Privacy Policy
Vaquita is an app for group gifts: friends suggest ideas, vote, one person buys the gift and everyone pays them back. It is made by Nicolas Frugoni, trading as Frusoft ("we", "us"), who is the controller of your personal data. This page explains what we collect, why, who helps us run the service and the choices you have.
The short version
- Vaquita never holds, processes or moves money. Payments happen outside the app, between you and your friends.
- We collect what is needed to run your gifts: your name, your sign-in details, what you add to a gift, the payment details you choose to share, and a push token if you turn notifications on.
- No ads. No advertising ID. No tracking across apps or websites. No third-party analytics. We do not sell your data.
- The birthday person never sees the gift. They are just a name.
- You can delete your account in the app, on the web or by email. See Delete account.
1. What we collect
Your name and account
You start with an anonymous account: we create an account ID and you choose a display name, which the other members of your gifts see. If you link an account to keep your gifts on a new phone, we also store your email address (for email and password or Google sign-in) or the identifier and email that Apple gives us for Sign in with Apple, which can be Apple's private relay address. We never see your Apple or Google password.
Payment details you enter
So friends know how to pay you back, you can save payment details on your profile: for example an alias, CBU or CVU, a Bizum phone number, an IBAN, a PayPal, Venmo or Zelle handle, or another method. When you buy a gift, these details are copied into that gift and shown only to its members. We do not collect card numbers and we do not move money.
Gift content
What you and the other members add to a gift: the recipient's first name, the occasion, date, budget and currency; ideas with their title, link, price, note and preview image; likes and votes; the purchase (title, total, note, and optional photos of the gift and the receipt); who has paid, optional transfer screenshots, and the buyer's confirmation.
Saved birthdays
If you save birthdays to get a reminder, we store the name, the day and an optional group label. Only you can see them.
Notifications
If you turn notifications on, we store a push token (Firebase Cloud Messaging) for your device so we can tell you about votes, purchases and payments.
Product usage events
We record a few events about how the product is used, such as "gift created", "invite shared" or "vote closed", with your account ID, the gift ID, the platform and the time. They are stored in our own database, are not shared with any analytics company, and are used only to improve Vaquita.
Language and region
Your language and region (locale), used to show the app in your language and format dates and amounts.
Link previews
When you paste a product link in the iOS app, your phone fetches that page to read its title, image and price. The request goes from your phone to that website, which sees it like a normal visit.
Support
If you email us, we keep your message and email address to reply.
Technical logs
Google's infrastructure (Firebase) processes IP addresses and request details to deliver the service and keep it secure. These logs are short-lived.
2. What we do not do
- No advertising, no advertising ID, no ad networks and no data brokers.
- No tracking across other companies' apps or websites, and no third-party analytics SDKs.
- We never sell your data.
- We do not access your location or your contacts, and we never collect payment card data.
3. Why we use your data
| Purpose | Legal basis (GDPR) |
|---|---|
| Running Vaquita: accounts, gifts, ideas, votes, purchases, payment tracking, invites, birthdays | Performance of the contract |
| Security and abuse prevention | Legitimate interests |
| Improving the product with first-party usage events | Legitimate interests |
| Push notifications | Your consent, which you can withdraw at any time in iOS Settings |
4. Who can see your data
Members of a gift see each other's names, the ideas, likes and votes, the purchase with its photos and receipt, who has paid, transfer screenshots, and the buyer's payment details. They see nothing from your other gifts, and your saved birthdays are visible only to you.
The recipient never sees the gift. They are only a first name typed by the organizer.
If you choose to share a message through WhatsApp or another app, that app receives what you share under its own privacy policy.
5. Who processes data for us
| Provider | Role |
|---|---|
| Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Hosting, Cloud Messaging) | Accounts, storing and serving the data, notifications. Firestore and Storage are in the EU (eur3 multi-region and europe-west); Cloud Functions run in Belgium (europe-west1). |
| Apple | Sign in with Apple, push delivery (APNs) |
| Google sign-in |
These providers act on our instructions. Some may process data outside the EU, using safeguards such as the EU Standard Contractual Clauses. We do not share data for advertising.
6. How long we keep it
- Your data is kept while your account exists.
- Notification delivery records (used to avoid duplicate notifications) expire after 30 days.
- Server logs are short-lived. Firebase keeps managed backups on a rolling basis, so deleted data disappears from them after a limited period.
7. Deleting your account
In the app go to Profile, Delete account; on the web page open your gift link and use Delete my account in the account section; or email us. Full steps are at Delete account. When your account is deleted:
- your profile, payment details, saved birthdays, push tokens, usage events and transfer screenshots are deleted;
- you are removed from gifts that are still open. If you organize one, the organizer role passes to another member. If you volunteered to buy one that hasn't been bought yet, you step down;
- in gifts already bought or finished, your name is replaced with "Deleted user" so the other members' payment records stay correct;
- gifts where you were the only member are deleted;
- your sign-in account is deleted.
8. Your rights
You can access, correct, delete and export your data, and object to processing based on legitimate interests. You can edit your name and payment details in the app and delete your account at any time. For anything else, email support@frusoft.dev. We answer within 30 days.
You can also complain to a data protection authority: in Spain the Agencia Española de Protección de Datos (AEPD), elsewhere in the EU your local authority, and in Argentina the Agencia de Acceso a la Información Pública (AAIP), under Law 25.326.
9. Children
Vaquita is not directed at children under 13. Do not use it if you are under 13, or under the minimum age for this kind of service in your country. If you believe a child has an account, contact us and we will delete it.
10. Security
Data is encrypted in transit and protected by access rules so that only the members of a gift can read it. No system is perfectly secure, but we limit what we collect so there is less to protect.
11. Changes
If we change this policy in a meaningful way, we will update the date above and let you know in the app.
12. Contact
Nicolas Frugoni (Frusoft), support@frusoft.dev