Privacy Policy
Last updated: 6 October 2026
This policy explains what information the Greeting Cards mobile app and the website greeting.appcraftdev.com (together, "the Service") collect, why, who sees it, and the choices you have. The Service is run by AppCraft Studio ("we", "us"), appcraftdev.com, India. You can reach us at support@appcraftdev.com.
1. Information we collect
You give us
- Account details: your email address and, if you choose, your name. If you sign up with an email address, a password (we only keep a scrambled, one-way "hash" of it, never the password itself).
- Sign in with Google or Apple: if you use these, Google or Apple tells us your unique account identifier, your email address (Apple may give us a private relay address instead) and your name if you allow it. We do not receive your Google or Apple password.
- Your cards: the designs you create (text, colours, layout, stickers and pictures you place) and the titles you give them.
- Your photos: pictures you choose from your phone to put on a card. They are stored on our server when you have an account, so your cards look the same on every device. They are private to your account.
- Messages to us: anything you send to our support email.
Collected automatically
- Sign-in sessions: a login token that keeps you signed in on your device (we store only a hash of the long-lived part on our server).
- Server logs: when the app or website talks to our server, our systems record technical details such as your IP address, the time, the address requested and the type of device or browser. We use them for security, abuse prevention and fixing problems, and keep them for a limited time.
- Sync information: the times your cards were last changed, so changes made on one device reach your others.
What we do not collect
- We do not read your contacts, your messages or your location.
- We do not use advertising or analytics tools that track you across apps and websites. If this ever changes, we will update this policy first.
- The app asks for access to your photos only when you choose to add a picture to a card or save a finished card to your gallery.
2. How we use your information
- to create and secure your account and sign you in;
- to store your cards and photos and sync them between your devices;
- to send you emails you ask for, such as a password-reset link;
- to keep the Service safe, prevent abuse and fix errors;
- to answer your questions and requests;
- to meet our legal obligations.
We process your information with your consent (when you create an account and use the Service) and for the legitimate uses the law allows, such as security and legal compliance.
3. Who we share it with
We do not sell your personal information. We share it only with:
| Who | Why |
|---|---|
| Our hosting and server provider | To run the Service and store your data. |
| Our email delivery provider | To send emails such as password-reset links (your email address and the message). |
| If you use "Sign in with Google". Also, the app and website load fonts from Google Fonts, so Google receives your IP address when fonts are fetched. | |
| Apple | If you use "Sign in with Apple". |
| Payment providers | Payments for paid plans are handled by Cashfree. We send it your name, email and the mobile number you type at checkout, and the plan and amount. We never see or store your card number, UPI PIN or bank details. We keep a record of each payment (plan, amount, date). |
| Authorities | When the law requires it, or to protect our rights, users or the public. |
| A future owner | If the business is sold or merged, your information may move to the new owner, who must keep protecting it as described here. |
These providers may only use your information to provide their service to us.
4. How long we keep it
- Your account, cards and photos are kept until you delete them or your account.
- When you delete your account, your account record, cards, photos and sign-in sessions are removed from our live systems straight away. Copies in our regular backups disappear as the backups are replaced, within about 30 days.
- Server logs are kept for a limited time and then deleted.
- We may keep a record we are legally required to keep (for example, records of payments).
5. Keeping your information safe
Traffic between the app, the website and our server is encrypted (HTTPS). Passwords are stored only as salted hashes. Login tokens are stored hashed, and password-reset links work once and expire after an hour. Photos are visible only to the account that uploaded them. No system is perfectly secure, but we work to protect your information and will tell you and the authorities about a data breach where the law requires.
6. Your choices and rights
Under India's Digital Personal Data Protection Act, 2023 and similar laws you can:
- See and correct your information: your name can be changed in the app (Account → Edit profile), and you can ask us for a copy of your data.
- Delete your account and data: in the app (Account → Delete my account), on our account deletion page, or by email.
- Withdraw your consent at any time by deleting your account or writing to us. Features that need your account will then stop working.
- Complain to us, and, if you are not satisfied, to the Data Protection Board of India.
To use any of these rights, email support@appcraftdev.com from the address on your account. We reply within 30 days.
7. Children
The Service is not meant for children under 13. If you are under 18, please use it with the permission and supervision of a parent or guardian. If you believe a child has given us information without such permission, write to us and we will delete it.
8. Where your information is stored
Your information is stored on servers run by our hosting provider. If those servers are outside your country, we still protect your information as described in this policy.
9. Changes to this policy
We may update this policy. When we make an important change we will tell you in the app or by email, and change the date at the top.
10. Contact and grievances
AppCraft Studio (appcraftdev.com), India
Email: support@appcraftdev.com
Questions about your data, requests, or complaints go to this address and are handled by our grievance contact.