keep your account ID and when you deleted it for 30 days, so an old sign-in can't recreate the account. It is then deleted automatically.
• Website visits: Visits linked to your account are deleted with it (apart from the October 2, 2026 backup above). Visits not linked to an account have no set end date; if you ask, we delete the ones we can match to you. The one-way codes we keep for the website and contact form limits are deleted automatically, usually within 3 days.
• Messages you send us: Messages sent through our contact form from your account's email address are deleted with your account. Messages sent from another address, and the copy of each message emailed to our team inbox, stay with no set end date. We delete them if you ask.
• Unsubscribe records: When you use an unsubscribe link in one of our emails, we keep a note of your account ID, which emails you turned off and when. It is deleted with your account, and sooner if you ask.
• Unsubscribes from messages sent through Greetigo: When someone unsubscribes from these messages, we keep the coded form of their email address and when, with no set end date, until they choose to get messages again from the same link. It is not linked to any account.
• Referral records: If you signed up from someone's invite link, we keep a record of your account ID, their account ID, the invite code and when you signed up. It is deleted when either account is deleted, and sooner if you ask.
• Billing records: When you delete your account, your plan record is deleted. These stay, with no set end date, for tax and accounting: records of checkouts you started, invoices (amount, currency and status), payment problems and the payment events Stripe sent us. They hold your account ID and Stripe IDs, never your card number. The Stripe customer record described above, with your email address, also stays in Stripe; our own copy of it is deleted with your account. Stripe keeps its own records, including your payment details, under its own policies.

7. Contact Us

If you have questions about this privacy policy or our data practices, please contact us:

Email: team@greetigo.com