Privacy Policy

Effective date: 9 October 2026

Meantvo is a family wishlist app. You save the gifts you'd love, share a link with family and friends, and they quietly coordinate who's getting what. The surprise stays a surprise.

This policy explains what personal information Meantvo collects, why, who can see it, where it's stored, and the choices you have. We've written it in plain English.

Who "we" are: Meantvo is run by Wade Curedale, an individual based in Perth, Western Australia. In this policy, "we", "us" and "our" mean that operator.

We aim to handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). We also follow the core ideas of the EU/UK GDPR and California privacy law: collect only what we need, be open about it, keep it safe, and let you see, correct and delete it.

The short version

• We collect your email address to sign you in. We also store what you put into the app: your profile, wishlists, gift photos, and, if you help buy for someone, your reservations, pledges and comments.
• We use it only to run the app. There's no advertising, no tracking across other apps or websites, no analytics service, and we don't sell or rent your information.
• Surprise-safe: if it's your wishlist, the app doesn't show you who reserved or bought your gifts, how much anyone chipped in, or what givers say to each other.
• Your data is stored with our hosting provider, Supabase, in Tokyo, Japan.
• You can delete your account and data from inside the app at any time.

1. What we collect

Information you give us

• Email address. Used to sign you in with a one-time "magic link". We don't use passwords for normal sign-in, and we don't use your email for marketing.
• Profile.
• Display name and handle. If you don't set a display name, we start with the part of your email address before the "@".
• Discoverability setting. Whether people can find you by handle.
• Optional "taste tags", such as likes and dislikes.
• Wishlists and gifts.
• List and occasion titles.
• Gift titles, notes, tags, sizes, target prices, and links to shops or posts.
• Photos you take with the camera or choose from your photo library.
• Giver activity (when you help buy for someone else):
• Reservations. Marking a gift as reserved or bought, plus the name you type.
• Group-gift pledges. An amount and an optional name.
• Group-gift organiser details. Your name, how people should pay you, and delivery details. Please don't enter full bank or card details; see section 4.
• Comments and @mentions you post in a gift's private giver chat.
• People and invites.
• Who you follow as a giver, plus any label you give them.
• Access requests, approvals and blocks.
• Email addresses you type in to invite someone. If that person isn't a user yet, we keep the address so we can connect you when they join.

Information collected automatically

• Account and security records. Your account ID, when you signed up and last signed in, and the IP address and device/browser type for each sign-in session. Our hosting provider records these to keep accounts secure and the service running.
• Server logs. Our hosting providers (Supabase for the app's backend and Vercel for the website and web share links) keep short-term technical logs, such as IP address, time, and the page or service requested.

Information stored only on your device

• Your sign-in session, so you stay signed in.
• Explore demo data, which lives only on your device and is never uploaded.

What we don't collect

We don't collect: - your location, contacts or address book, phone number, or health information - advertising identifiers or other device identifiers - payment card details - crash or usage analytics

There are no in-app purchases. No money passes through Meantvo: group gifts work on the honour system, and givers pay each other outside the app.

2. Why we use it

We use your information only to provide Meantvo: - Sign-in. To sign you in and keep your account secure. - Sharing. To show your wishlist to the people you share it with. - Coordinating gifts. To let givers reserve gifts, pool money for group gifts and talk to each other without spoiling the surprise. - Link previews. To fetch a title and picture when you paste a shop or Instagram link. - Abuse prevention. To stop spam and abuse: rate limits, blocking, and reviewing reported content. - Contacting you. To respond to you when you contact us, and to tell you about important changes to the service or this policy.

We don't use your information for advertising, profiling or selling, and we don't train AI models on it. Meantvo doesn't use any AI service to process your content.

Legal bases (for people in the EU/UK): We process your data to provide the service you asked for (performance of a contract). Security and abuse prevention rely on our legitimate interests. We'll ask for consent where the law requires it.

3. Surprise-safety: who can see what

Meantvo is built so the person a gift is for doesn't get spoilers.

If it's your wishlist (you're the recipient): - You can see: your own gifts, photos, notes and settings. - You don't see: - which gifts are reserved or bought, or who reserved them - pledge amounts - payment or delivery notes - the givers' private comments - Group gifts: on or after the reveal date you set, you can see the names of people who chipped in, but never the amounts.

Preview giver view: when you preview your own list as a giver would see it, Meantvo hides reservations, purchases, pledges, organiser notes and giver names so you still don't get spoilers.

Givers on your list can see: - your list title - your display name and handle - the gifts, photos, notes and links you've added - not your taste tags; at most they see a general hint

Other givers on the same list can see: - that a gift is reserved or bought, plus the name the giver typed - group-gift pledges (amounts and names) - organiser, payment and delivery notes - comments, if they're an approved giver

Share links: anyone who has your share link can view your list without signing in, and can reserve gifts or pledge on it. Treat the link like a house key and only share it with people you trust.

Photos: gift photos are stored at long, hard-to-guess web addresses so they load quickly for your givers. Anyone who gets a photo's exact address can view it.

Handle search: - If your discoverability is set to "Anyone with handle", signed-in users can find you by your handle (never by display name or email) and ask to become a giver. - You choose whether to accept, decline or block. - Set it to "Only people with my link" to turn search off.

Giver comments: only givers you've approved can read a gift's comment thread. You, the list owner, never can. Givers can edit or delete their own comments. Any giver can Report a comment (with a reason) or Block another giver from that thread; blocked people's comments stay hidden for the blocker, and we review reports within 24 hours.

4. Please be careful with what you post

• Wishlist content, names, comments and organiser notes are shared with other people, as described in section 3.
• Don't put sensitive information (for example full bank account or card numbers, home addresses, or health information) in notes, comments or payment instructions.
• If you do share bank details for a group gift (for example a PayID or BSB and account number), remember that everyone with the list link can see them.

5. Who we share it with

We don't sell, rent or trade personal information. We only share it with:

• Service providers that run Meantvo for us, under their own security and privacy terms:
• Supabase, Inc. (USA). Database, sign-in, photo storage and server functions. Our project is hosted in Supabase's Tokyo, Japan region.
• Supabase's email service. Sends your sign-in links.
• Vercel Inc. (USA). Hosts the Meantvo website and the web version of share links.
• Apple. Distributes the app through the App Store and TestFlight. See Apple's privacy policy.
• Other people in the app, as described in section 3.
• Websites you link to:
• When you paste a link, our server fetches that public page to get its title and picture. Sometimes the app fetches it directly from your device, and then that website can see your IP address and device type.
• For Instagram links we ask Instagram (Meta) for the post's public preview. Instagram receives the link you pasted, not your account details.
• Shops: when you tap a store button (Amazon AU, Kmart, Target AU, Big W, or a gift's own buy link), the app opens that website in your browser. The gift's title may be included as a search term. We don't use affiliate or tracking links, and once you're on another site, its own privacy policy applies.
• The law: if we're required to by law, or to protect someone's safety, or to prevent fraud or abuse.

6. Storing data overseas

Your information is stored on servers in Japan (Supabase, Tokyo region). It may also be accessed or processed in the United States and other countries where our service providers or their sub-processors operate, for example for support, email delivery or website hosting.

We choose providers that use industry-standard security. However, overseas recipients aren't bound by the Australian Privacy Principles, and privacy laws in those countries may differ from Australia's. By using Meantvo you acknowledge this. For EU/UK users, we rely on our providers' standard contractual clauses or similar safeguards for international transfers.

7. How long we keep it

• Account data:
• Your account, profile, wishlists, photos, comments and the rest of your account data: kept until you delete it or delete your account.
• Deleted gifts and photos: if you delete a gift, we delete it from the app.
• Things you typed on someone else's list (a reservation name, a pledge, organiser or delivery notes) become part of that person's list and stay there after you delete your account. Comments you posted are deleted with your account. Contact us if you want something removed.
• Invite emails: email addresses you typed to invite someone are deleted with your account.
• Link previews (a shop page's title, description and picture) are kept in a shared cache that isn't linked to you.
• Backups and logs: these are kept by our providers for a limited time, then deleted.

8. Deleting your account and your data

In the app: go to Me → Your account → Delete account, type DELETE and tap Delete account to confirm. This permanently deletes:

• your sign-in account
• your profile
• your wishlists, gifts and photos
• your comments, follows, requests and invites

It can't be undone.

It can't be undone.

By email: you can also email privacy@meantvo.app from your account's email address. We'll delete your data within 30 days and let you know when it's done.

Explore demo data lives only on your device. Delete the app to remove it.

9. Your rights and choices

• See and correct: you can view and edit your profile and wishlist in the app at any time. To get a copy of your data, or to correct something you can't change yourself, email us.
• Delete: see section 8.
• Limit who finds you: change discoverability to "Only people with my link". You can also decline or block giver requests.
• Permissions: camera access is only requested when you choose to take a photo. You can change it any time in iOS Settings. Choosing from your library uses Apple's photo picker, which only gives us the photos you pick.
• EU/UK and California residents also have rights to access, portability, objection and restriction, and not to be discriminated against for using these rights. We don't sell or "share" personal information for cross-context behavioural advertising.

We'll respond to requests within 30 days. We may need to confirm your identity, usually by replying from your account email.

10. Children and families

Meantvo is a family app, and children often have wishlists in it. It isn't designed for children to use on their own.

• You must be 13 or older to have your own Meantvo account. Children under 13 should only use Meantvo with a parent or guardian's permission and involvement, for example on a family device, or with a parent helping to set up and manage the child's list.
• Parents and guardians:
• we recommend setting a child's profile discoverability to "Only people with my link"
• use a display name that isn't the child's full name
• only share the list link with family and trusted friends
• avoid photos that show the child's face, school or home
• We don't knowingly collect personal information from children under 13 without a parent or guardian's consent. We don't use children's information for advertising or profiling.
• If you're a parent or guardian and think your child has given us information without your consent, or you want your child's data corrected or deleted, contact us and we'll take care of it promptly.

11. Security

We protect your information with reasonable technical and organisational measures: - encryption in transit (HTTPS) - database access rules so that people can only read what they're allowed to (for example, list owners can't read giver comments) - one-time sign-in links instead of passwords - rate limits to slow down abuse

No system is perfectly secure, though. If a data breach is likely to cause serious harm, we'll notify you and the Office of the Australian Information Commissioner as the law requires.

12. Changes to this policy

If we change this policy, we'll update the effective date at the top and, for significant changes, let you know in the app or by email before the change takes effect. Earlier versions are available on request.

13. Contact us and complaints

• Email: privacy@meantvo.app
• Operator: Wade Curedale, Perth, Western Australia, Australia

If you have a privacy concern, please contact us first. We'll respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au, phone 1300 363 992. If you're in the EU or UK, you can also contact your local data protection authority.

To report offensive content or abusive behaviour in Meantvo, use Report on the comment in the app, or email us at the address above.