Jolly Draw Privacy Policy
Effective October 23, 2026
Jolly Draw is a Secret Santa app made by Diego Martinez ("we", "us"). This policy explains what information the app collects, how it's used and shared, and the choices you have. If you have questions, email support@jollydraw.app.
Information we collect
Information you give us
- Account: your email address and password. Passwords are handled by Google Firebase Authentication and are never visible to us.
- Profile: the name you enter, and any optional "About Me" answers you add, such as brands and activities you love, clothing and shoe sizes, favorite movies, books, or music, and favorite colors.
- Groups: group names, spending limits, currencies, exchange dates, who is in each group, exclusions the organizer sets, and whether you've marked your gift as ready.
- Draw results: who each member is buying for.
- Wish lists: gift ideas and any links you add.
- Group photos: a photo a group's organizer chooses for the group. The app shrinks it before uploading and removes its metadata, such as where the photo was taken.
- Messages: the text of anonymous messages between you and your Secret Santa, and of group chat messages you send to your group, with the time they were sent. Group chat messages are stored with your account ID, so your group sees who wrote them. We also store when you last read each group chat and whether you muted it.
- Reports and blocks: if you report something, we receive your account ID, the reason, and a copy of what you reported. If you block a chat or a member, we store that block.
Information collected automatically
- Push notification token: an identifier for your device that lets us send you notifications, if you allow them.
- Diagnostics and usage: crash reports, app performance (such as how long actions take and whether they fail), app usage events (such as "group created" or "names drawn"), and device and network details like device model, operating system version, app version, and approximate location derived from your IP address. This is collected by New Relic, which associates it with an identifier it generates for your device. We don't send your name, email address, or the content of your groups, wish lists, photos, or messages to New Relic.
How we use information
- To run the app: create your account, verify your email, run groups and draws, and show wish lists and messages to the right people.
- To send notifications you've allowed, such as new messages, names being drawn, new members joining, and exchange reminders.
- To keep the app reliable: find and fix crashes, errors, and slow features.
- To keep people safe: review reports, and enforce our Terms of Use. When a message is reported, we can see who sent it, so we can act on it. Reports are emailed to us through Google's Gmail.
We don't sell your information, show ads, or track you across other companies' apps or websites.
Who can see your information
- Members of your groups can see your name, your About Me answers, your wish list for that group, whether you've marked your gift as ready, and the group's photo.
- Draw results are private: you see only who you're buying for. If your group's organizer chooses to reveal results on or after the exchange day, every member of that group can then see who had whom.
- Group chat messages are visible to everyone in that group, with your name. The group's organizer can delete any message in it.
- Anonymous messages are visible only to you and the other person in that conversation. Messages are stored without the sender's identity, so the person you're buying for can't see that the questions come from you.
- Group organizers also see which members haven't marked their gift as ready.
- Invite links show the group's name to anyone who has the link or join code.
Service providers
We use these companies to run the app. They process information on our behalf under their own privacy and security terms:
- Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, and Hosting): stores your account, app data, and group photos, sends notifications, and hosts this website. Firebase privacy information.
- Apple Push Notification service: delivers notifications to your device.
- New Relic: crash reporting, performance monitoring, and diagnostics. New Relic privacy notice.
When you view a wish list link, the app loads a preview directly from that website, so the website receives a request from your device, as it would if you opened the link yourself.
Amazon links: Jolly Draw is a participant in the Amazon Services LLC Associates Program. When you open an Amazon.com link from a wish list, the app adds our affiliate tag to it, so Amazon knows the visit came from Jolly Draw and may pay us a small commission on purchases, at no extra cost to you. Amazon may use cookies to track this. We receive only aggregated reports of sales and clicks from Amazon, never who you are or what you bought. Wish lists are saved exactly as entered.
We may also disclose information if required by law, or to protect the safety of our users or others.
Keeping and deleting your information
We keep your information while your account exists. You can delete your account at any time in the app under Profile → Delete Account. This permanently deletes:
- your account, profile, and push notification tokens
- your wish lists, your anonymous conversations, and your group chat messages
- groups you organize, including their photos, for all of their members
You're removed from other groups you've joined. In groups where names have already been drawn, an anonymous identifier remains in that group's draw so it stays intact for the other members, but your name, wish list, and messages are deleted.
Reports are kept for up to one year after we review them, so we can handle repeated abuse, even if the account involved is deleted.
Diagnostics collected by New Relic are tied to a device identifier rather than your name or email, and are kept for a limited period under New Relic's data retention, then deleted.
You can also email support@jollydraw.app to ask for a copy of your information, a correction, or deletion.
Security
Information is encrypted in transit. Access to stored data is restricted by security rules, so, for example, only members of a group can read it and only the two people in a conversation can read its messages. No system is perfectly secure, but we work to protect your information.
Children
Jolly Draw isn't directed to children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has given us information, email us and we'll delete it.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your information, or to object to certain processing. Email support@jollydraw.app and we'll respond within 30 days.
Changes to this policy
If we change this policy, we'll update it here and change the effective date above. For significant changes, we'll also let you know in the app.
Contact
Diego Martinez
support@jollydraw.app