Privacy Policy (beta)

This policy explains what personal data Tunza collects, why, who we share it with, how long we keep it, and your rights under the Nigeria Data Protection Act 2023 (NDPA).

1. Who is responsible

Titilope Adesodun, Lagos, Nigeria, is responsible for your data (the data controller). Privacy requests: tunza.dev.mail@gmail.com.

2. What we collect

Creators (people with a Tunza account)

• Email address.
• Sign-in records: sessions, sign-in times and IP address.
• Gift content: the recipient's name, all text you write, the "From" name, the friend group name, photos, and a scrambled (hashed) version of any gift password, never the password itself.
• Payment records: Paystack reference, amount, status and date. No card or bank details.
• How you heard about Tunza, if you choose to tell us (one answer, plus an optional short note). We use it only to understand which channels bring people to Tunza.

Recipients and people in photos

• Whatever the creator adds: a name, photos and messages. They don't sign up. The creator confirms they have permission to share them.

Friends who add a note (contributors)

• Name and note.
• A random device ID and a short-lived access ticket (deleted after 24 hours), used to stop spam.

People who report a gift

• The reason you choose, any comment you write, and your email address if you choose to give it (only so we can reply).
• A random device ID and your IP address, briefly, to stop spam reports.

Ambassadors

If you join our ambassador programme, we keep your name, WhatsApp number and email address, along with your ambassador code and the paid gifts made with it. We use them only to run the programme, work out your commission and pay you. Buyers who use your code don't see your details, and we don't share them with anyone.

Everyone who visits Tunza

• IP address, browser and device type, the page address (including gift links), and technical server logs, collected by our hosting provider.
• Visit counts from Vercel Web Analytics: page address, the site you came from, country, and device/browser type. It uses no cookies.

Photos: your browser removes location and camera data (EXIF) from every photo before upload. We store only a resized copy, never the original file.

3. Why we use it

Emails we send you

Emails you always get. We email you when it's needed for your account or your gifts: sign-in codes, payment receipts, and notices such as a gift link about to expire or a draft about to be deleted. These are part of using Tunza, so you can't turn them off.

Unfinished-gift reminders. If you start a gift and leave it unfinished for 2 days, we send you one email reminding you what's left to do, for example "1 more thing for the jar".

• It uses only your gift's title and a list of what's missing. It never includes your photos, letter or friends' notes.
• We send one reminder per unfinished gift, not a series.
• Reminders are on when you create an account. To turn them off, use Email settings (from your account menu) or "Stop reminders" in any reminder email.

Tunza news. If you tick "Send me Tunza news and birthday ideas" when you sign up, or turn on Tunza news in Email settings, we email you about new templates, features, offers and birthday ideas, about once a month.

• It's off unless you choose it.
• We keep a record of when you said yes, so we can show you agreed.
• To stop, use the unsubscribe link at the bottom of every news email, or turn off Tunza news in Email settings. It takes effect right away.

Your email address. We don't sell your data or use it for advertising. We send Tunza news only if you choose it. Our emails are sent through Google (Gmail), which sends them on our behalf and doesn't use your address for anything else.

Contacting you

We may contact you personally about your gift or to ask for feedback.

4. Who can see a gift

• Gifts are unlisted: anyone with the link (and the password, if one is set) can view the gift.
• Every gift page is marked so search engines don't list it.
• When a live gift link is shared in WhatsApp, iMessage or similar apps, the preview shows "A gift for {first name}" and a standard Tunza image. No photos or other gift text appear in the preview.
• Contribute links show "Write a note for {first name}" in their preview.
• Links that aren't live (turned off, expired or deleted) show only a generic "A gift on Tunza" preview.

5. Services we use

To run Tunza, we share some data with trusted service providers. Each one only gets what it needs to do its job.

6. Data stored outside Nigeria

Supabase stores our data in London, United Kingdom. Vercel and Google may process data in the United States and other countries. We only use providers that commit to strong data protection, as the NDPA requires for transfers outside Nigeria.

7. How long we keep it

When a gift is deleted, its photos are deleted first, then the rest of the gift.

8. Cookies and similar storage

We use only what Tunza needs to work:

• a sign-in session cookie;
• a gift password cookie (one per gift, lasts 30 days) so you don't re-enter the password on that device;
• a random device ID, used only to stop abuse.

No advertising or tracking cookies. All fonts are hosted by Tunza, so opening a gift makes no requests to Google Fonts.

Counting visits (no tracking)

To understand how people find Tunza, your browser may keep a few small anonymous flags. They hold no name, email, phone number, IP address or device ID. We use them only on Tunza and never to follow you on other sites.

• Opening a gift is counted once per visit.
• If you tap "Make your own gift" or "Make a gift like this", a flag remembers for 7 days that you came from a gift, so a sign-up can be counted.
• If you send a note on a gift, a flag remembers it for 30 days, so we can count if you later make a gift of your own.

We only keep daily totals (for example, "12 gifts opened today"), never who did what. You can clear these flags at any time by clearing your browser's site data for Tunza.

9. Your rights

Under the NDPA you can ask us to:

• give you a copy of your data;
• correct data that's wrong;
• delete your data;
• stop or limit how we use it;
• give you your data in a format you can move elsewhere.

Where we rely on your consent, you can withdraw it at any time. You can also complain to the Nigeria Data Protection Commission (NDPC).

How to ask: email tunza.dev.mail@gmail.com, from your account's email address if you have one. We respond within 30 days and may ask you to confirm it's you.

• Creators: delete gifts in the app at any time. Account deletion is by email for now, completed within 30 days.
• Recipients or anyone in a gift: email us the gift link. We respond within 72 hours and, if the request is credible, unpublish the gift while we review it. You can also use the Report this gift link at the end of the gift.
• Contributors: ask the gift's creator to delete your note, or email us.

10. Children

You must be 18 or older to create a Tunza account. If we learn an account belongs to someone under 18, we delete it. Gifts can be for, or show, people under 18; the creator confirms that the child's parent or guardian is fine with it.

11. Security

• All connections use HTTPS.
• Database access rules keep each creator's gifts private to their account.
• Gift passwords are stored only in hashed form.
• Photos are shown through short-lived links that check the gift is live and unlocked.

No system is perfectly secure. If a breach puts your data at risk, we'll tell you and the NDPC as the law requires.

12. Changes to this policy

• Material changes: we email you and show a notice in the app before they take effect.
• Minor changes: we show a notice in the app.

13. Contact

Privacy requests and questions: tunza.dev.mail@gmail.com.