Privacy Policy

What we collect

Gift content. When you create a gift we store what you put in it: the occasion, the design you build, your note, your name as the gift signs it, and your recipient's name — plus their email or Telegram handle if you choose those delivery methods. Gifts are stored on our servers so the reveal link keeps working.

Account data. Sending uses an email-verified account: we store your email address, sign-in timestamps, and your credit balance and its history. One-time sign-in codes are short-lived.

Technical data. Like most websites, our infrastructure processes IP addresses, request URLs, browser and device information, and diagnostic logs to run and secure the service. Reveal pages record anonymous playback events (opened, unwrapped, redeemed) tied to the gift, not to a profile of the viewer.

What we use it for

To operate the service: storing and delivering gifts, playing reveals, managing credits and payments, sending the emails the service depends on (sign-in codes, gift deliveries, saved-gift keepsakes, confirmations), preventing abuse, and meeting legal obligations. We do not sell personal data, and we do not use the content of your gifts to train machine-learning models.

Reveal links

A reveal link contains a long, unguessable token. Anyone who has the link can open the gift — that is how gifting works here — so treat the link like the gift itself, and don't put sensitive information in a gift's note. Recipients don't need an account, and we don't require anything from them to view a gift.

Who processes data for us

We use a small set of processors, each receiving only what their job needs: Stripe for payments (we never see full card numbers), Postmark for transactional email, Cloudflare for hosting and asset delivery, Anthropic for AI-assisted design generation (the design brief, not your account identity), and Telegram when you open KaDo inside the Telegram Mini App (Telegram's own terms and privacy policy apply there). Each processes data under its own privacy policy and our instructions.

How long we keep it

Gifts and their reveal links are kept so the gift remains openable; unopened gifts expire 90 days after sending. Account and credit records are kept while your account exists, and payment records as long as bookkeeping law requires. Support correspondence is kept as long as reasonably needed. When you ask us to delete your account, we delete or anonymise data we're not legally required to keep.

Your rights

Depending on where you live, you can ask for access, correction, deletion, restriction, portability, or object to processing — this applies to recipients too, not just account holders. Write to support@sendkado.app and we'll respond within the legally required time. EEA/UK users can also lodge a complaint with their supervisory authority.

Cookies

We use strictly necessary cookies: your session cookie when you sign in and short-lived cookies that protect reveal links. We don't run third-party advertising, and we don't use tracking cookies.

Children

The service is a general-audience product and not directed at children under 13; accounts require a minimum age of 16. Please don't put children's personal information in gift notes.

Security

We apply technical and organisational measures appropriate to the service — encrypted transport, unguessable tokens, scoped access. No method is perfectly secure; the reveal-link model means whoever holds a link can open its gift.

Changes and contact

We'll post updates here with a new date, and notify account holders by email when a change is material. Questions: support@sendkado.app. See also the Terms of Service.