Privacy Policy

Effective Date: January 10, 2025
Last Updated: January 13, 2026

1. Introduction

Welcome to Celefy ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our app and website (https://celefy.app).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

A. Personal Data You Provide

• Account Information: Your name, email address, and profile photo URL (via Google Sign-In).
• Profile Data: Your birth date, age, and gender (optional).
• User Content: Information about events you create (e.g., birthdays of friends/family), notes, relationship tags, and personalized wishes.
• Uploaded Media: Photos you upload for your profile or for event contacts.

B. Automatically Collected Information

• Device Information: Device model, operating system version (Android SDK level), unique device identifiers, and mobile network information.
• Usage Data: Feature usage patterns, button clicks, and error logs (via Google Analytics for Firebase).
• Push Notification Tokens: Unique tokens required to deliver notifications to your specific device.

C. Permissions & Optional Data

• Notifications (POST_NOTIFICATIONS): To send birthday reminders and updates.
• Contacts (READ_CONTACTS and WRITE_CONTACTS): Disabled by default. When enabled, contacts are processed as follows:
  • Contact data (phone numbers and emails) is hashed locally on your device using SHA-256 algorithm before any network transmission
  • Only the hashed values (not raw contact data) are sent to our servers for matching purposes
  • Raw contact information (names, phone numbers, emails) never leaves your device in unhashed form
  • We do not store, reconstruct, or have access to your original contact data
  • The WRITE_CONTACTS permission is reserved for future contact sync features and is not currently active
• Storage/Gallery: To upload profile pictures or event images.

D. Analytics and Performance Data

• Firebase Analytics: Automatically collects device information, app usage patterns, screen views, feature usage statistics, user journey data, custom events, session duration, and engagement metrics.
• Firebase Crashlytics: Automatically collects crash reports, non-fatal errors, performance issues, and device information to help us fix bugs quickly.
• User Properties: We associate analytics data with user properties such as account age, theme preferences, and notification settings (but not personal identifiers).
• Purpose: This data helps us understand how users interact with Celefy, identify popular features, fix bugs, and improve the overall app experience.
• Data Retention: Analytics data is retained for 14 months per Firebase's default retention policy. Crash reports are retained for 90 days.
• Opt-Out: Users may disable analytics tracking anytime in App Settings. When disabled, we will not collect feature usage patterns, custom events, or user journey data. However, basic crash reporting and error logs are essential for app stability and cannot be disabled.

3. How We Use Your Information

1. Service Provision: To create your account, store your birthday lists, and schedule reminders.
2. AI Features: To generate personalized birthday wishes using context you provide.
3. Notifications: To send timely reminders for upcoming events via OneSignal.
4. App Improvement: To analyze usage trends and fix crashes.
5. Performance Monitoring: To identify and fix app crashes, errors, and performance issues in real-time.
6. User Analytics: To understand feature adoption rates, user engagement patterns, and app usage trends to guide product improvements.
7. Security: To verify your identity via Google Sign-In and protect against unauthorized access.

3.5. Legal Basis for Processing (GDPR)

• Contractual Necessity: To provide the Service (account creation, reminders, AI features)
• Legitimate Interest: To improve app quality, fix bugs, and ensure security
• Consent: For optional features like contact import and analytics (where applicable)
• Legal Obligation: To comply with applicable laws and regulations

You have the right to object to processing based on legitimate interest by contacting us at support@celefy.app.

4. Third-Party Services and Data Sharing

We do not sell your personal data. We only share information with third-party service providers to facilitate the App's functionality.

Service Provider	Purpose	Data Shared	Privacy Policy
Google Firebase	Backend, Auth, Database, Analytics, Crash Reporting	User ID, Email, Profile Data, Birthday Data, Analytics Data, Crash Reports, Error Logs, Performance Metrics	Firebase Privacy
OneSignal	Push Notifications	Device ID, Push Token	OneSignal Privacy
Cloudinary	Image Storage	Uploaded Photos	Cloudinary Privacy
Groq AI	AI Message Generation	Message Context (Text only - relationship type, tone preference, occasion type, recipient name - no personal identifiers)	Groq Privacy

Note regarding AI: When you use our "Generate Wish" feature, the text prompt (relationship, tone, name) is sent to Groq API for processing. We do not send your personal identifiers (email/UID) to Groq. Groq does not retain or use your prompts for training. Prompts are processed transiently and discarded after generation.

Celefy does not sell personal data, does not use advertising identifiers, and does not show third-party ads.

Data Processing Locations:

All third-party services process data primarily in the United States. By using Celefy, you consent to international data transfers as described in Section 10.

5. Data Retention and Deletion

Account Deletion:

You may delete your account anytime in-app through Settings > Delete Account.

Deletion Timeline:

• Primary User Data: Your account, profile, events, photos, and user-generated content are deleted from our primary database (Firebase) within 30 days of account deletion request.
• Backup Data: Backup copies and cached data are fully purged within 90 days.
• Analytics Data: Aggregated, anonymized analytics data is retained for 14 months per Firebase's default retention policy. This data cannot be linked to your account after deletion.
• Crash Reports: Crash reports and error logs are retained for 90 days per Firebase Crashlytics default retention policy. These reports do not contain personal identifiers after account deletion.

Note: After account deletion, we cannot restore your data. Please export your data before deleting your account if you wish to keep a copy.

6. Data Security

• Encryption in Transit: All data is transmitted over secure HTTPS/TLS connections.
• Encryption at Rest: Data stored in Firebase is encrypted.
• Contact Hashing: If you use contact syncing, phone numbers and emails are hashed (SHA-256) ensuring raw contact data is never exposed.
• Access Control: We use strict Firebase Security Rules to ensure only you can access your private data.

Data Breach Notification:

In the event of a data breach that may affect your personal information, we will notify affected users and relevant authorities as required by applicable law (e.g., within 72 hours for GDPR, as required by local regulations).

7. Children's Privacy (COPPA Compliance)

Celefy is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

We enforce age restrictions during onboarding by requiring users to provide their birth date. The app calculates age from the provided birth date and prevents users under 13 from completing registration.

• Users must provide a valid birth date during account creation
• Age is calculated automatically from the birth date
• Accounts cannot be created if calculated age is under 13
• If we discover that a user under 13 has provided false information and created an account, we will immediately delete the account and all associated data from our servers

Parental Rights:

If you are a parent or guardian and you are aware that your child under 13 has provided us with personal information, please contact us immediately at support@celefy.app and we will delete such information.

8. Your Privacy Rights

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request that we correct inaccurate data.
• Erasure: Request that we delete your data.
• Portability: Request a copy of your data in a machine-readable format.

To exercise these rights, please contact us at support@celefy.app.

Data Portability:

You may request a copy of your data in a machine-readable format (JSON) by contacting support@celefy.app. We will provide your data within 30 days of your request.

California Residents (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@celefy.app.

9. Cookies and Tracking Technologies

• Device Identifiers: Firebase Analytics uses device identifiers (not cookies) to track app usage across sessions.
• Firebase Analytics: Automatically collects app usage data and events for analytics purposes. This data is aggregated and anonymized where possible.
• No Third-Party Advertising: We do not use advertising IDs or share data with advertising networks.
• User Control: While analytics collection is essential for app functionality, users can request data deletion (see Section 8).

Do Not Track:

Celefy does not respond to "Do Not Track" signals from browsers as we are a mobile application, not a web browser-based service. However, you can control analytics tracking through App Settings as described in Section 2.D.

10. International Data Transfers

Your information, including Personal Data, may be processed on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ (primarily in the United States via Google/Firebase servers). By using Celefy, you consent to this transfer.

By creating an account you explicitly consent to international data transfer under contractual necessity and legitimate interest.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: support@celefy.app
• Website: https://celefy.app