Privacy Policy

Last updated October 11, 2026

This Privacy Policy for Astra Soma LLC (“we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your information when you use our services (“Services”), including when you:

Visit our website at astrasoma.com, or any website of ours that links to this Privacy Policy
Download and use our mobile application (GiftMemories), or any other application of ours that links to this Privacy Policy

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. We are responsible for making decisions about how your information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@astrasoma.com.

SUMMARY OF KEY POINTS

What personal information do we process? When you use our Services, we do not require you to create an account or provide personal information. All data you enter into GiftMemories (gifts, people, occasions, budgets, photos, and notes) is stored on your device and, if you choose, in your personal iCloud account. We cannot see your gifts, people, or occasions.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we collect any information from third parties? We do not collect any information from third parties.

How do we process your information? We collect pseudonymous usage analytics (including upgrade-screen and purchase events) and crash reports through Firebase (operated by Google) to improve the app. This data is not linked to your identity.

In what situations and with which parties do we share personal information? We may share pseudonymous analytics and crash data with Google through Firebase. We do not share your personal content with anyone.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. All of your data is under your control on your device.

How do you exercise your rights? The easiest way to exercise your rights is by contacting us at privacy@astrasoma.com, or by visiting astrasoma.com/support.

1. WHAT INFORMATION DO WE COLLECT?

Information stored on your device

All of your data — gifts, people, occasions, budgets, photos, and notes — is stored locally on your iPhone using Apple’s on-device database (SwiftData). If you enable iCloud sync, a copy is also stored in your personal iCloud account. The data never leaves your device unless it is for your personal iCloud sync.

iCloud Sync. GiftMemories offers optional iCloud sync. When enabled, your data is stored in your personal iCloud account using Apple’s CloudKit service with a private database. This means:

Apple encrypts your data in transit and at rest; Astra Soma LLC cannot access it
You can disable iCloud sync at any time in iPhone Settings

For more information about how Apple handles iCloud data, see Apple’s iCloud security overview.

Contacts

When you choose to import people from Contacts and grant access, the app reads:

First and last name
Birthday
Phone number
Email address
Thumbnail photo

This contact information is stored only on your device (and in your iCloud if sync is enabled). It is never sent to Astra Soma LLC, Firebase, or any other third party. You can also add people manually without granting Contacts access.

You can revoke Contacts permission at any time in your iPhone’s Settings › Privacy & Security › Contacts.

Photos and Camera

GiftMemories may request access to your camera or photo library when you attach a photo to a gift or receipt. Photos you add are stored on your device (and in your iCloud if sync is enabled). They are never sent to Astra Soma LLC or any third party. You can revoke camera or photo library access at any time in your iPhone’s Settings › Privacy & Security › Photos / Camera.

When you share a link, page, or image into GiftMemories from another app, the app reads what you shared and saves it on your device (and in iCloud if sync is on). It is never sent to us.

Information we do NOT collect

GiftMemories does not require an account, email address, or sign-up of any kind. We do not collect, store, or have access to:

Your name, email address, or phone number
The names, emails, or phone numbers of people in your gift lists
Gift names, gift prices, photos, or notes
Your precise location
Any information that identifies you personally

We do not sell or rent personal information, and we do not share it for advertising.

Information automatically collected

We automatically collect certain information when you use the Services. This information does not reveal your identity, such as your name or contact details (it is pseudonymous), but may include device and usage information, such as your device model, operating system version, app version, information about how and when you use the app, and other technical data. This information is primarily needed to maintain the security and operation of our app, for troubleshooting, and for our internal analytics and reporting purposes.

The information we collect includes:

Log and Usage Data. Usage data collected through Firebase Analytics, including which features are used and how often (for example, how many gifts are created, which tabs are viewed), your currency setting, and event counts. Analytics also records when the upgrade screen is shown and when a purchase completes, including the product, price, and currency. Purchase events are pseudonymous and never include your Apple ID or payment details. Firebase Analytics does not collect gift names, person names, photos, email addresses, phone numbers, or any content you enter into the app.
Device Data. Device information such as your iPhone model, iOS version, app version, and application identification numbers. Firebase may derive an approximate region from your IP address, but we do not collect precise location or GPS data, phone number, or mobile carrier information.
Crash Data. When the app encounters an error, Firebase Crashlytics collects crash reports including stack traces, device model, operating system version, and app state at the time of the crash. Crash data does not include any content you entered into the app.

Payment data

GiftMemories offers optional subscriptions through Apple’s App Store. All purchases are processed by Apple using StoreKit. We do not collect or store your payment information, credit card number, or Apple ID. We do receive pseudonymous purchase events through Firebase Analytics (see above). Apple’s handling of purchase data is governed by Apple’s Privacy Policy.

Notifications

We may request to send you notifications regarding occasion reminders and other features of the app. If you wish to opt out, you may turn them off in your device’s settings.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your information to provide, improve, and administer our Services, for security and crash prevention, and to comply with law. We process your information only when we have a valid legal reason to do so.

Specifically, we use pseudonymous analytics data to understand which features are used, identify crashes, and improve the app. We do not use your personal content for any purpose because we do not have access to it.

We use the following third-party service providers:

Service	Operated by	What it receives	Linked to identity	Used for tracking
Firebase Analytics	Google	Pseudonymous usage events, purchase events (product, price, currency), device info	No	No
Firebase Crashlytics	Google	Crash reports, device info	No	No
Firebase Remote Config	Google	Device info for config fetch	No	No
iCloud (CloudKit)	Apple	Your data if sync is enabled	Only by your Apple ID	No
StoreKit	Apple	Purchase transactions	By your Apple ID (Apple, not us)	No

Firebase processes this data under Google’s data processing terms for Firebase.

GiftMemories does not use any advertising SDKs, attribution tools, or cross-app tracking frameworks. The app does not request App Tracking Transparency permission because it does not track you.

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

4. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

Analytics and crash data processed by Firebase may be transferred to and stored on Google’s servers, which may be located outside your country of residence. Google’s handling of this data is governed by Google’s Privacy Policy.

If you enable iCloud sync, your data is stored in Apple’s data centers according to Apple’s Privacy Policy.

5. WEBSITE

Our website (astrasoma.com) is hosted on Netlify. When you visit the website, Netlify may collect basic server logs including your IP address, browser type, and pages visited. This data is governed by Netlify’s Privacy Policy. We do not add any analytics or tracking to the website beyond what Netlify collects by default.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

All personal data (gifts, people, occasions, photos, notes) is stored on your device and, if sync is on, in your iCloud account. We do not retain any of this data on our servers because we do not operate servers that store user data.

Firebase Analytics keeps detailed usage events for 2 months and the pseudonymous app-install identifier for 14 months after your last use of the app. Firebase Crashlytics keeps crash reports and their install identifiers for 90 days, then deletes them.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate technical and organizational security measures designed to protect the security of any information we process. All personal data is stored on your device using Apple’s iOS data protection, which encrypts data at rest. If you enable iCloud sync, Apple encrypts your data in transit and at rest; Astra Soma LLC cannot access it.

However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Although we will do our best to protect your information, transmission of data to and from our Services is at your own risk.

8. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect, solicit data from, or market to children under 13 years of age. By using the Services, you represent that you are at least 13 and, if under 18, have a parent or guardian’s consent. We hold no personal content from any user, including minors. Pseudonymous analytics data held by Firebase is not tied to your name. If you become aware of any data we may have collected from children under age 13, please contact us at privacy@astrasoma.com.

9. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your state of residence in the US, or your country of residence, you may have rights that allow you greater access to and control over your personal information.

All of your data is under your control:

Delete individual items: Delete gifts, ideas, and occasions in the app. People without gifts can be deleted; people with gifts can be archived.
Delete all data: Uninstall removes data on this phone. If you use iCloud sync, also delete iCloud data in iPhone Settings › [your name] › iCloud › Manage Storage › GiftMemories.
Disable analytics: There is no in-app analytics opt-out yet; email privacy@astrasoma.com if you have questions about analytics data.

We hold no personal content on our servers. Pseudonymous analytics data held by Firebase is not tied to your name or contact details.

Canada. Residents of Canada can ask to see or correct their personal information under PIPEDA by writing to privacy@astrasoma.com.

If you have questions or comments about your privacy rights, email us at privacy@astrasoma.com.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information.

Categories of Personal Information We Collect

We collect device identifiers and app usage data through Firebase for analytics. We do not sell or share them for advertising. We have not collected personal information in the following categories in the past twelve (12) months: personal information under the California Customer Records statute, protected classification characteristics, biometric information, geolocation data, sensory data, professional or employment data, education information, or inferences drawn from the above. We collect pseudonymous purchase records (product, price, currency) through Firebase Analytics.

We do not sell or share personal information as those terms are defined under California law. We disclose device identifiers, usage and purchase event data to Google (Firebase) as a service provider for analytics and crash reporting.

Your Rights

You have rights under certain US state data protection laws. These rights include:

Right to know whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request the deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to non-discrimination for exercising your rights
Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling

How to Exercise Your Rights

To exercise these rights, contact us by visiting astrasoma.com/support, or by emailing us at privacy@astrasoma.com. We will consider and act upon any request in accordance with applicable data protection laws.

California “Shine The Light” Law

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact details provided below.

12. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this Privacy Policy. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact us at:

Astra Soma LLC 2108 N St, Ste N Sacramento, CA 95816 privacy@astrasoma.com

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

All of your data is stored on your device and, if enabled, in your personal iCloud account. You have full control over it at all times. Delete gifts, ideas, and occasions in the app. People without gifts can be deleted; people with gifts can be archived. Uninstalling removes all data on this phone. To delete synced data from iCloud, go to iPhone Settings › [your name] › iCloud › Manage Storage › GiftMemories.

We hold no personal content on our servers. Pseudonymous analytics data held by Firebase is not tied to your name. If you have questions, please visit astrasoma.com/support or contact us at privacy@astrasoma.com.