Legal · Zivanor Gifts

English · Nederlands · Deutsch · Français · Español · Italiano · Português · Polski

Privacy Policy for Zivanor Gifts

Applies to the app Zivanor Gifts (in some countries listed as Lootjes trekken, Secret Santa & Gifts, Wichteln or a similar name) and to gifts.zivanor.com · Last updated: 25 October 2026

Who we are

Zivanor Gifts is published by VisionHost International B.V. ("we", "us"). We are the controller of the personal data described here. This page belongs to the general Zivanor privacy policy; where the two differ, this page applies to Zivanor Gifts.

What is kept on our server

The app exists to let several people share one group: to draw names, or to share a gift list. That only works when the group is stored in one place that every phone in the group can reach. For each group our server keeps:

• The group: its name, the kind of party, the date, the budget if one is set, and the join link.
• The people in it: the name each person typed (a first name is enough) and whether they are an organiser. No phone number or password. For people who chose to keep their lists, the account links their place in the group to their e-mail address (see below).
• Answers and votes: for a date poll who voted yes, maybe or no on which date; for an invitation each answer with the number of adults and children, and optionally food preferences (for example vegetarian) and a note; for a bring list who takes what.
• Birthdays in a circle: day and month of the birthday a person adds, and the year only if that person switches on showing it. Somebody can also add a child or a grandparent who has no phone; the person who added them keeps their list and birthday.
• What people type: wishes on a wishlist or gift list (text and, if added, a link to a shop), anonymous questions and their answers, who must not draw whom, and on a birthday list who crossed off which present.
• The result of the draw: who drew whom.
• A scrambled personal key for each person. The key itself is kept only on that person's phone or in their personal link; the server keeps a form of it that cannot be turned back into the key.
• Reports: when somebody reports a question they received, a person in the group or the group itself, we keep the report: which group, who reported it, what was reported, the reason if one was typed, the time, and a copy of the reported content as it was at that moment (the question and its answer; the person's name and wishes; or the group's name, place and instructions). The same is e-mailed to our moderators at support@zivanor.com. A reported question disappears from the list of the person who reported it.
• Blocks: when the receiver of an anonymous question blocks whoever asked it, the server keeps that this person may no longer ask the receiver anything. The receiver is not told who it was.

Please type only what the group needs. Do not put addresses, account numbers or other sensitive information in a name, a wish or a question.

Who can see what

• Anyone who has the join link can see the group's name, date and the names of the people in it. Share the link only with the people you want in the group.
• Your wishlist is shown only to the person who drew your name.
• Everybody in a group sees who voted what in a date poll and who comes to an invitation. Food preferences or a note in an answer are shown only to the organisers.
• On somebody's own list in a circle, the owner (and whoever keeps them) does not see who crossed off what.
• Who you drew is shown only to you. Organisers cannot see who drew whom.
• A question reaches the person you drew without your name.
• On a birthday list, the guests see who crossed off which present. The organisers see it too, unless the list is marked as a surprise for them.
• A personal link gives access to one person's place in the group. Whoever has it can act as that person, so treat it like a key. An organiser can replace it with a new one; the old one then stops working. An organiser who adds someone without a phone sees that person's link once, to pass it on.
• A report is seen only by our moderators, never by the person or the group that was reported. Somebody who was blocked sees only that the person no longer accepts their questions.

We do not read groups, we do not sell data and we do not share it with advertisers. We look at stored data only when that is needed to fix a fault, to handle a report or other misuse, or to answer a legal demand.

The optional e-mail sign-in

You never need an account to join a group, cross something off, answer or vote. If you want your groups and lists to come back on another phone or in a browser, you can sign in with an e-mail address. We send a six-digit code to that address; there is no password. The account holds your e-mail address, your preferred language, the code (stored scrambled, valid ten minutes), a scrambled sign-in key for each device you signed in on, and which of your places in groups are linked to it. It is used for nothing else and is never shared.

The account is kept until you delete it; it does not expire by itself. A sign-in on a device ends when you sign out there, and automatically when it has not been used for a year. When a group is deleted, its link to your account disappears with it. You can delete the account at any time in the app or at gifts.zivanor.com (Me → Keep your lists → Delete account), or by e-mail, as described on the page Delete your account. Deleting removes the address, every sign-in and the links to your groups; your groups keep working on devices that already have them, and the names and wishes you typed in a group stay in that group until the group is deleted.

What stays on your device

Your phone keeps a personal key for each group you are in, the list of your groups and your language choice. They are kept in the system's secure storage and in the app's private folder. That folder is part of your phone's own backup (Google's backup on Android, the iCloud backup on an iPhone), so that your groups are still there after you reinstall the app or move to a new phone; we have no access to that backup. In a browser the same is kept in that browser's storage for gifts.zivanor.com. Removing a group from the app or clearing the browser's site data removes it from the device.

Private birthday calendar. The birthdays, gift ideas and reminder settings you put in the calendar are stored only on your phone (in a database in the app's private folder, with a copy in the app's backup folder). They are never sent to us. When you tap "From my contacts", the app asks for permission and then reads, on your phone, only the name and the birthday of the people in your address book. Every contact with a birthday (day and month, and the year if it is filled in) is added to your private calendar at once; contacts without a birthday, and people already in the calendar with the same name and date, are skipped. No phone numbers, e-mail addresses or other contact details are read, no link to the contact is kept, and nothing is uploaded: the entries exist only in the calendar on your phone, where you can change or delete them. The private calendar is not available in a browser. Reminders are notifications that your phone shows by itself; there is no push service.

How long we keep it, and deleting it

• A group and everything in it is deleted automatically 60 days after the date of the party. A group without a date (a gift list, a circle, or a date poll in which no date was picked) is deleted 18 months after it was last used.
• An organiser can delete the whole group at any time in the app (Manage → Delete group). An organiser can also remove one person.
• Before the names are drawn you can leave a group yourself; your name and wishlist are then deleted. After the draw, ask an organiser, or write to us.
• Undoing a draw deletes the questions that were asked.
• A report, with its copy of the reported content, is kept until we have handled it, and is deleted at the latest together with the group. Blocks are deleted with the group.
• The optional account is kept until you delete it (see above and Delete your account).

Most people use the app without an account, so we usually cannot look you up by name. If you signed in with an e-mail address, we can find the groups linked to that address. Otherwise send the join link or the group name and the name you used, so we can find the right group.

Server logs and protection against misuse

To stop one address from creating or joining an unreasonable number of groups, the server counts requests per internet address. It keeps only a scrambled form of the address together with a counter, and deletes these counters within a day or two. Like every web server, ours also writes a standard log (IP address, address requested, browser type, time), kept for up to 30 days to detect faults and abuse. We use these for nothing else.

Shop links, gift ideas and pictures

Wishes can link to web shops, and the app offers gift ideas with links to shops. Links marked with * are affiliate links: when you buy after following one, the shop may pay us a commission. You pay nothing extra. We receive totals from the shop's partner programme, never who bought what, and we do not tell a shop who you are or which group you are in.

When you tap a shop link you leave the app; the shop's own privacy policy applies from there, and the shop may set cookies in your browser. Pictures of products are loaded directly from the shop or its image server, which therefore sees your internet address when the picture is shown, as with any web page. As an Amazon Associate we earn from qualifying purchases.

Ads and Zivanor Pro

Not used in the current version. The app is free: it shows no ads and offers no in-app purchases, contains no advertising or purchase software and does not use an advertising identifier. If a later version adds a banner ad or the paid upgrade Zivanor Pro, we will update this policy before that version is released.

Sharing invitations

When you share an invitation or a personal link, it goes through the app you choose (for example WhatsApp or your phone's share sheet). That app handles the message under its own terms.

What the app does not do

No analytics, no crash reporting, no ads and no cookies for tracking. No third party receives data from the app, apart from the shops whose links or pictures you open (see above). The app asks for two permissions, and only when you use the feature: notifications (after you add the first birthday, for the reminders) and contacts (when you tap "From my contacts"). No camera, no location, no advertising identifier.

Children

Families use the app together, so a parent or organiser may add a child's first name and wishes to a family group. The app is not directed at children under 13 (or the higher age your country sets) to use on their own, it shows no ads, and it asks nobody for contact details apart from the optional e-mail sign-in. A parent can have a child's entry removed by an organiser of the group or by writing to us.

Legal basis and your rights

We process group data and the optional account to provide the service you and your group asked for (GDPR Article 6(1)(b)), and the request counters, server logs, reports and blocks on the basis of our legitimate interest in keeping the service available and safe and in removing abusive content (Article 6(1)(f)). Your rights to see, correct, delete or receive your data, to object, and to complain to a data protection authority are described under "Your rights" in the general policy. Most of them you can exercise directly in the app: change your name, edit or empty your wishlist, leave or delete the group, delete your account.

Security and where the data is

Every connection between the app and our server is encrypted (HTTPS). Personal keys are stored on the server only in scrambled form. The group data is kept on a server we manage ourselves and is not passed on to other companies. Reports reach our moderators by e-mail at support@zivanor.com.

Changes

If this page changes, we update the date at the top. If a change affects what the app stores or shows to others, we say so in the app's release notes before it takes effect.

Contact