Privacy Policy
How Occasio collects, uses, and protects your information.
Last updated: 2026-10-09
This Privacy Policy explains how Occasio (“we”, “us”, “our”) handles information when you use our mobile app, recipient web pages at shared links, and related services (collectively, the Service).
By using the Service, you agree to this policy. If you do not agree, please do not use the Service.
1. Who we are
Occasio is operated by Nick Kubde from India. For privacy questions or requests, contact us at developernick1@gmail.com.
2. What Occasio does
Occasio lets you create personalized digital greeting cards and share them via a link. You may use many features as a guest without creating an account. Optional sign-in unlocks saving people to your Vault, creation history, and subscription features as they become available.
Recipients open shared links in a web browser. They do not need to install the app or create an account to view a card.
3. Information we collect
We collect only what is needed to provide the Service.
3.1 Information you provide
| Data | When | Purpose |
|---|---|---|
| Email address | When you create an account or sign in with email | Authentication and account security (your password is handled by Firebase Authentication; we never see it) |
| Google account info | When you choose Google sign-in | Authentication (name, email as provided by Google) |
| Apple account info | When you choose Sign in with Apple | Authentication (the name and email, or Apple’s private relay address, that you choose to share) |
| Card content | When you create a card | Photos, recipient name, message, template choice |
| Vault entries | When you save a person | Name, relationship, dates (e.g. birthday), optional WhatsApp or phone |
| Support messages | When you contact us | Respond to your request |
You can create and share cards without signing in. In that case we do not collect your email address or sign-in account, but we still process the card content needed to generate and host the share link.
3.2 Information collected automatically
| Data | Purpose |
|---|---|
| Age check result | When you first open the app we ask for your date of birth to confirm you are 13 or older. The date is checked and then discarded: we do not store your date of birth. We keep only a signed "passed" token on your phone and, once you have an account, a note on that account that it passed |
| Push notification token | If you allow notifications — so we can tell you when a card is ready to review |
| Purchase status | Whether you have an active subscription or bought a single card, from the App Store or Google Play via RevenueCat — to provide what you paid for |
| IP address and browser info | When someone opens a share link, and when you use the app's servers — security, abuse prevention, and delivery (kept in our hosting provider's logs) |
| Unsubscribe list | If someone unsubscribes from our emails we keep a one-way hash of their email address, so we never email them again. It cannot be turned back into the address |
We do not use analytics, advertising, session-replay or screen-recording tools, and we do not track you across other apps or websites. The app does not collect usage statistics or crash reports today. If we add them, they will stay off until you turn them on, and you will be able to turn them off again at any time.
We do not scrape your phone contacts. Vault data is limited to what you manually enter.
3.3 Information about other people
When you add someone to your Vault or address a card to them, you provide their name and optionally contact details or dates. You are responsible for having a lawful basis to store and use that information (for example, your personal relationship with them). We use it only to deliver the features you request, such as reminders or auto-send when available.
3.4 Cookies and on-device storage
Occasio's website sets no advertising or analytics cookies. Card pages store a few preferences in your browser's local storage so they work as you expect (for example whether sound is muted, whether you already sent a reaction, and stickers you collected). They never leave your device and are not used to identify you. The internal documentation area uses one strictly necessary, secure cookie to remember access. The app stores your choices and drafts on your phone.
4. How we use information
We use collected information to:
- Create, host, and deliver shared greeting cards
- Authenticate your account and sync your Vault and history across devices
- Send service-related messages (e.g. password-reset emails) and the notifications you allow, such as a reminder to review a card
- Process subscriptions and purchases when you buy a paid plan (via Google Play or Apple App Store)
- Monitor reliability, prevent abuse, and improve the Service
- Comply with legal obligations
We do not sell your personal information.
5. How long we keep information
| Data | Retention |
|---|---|
| Shared card links (guest) | Links expire after 30 days; the card, its photos and related server data are then deleted automatically within 14 days |
| Shared card links (signed-in free) | 30 days by default |
| Shared card links (paid) | Cards you create in the app expire 30 days after creation. Cards prepared by the on-their-day feature (Occasio Pro) can last up to 365 days |
| Vault and account data | Until you delete the person or your account, or ask us to delete it |
| Creation history (metadata) | Until you delete entries or your account |
| Server logs | Typically up to 90 days, unless needed longer for security or legal reasons |
| Copyright and abuse reports | A card taken down after a report is kept for up to 90 days so a counter-notice can be honoured, then deleted. We keep a short record of each notice for as long as the law requires |
When a link expires, recipients can no longer view the card at that URL.
6. Who we share information with
We use trusted service providers to run Occasio. They process data only on our instructions:
| Provider | What it receives and why |
|---|---|
| Google Firebase (Authentication, Cloud Firestore, Cloud Messaging; Cloud Functions and Storage once enabled) | Your account, Vault, history and card content, and your push token, to run the service |
| Google Sign-In / Sign in with Apple | The sign-in you choose (name and email as you allow), to authenticate you |
| RevenueCat | Your account ID and purchase receipts, to manage subscriptions and purchases |
| Vercel | API and public web hosting for share links; it sees requests (including IP addresses) and handles card content in transit |
| Resend | If you turn on auto-send by email: the recipient's email address and name, and the link to the card, to deliver the email. Every such email has an unsubscribe link |
| Google Play / Apple App Store | Subscription and payment processing (we do not receive your full payment card number) |
We do not sell personal information and we do not share it with advertisers or data brokers.
We may disclose information if required by law, to protect our rights, or to prevent fraud or abuse.
Shared greeting links are unlisted — anyone with the URL can view the card until it expires. Please share links only with intended recipients.
7. Your choices and rights
Depending on where you live (including under India’s Digital Personal Data Protection Act, 2023), you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your account, Vault entries, or specific data
- Withdraw consent where processing is based on consent
- Complain to a supervisory authority
Delete your account: in the app, open the Account tab and tap Delete account and data. Deletion starts immediately and needs no email or phone call. For other deletion requests, see Delete your account and data.
By email: send requests to developernick1@gmail.com. We will respond within a reasonable time (typically within 30 days).
8. Children
Occasio is not for children under 13. The first time you open the app we ask for your date of birth. If you are under 13 we do not let you continue, we do not create an account, and we do not keep anything you entered. The check is repeated on our server when an account is created. If we learn that an account belongs to a child under 13, we delete it and its data. If you believe a child has used Occasio, contact us at the address below and we will act on it.
9. Security
We use industry-standard measures including encrypted connections (HTTPS), access controls, and Firebase security rules. No method of transmission or storage is 100% secure; we work to protect your data and will notify you of significant breaches where required by law.
10. International transfers
Our service providers may process data in countries other than India (for example, the United States or the European Union). Where required, we rely on appropriate safeguards for such transfers.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date. Continued use of the Service after changes means you accept the updated policy.
12. Contact
Email: developernick1@gmail.com
Website: occasio-greetings.vercel.app