Privacy, security and your data

Fondfully is private by design. Your vault stays with you, we measure only what helps us fix and improve the app, and there are no ads and no tracking, ever.

What we store, where

Open Settings, then Privacy & security, then What we store, where. Three cards show it plainly:

• On this phone: your vault, with counts of your people, gifts and receipts.
• In your iCloud / Google Drive: your encrypted backup, when it last ran and how big it is.
• On Fondfully's servers: your account email, sign-in methods, plan, signed-in devices, support messages and anonymous diagnostics. Never your people, gifts, notes or receipts.

The dashboard links straight to exporting your data and deleting your account.

App lock

Open Settings, then Privacy & security, and turn on App lock. Fondfully then asks for Face ID on iPhone, or your fingerprint or face unlock on Android, when you open it and when you come back after more than a minute away.

When Fondfully is locked, you'll see "Fondfully is locked" and an Unlock button. While app lock is on, the Vault tab shows a lock badge (Face ID on iPhone). Your phone checks your face or fingerprint itself; Fondfully only learns whether it matched.

What we measure

• Anonymous diagnostics. When something goes wrong, like a failed sync, the app sends a short technical report: the app version, your phone model and system version, your language setting and what went wrong, with personal details scrubbed out. Reports aren't linked to your account. We keep them for 90 days to find and fix bugs.
• Usage statistics, only if you say yes. Counts of which screens and features get used, sent with a random number made for this installation. Never your people, gifts, notes or anything you type. It's off unless you turn it on, in setup or with Share anonymous usage statistics.
• Crash reports, only when you tap Send. If Fondfully closes unexpectedly, it can offer to send a report next time you open it. Nothing is sent unless you tap Send. Turn off Send crash reports if you'd rather not be asked.

No ads, no tracking, ever

Fondfully has no ads and never will. There are no third-party analytics, advertising or tracking tools in the app, and we never use your phone's advertising ID. We don't sell or share your information.

If you turn on "Support Fondfully when you shop", a tag is added to some store links on your phone. Fondfully doesn't learn what you opened or bought. See Membership, billing and restoring purchases.

Export your vault

Open Settings, then Privacy & security, then Export your vault, and choose a format:

• JSON: everything in your vault in one file, ready to keep or move.
• CSV: spreadsheet files you can open in Numbers, Excel or Google Sheets.
• PDF gift list: a tidy list of your gifts to print or share.

Exports are made on your phone, then your phone's share sheet lets you choose where they go. Exported files aren't encrypted, so keep them somewhere private.

Import from a spreadsheet

Already keep a list? Open Settings, then Privacy & security, then Import from spreadsheet, and choose a CSV file of people and their sizes. Most spreadsheet apps can save one. Fondfully reads the file on your phone and adds the people and sizes it finds. On the free plan, the 5-person limit applies.

Export your account data

Open Settings, then Privacy & security, then Export account data for a copy of what Fondfully's servers keep about your account: your profile and the versions of our terms you agreed to, sign-in methods, signed-in devices, plan, purchase and code records, support messages and the gift briefs you've shared. Your vault isn't in it, because we don't have it. Use Export your vault for that.

Security in short

• Your vault is encrypted on your phone before it goes to your cloud.
• Passwords are stored only as salted, one-way hashes. Your vault passphrase and recovery code never reach us.
• Every connection to Fondfully is encrypted.
• Signed-in devices in Settings, then Account lets you sign out anywhere, anytime.

Found a security problem? Email security@fondfully.com, or read our policy at fondfully.com/security.