Privacy Policy

1.Scope & Services

This Privacy Policy applies to:

• Parents or legal guardians who create and manage accounts
• Children who are beneficiaries of gifts
• Teens aged 13 to 17 who hold a gift-card-only account with a parent’s or legal guardian’s consent
• Recipients of the gifts
• Gifters who send gifts through shared links
• Visitors to our app or website

Our Services involve the following roles:

• Parent / Legal Guardian (Account Holder and creates and manages the account and controls child-related data) / Adult
• Child (child would be a beneficiary. Children do not independently create accounts).
• Teen Account Holder (aged 13 to 17, with a parent’s or legal guardian’s consent; gift cards only).
• Gifter (Friends or family members who send gifts using a shared link).

2.Personal Information We Collect

Personal information mentioned in this Privacy Policy means, according to the law, any piece of information that can identify you, relate to you, describe you, or is capable of being associated with you in any way.

For the purposes of our services, we collect the following information:

Recipients/Beneficiaries

• Name
• Email address
• Phone number
• Home Address (adult account holders only; we do not collect a home address for anyone under 18)
• Date of birth
• Gender (optional)
• Profile photo (optional)
• Child details
  • Name
  • Age/DoB

Gifters

• Name
• Email address
• Phone number

Gift Messages

Gifters may attach a written note, a greeting card or a recorded voice message to a gift. We store these with the gift so the recipient and their family can see them in the gift history.

Identity Verification

Adults who receive cash payouts may be asked to verify their identity, for example with their legal name, date of birth, address and the last four digits of their Social Security number. We use this information only to verify identity, prevent fraud and meet legal obligations, and share it with our payment processor for those purposes. Identity verification is never requested from anyone under 18.

When gifts are sent, we collect information related to the transaction, such as:

• Gift amount
• Transaction status
• Payment method type
• Order ID

Payment processing is handled by our third-party payment provider Stripe Connect. We do not store or process payment card numbers or bank account details.

Automatically collected Information

When you visit, use, and interact with our Services we may automatically collect information. This may include:

• Device type, operating system, and browser type
• IP address (which may be masked)
• Cookies or similar technologies

3.How Do We Use Your Personal Information

We use personal information to:

• Create and manage accounts
• Facilitate cash gifts (for account holders aged 18 or older) and gift card purchases
• Verify a parent’s or legal guardian’s consent before a family member under 18 is added
• Enable wishlists and shared gifting links
• Communicate with you to inform about any changes related to Services that may affect you
• Provide customer support and respond to your queries and requests, obtain feedback, and communicate otherwise
• Comply with legal and regulatory obligations
• Observe and analyze usage, diagnose problems, and administer the quality of our Services

4.Children's and Teens' Privacy

In this Privacy Policy, a “child” means an individual under 13 years of age, a “teen” means an individual aged 13 to 17, and a “minor” means anyone under 18.

The operator that collects and maintains personal information about children through the Services is Futureit Inc., 13028 Bold Venture Ave., Frisco, TX 75035 (phone: +1 (412) 656-3103; email: legal@futureit.us).

How Accounts Work by Age

• Under 13. Children cannot create accounts. A child can only be added as a family member by a parent or legal guardian, who manages the child’s profile from their own account.
• 13 to 17. Teens may hold their own account with the consent of a parent or legal guardian. Teen accounts are limited to gift cards: teens cannot send or receive cash gifts, link a bank account, or invest.
• 18 and over. Adults may use all available features of the Services.

Cash and investment features are not available to anyone under 18 in their own name. A parent or legal guardian may hold cash goals on a minor’s behalf within the parent’s own account.

Verifiable Parental Consent

Before a parent or legal guardian can add a family member under 18, we provide the parent with notice of our information practices and obtain verifiable parental consent. The parent verifies their identity with a credit or debit card in their name through our payment processor, Stripe: we place a small, temporary authorization on the card, which is released and not charged, and the cardholder is notified of it. We do not collect the minor’s personal information, other than what is needed to request consent, until consent has been verified.

A parent may revoke consent at any time. When consent is revoked, we stop collecting information about that minor and delete their profile as described under Data Retention below.

Information Collected About Children and Teens

When a parent adds a family member, we collect limited information provided directly by the parent, which may include:

• First name or nickname, and a profile handle
• Age/DoB
• An optional profile photo
• If the parent turns on sign-in for the child, a login email address and password chosen by the parent, and optionally a contact phone number

For a teen account holder, we collect the teen’s name, email address, phone number, date of birth, an optional profile photo and gender, and their gift card and wishlist activity.

Gifts sent to a minor may include messages from the gifter, such as a written note, a greeting card or a recorded voice message. These are stored with the gift so the family can see them in the gift history. Any thank-you message a child sends is subject to prior parental review and approval.

We do not collect a home address for anyone under 18, we do not require children to provide personal information themselves, and we do not knowingly collect sensitive personal data about minors.

Purpose of Collection

Information about children and teens is used only to:

• Associate savings goals, wishlists, or gift activities with a specific child or teen
• Display goal names and progress
• Generate shareable links when initiated by the parent
• Deliver gift cards and the messages attached to gifts
• Support basic account functionality and record-keeping

We do not use personal information about anyone under 18 for targeted advertising, we do not build advertising profiles of minors, and we do not sell or share minors’ personal information for cross-context behavioral advertising.

Disclosure to Third Parties

We disclose information about children and teens only to service providers that help us operate the Services, and only as needed for that purpose: our payment processor (Stripe), our gift card partner (to deliver gift cards), and our cloud hosting, storage and error-monitoring providers. These providers may not use the information for any other purpose. We may also disclose information where required by law, as described in “Sharing & Disclosure of Personal Information”.

Parental Control

All child profiles are:

• Created, managed, and controlled exclusively by the parent or legal guardian
• Accessible only through the parent’s account
• Editable or removable by the parent at any time

Parents may choose to allow a child to access and interact with their own profile using child-appropriate features. Children can only view their own profile and dashboard in a read-only manner, and any wishlist creation or other activity is subject to prior parental review and approval. Children cannot independently:

• Share information externally
• Initiate or approve financial transactions
• Modify privacy or contact details
• Communicate with third parties

Any action that involves any of the above would require the parent/guardian’s consent.

Sharing of Child-Related Content

Parents may choose to share links related to a child’s goal or wishlist with family members or others (for example, to allow contributions).

Please note:

• Any information visible through shared links is determined by the parent
• Shared links may display the child’s name/nickname and goal or wishlist details

We are not responsible for how third parties use information once a parent voluntarily shares a link.

Data Retention

We do not keep personal information about children or teens indefinitely. It is retained only while the parent maintains the family member’s profile and the parent’s account remains active, or while the teen’s account remains active.

When a parent deletes a profile, closes their account or revokes consent, or when a teen account is closed, we delete or anonymize the associated personal information, including photos and voice messages, within 30 days. Copies in our backups are removed on their normal rotation. Where the law requires us to keep transaction records, we keep only those records, only for the period required, and use them for no other purpose.

Parental Rights

Parents and legal guardians have the right to:

• Review the personal information collected about their child
• Request corrections or updates. Request deletion of the child’s profile and associated data
• Refuse to permit further collection or use of their child’s information, and revoke consent at any time
• Contact us with questions or concerns regarding children’s privacy

To exercise these rights, use the controls in your account or contact us using the details in “Contact Us”. We will verify that you are the parent or legal guardian before acting on a request.

5.Sharing & Disclosure of Personal Information

We may share or disclose information collected from you or otherwise, to deliver our Services or meet other objectives as defined in the Privacy Policy with:

• Payment processors
• Gift card and marketplace partners. Legal or regulatory authorities, when required by law or if we believe it is authorized or necessary to:
  • protect our rights or property, or the security or integrity of our Services;
  • enforce the terms of our terms of service or other applicable agreements or policies;
  • protect us, users of our Services, or the public from harm or potentially prohibited or illegal activities;
  • investigate, detect, and prevent fraud and security breaches; or
  • comply with any applicable law, regulation, legal process, or governmental request (including, for example, a court order, subpoena, or search warrant).

All third parties are required to protect personal information and use it only for authorized purposes.

In case of any merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

6.Your Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information. We extend these rights to all users where reasonably possible.

1. Right to Know / Access. You have the right to request confirmation of whether we process your personal information and to access the personal information we hold about you.
2. Right to Data Portability. You have the right to receive a copy of your personal information in a portable and, where feasible, readily usable format.
3. Right to Correction. You have the right to request correction of inaccurate or incomplete personal information.
4. Right to Deletion. You have the right to request deletion of your personal information, subject to certain legal and operational exceptions.
5. Right to Opt Out of Targeted Advertising. Where required by law, you may have the right to opt out of the use of your personal information for targeted advertising or similar activities.
6. Right to Appeal. If we deny your privacy rights request, you may have the right to appeal our decision by contacting us through the channels mentioned at the end of this Privacy Policy.
7. Right to Non-Discrimination. You have the right not to be discriminated against for exercising your privacy rights.

If you are a California resident, you may also have the following rights under the California Consumer Privacy Act (as amended by the CPRA):

1. Right to Opt Out of Sale or Sharing of Personal Information. You have the right to opt out of the sale or sharing of your personal information, including sharing for cross-context behavioral advertising, where applicable.

We recognize and honor Global Privacy Control (GPC) signals. When we receive a GPC signal, we will apply your opt-out preference to the browser or device that sends the signal. Once a GPC signal is received, we will display a notice in the footer confirming that your opt-out request has been honored. The opt-out takes effect immediately for data collected during that interaction.

1. Right to Limit the Use and Disclosure of Sensitive Personal Information. You have the right to limit the use and disclosure of sensitive personal information to purposes permitted by law, where applicable.

Under the applicable privacy laws, you have certain rights in relation to your personal data . Responses to exercise your rights will be provided within 45 days (or such other period under applicable law). If your request is particularly complicated we may extend the deadline for responding by a further 45 days (or such other period permitted under applicable law), but we will let you know if this is the case.

For exercising the limit the use of sensitive personal information or do not sell or share - responses shall be provided within 15 days of the receipt of the request.

In order to exercise any rights available to you, refer to the “Your Privacy Choices” section

7.Do Not Track (“DNT”) & Global Privacy Control

Some web browsers may transmit “Do Not Track” (DNT) signals indicating a user’s preference not to be tracked online. Because there is currently no widely accepted industry standard for responding to DNT signals, our Services do not respond to or alter their practices when a DNT signal is received.

Where required by applicable law, we may recognize browser-based opt-out signals such as the Global Privacy Control (GPC) to process requests to opt out of certain data sharing or processing activities.

8.Cookie & Analytics

We may use cookies to provide you with a seamless experience on our website and application. Cookies enable us to identify you and provide the ability to access our services when you visit our website.

Cookies are small text files with data that are used to identify your computer when you connect to a network. Data stored in a cookie is created by the server upon your connection. This data is labelled with an ID unique to your computer. When the cookie is exchanged between your computer and the network server, the server reads the ID and knows what information to specifically serve you.

Where we use cookies that are not strictly necessary, our website will display a banner when you try to access it for the first time. In this banner you will be able to select the cookies you wish us to track. You may reconfirm/modify your cookie choices by clicking on “Cookie Preference” option.

We do not use advertising cookies, and we do not use cookies or similar technologies to deliver targeted advertising to anyone, including users under 18.

9.Security Measures

We implement appropriate administrative, physical, and technical security measures to reasonably protect your personal information against unauthorized access, disclosure, damage, or loss. These measures include, where appropriate, encryption of data in transit and at rest, access controls, and monitoring of our systems.

Despite these safeguards, no method of transmission over the internet or method of electronic storage is completely secure. We therefore cannot guarantee absolute security, and users are encouraged to take steps to protect their account credentials.

10.Retention & Deletion

We retain personal information only for as long as reasonably necessary to provide our Services, fulfill the purposes described in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Information about children and teens is retained only while the parent maintains the family member’s profile and the parent’s account remains active, or while the teen’s account remains active, and is deleted or anonymized within 30 days after the profile is deleted, the account is closed or parental consent is revoked (see “Children’s and Teens’ Privacy”).

Users may request deletion of their personal information at any time, subject to certain legal and operational exceptions. Parents or legal guardians may request deletion of their child’s profile and associated personal information.

Upon a verified deletion request, we will delete or anonymize personal information, unless retention is required to:

• comply with applicable laws or regulations;
• complete transactions or provide services requested by the user;
• detect or prevent fraud or security incidents; or
• exercise or defend legal claims.

Requests for deletion can be submitted through account settings or by contacting us using the details provided in this Privacy Policy.

11.International Data Transfers

We do not transfer personal information outside the United States. Personal information collected through our Services is processed and stored on systems located in the United States and is accessed only by authorized personnel and service providers operating within the United States.

If our data processing practices change in the future and involve international data transfers, we will update this Privacy Policy and provide any notices required by applicable law.

12.Contact Us

If you have any questions or concerns about this Privacy Policy, our practices or compliance with the applicable privacy laws, you can reach us at:

• Email: legal@futureit.us
• Phone: +1 (412) 656-3103
• Address: 13028 Bold Venture Ave., Frisco, TX 75035