Privacy Policy
Last updated: 17 August 2026
The short version
We collect the least we can: enough to deliver one gift and let a shop honour it. We don't sell personal information, and we don't market to people just because someone sent them a treat.
Mobile information and messaging consent
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories described below exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
In plain words: if you give us your mobile number and agree to be texted, that number and the record of your consent are used by us to text you about your own gift, and for nothing else. We do not sell them, rent them, trade them, or pass them to any marketing partner, advertiser, affiliate, or influencer, ever.
What we collect
From senders: the name you sign the gift with, and optionally your own contact so we can tell you it was redeemed.
From recipients: the phone number or email the sender gave us, the recipient's first name if provided, and whether the gift was opened and redeemed.
From businesses: shop details, staff names, and redemption records.
Automatically: basic technical and usage data (device type, approximate region, page events) to keep the service working and detect abuse.
Why we have it
To deliver the gift, to let a business verify a code at the counter, to stop fraud and abuse (for example, one person farming the same free promotion), and to show a business aggregate results for their campaign.
What businesses see
A business sees the gifts tied to their own shop: the item, the first name on the gift, and whether it was redeemed. They do not get a recipient's phone number or email, and they cannot export contacts.
Who else touches the data
Service providers only, and only so the service can run at all: Supabase for the database, Vercel for hosting, Resend for email, Twilio to actually transmit text messages, and Stripe for payments. Each acts on our instructions, may use the data only to perform that job for us, and may not use it for its own purposes.
That is the only sharing that happens. We do not sell or rent personal information, we do not share it for cross-context behavioural advertising, and we do not disclose it to any marketing partner or affiliate. Mobile numbers and text-message consent records are never disclosed to anyone for marketing or promotional purposes.
Text messages
We only text a number that its own owner gave us. When you send a gift you may optionally enter your own mobile number and tick a box asking us to text you about that gift. We record the time you did it and the exact wording you were shown, so we can show you later what you agreed to.
Those messages are transactional: your gift was opened, your gift was redeemed, and one reminder before it expires. No marketing texts, ever. Consenting is optional and is never a condition of sending or receiving a gift.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Reply STOP to any message to end them, or HELP for help. Message frequency varies, typically one to three messages per gift you send. Message and data rates may apply.
We do not text gift recipients on a number supplied by the sender.
How long we keep it
Recipient contact details for 12 months after a gift expires or is redeemed, then deleted or de-identified. Redemption and audit records are kept longer for accounting and dispute resolution.
Your choices
You can ask us for a copy of your information, ask us to correct it, or ask us to delete it. Email privacy@spreadthelove.app. Residents of California and other states with comprehensive privacy laws have additional rights, including access, deletion and correction. Write to the address below and we will action the request within the period your state requires.
Children
The service isn't directed at children under 13. If we learn we've collected a child's information, we delete it.
Who we are
Spread the Love is operated by Fonseca Enterprises LLC, 156 Jericho Turnpike, Mineola, NY 11501, United States. “We” and “us” in this policy mean that company.
Contact
privacy@spreadthelove.app
Fonseca Enterprises LLC, 156 Jericho Turnpike, Mineola, NY 11501, USA