Last Updated: September 15, 2026
This Privacy Policy explains how Giggys Inc., a corporation incorporated under the federal laws of Canada (the Canada Business Corporations Act), with its registered office in the Province of Ontario ("Giggys," "we," "us," or "our"), collects, uses, discloses, and retains personal information about Customers who use the Giggys mobile application (the "Platform") to browse, reserve, and claim rewards from participating merchants, consistent with the defined terms in our Customer Terms of Service.
By using the Platform, you consent to the collection, use, and disclosure of personal information as described in this Policy, to the extent permitted by applicable law.
This Policy covers only Giggys' handling of Customer (end-user) personal information. It does not describe how Giggys handles Merchant personal/business information, or website-visitor data.
Phone number. The Platform is phone-number-only — there is no separate username, password, or email address. Your phone number is verified and held by our authentication provider, Firebase Authentication.
Consent record. When you accept this Policy and our Terms of Service, we record the date and the version you accepted, so we can ask you again if either document later changes materially.
Location (approximate, and not retained as coordinates). With your permission, the Platform uses your device's approximate location to determine which country's Campaigns to show you. Your coordinates are sent to your device's own operating-system location service to resolve a country; the coordinates themselves are never sent to us. The resulting country is included with a Reservation you make, and is also kept in your account record (not as coordinates) so we can show you Campaigns for that country on your next visit and target time-sensitive push notifications about your country's Campaigns.
Device identifier. We collect a persistent identifier generated by your device's operating system, and associate it with your Reservations, primarily to detect abuse.
Push notification token. If you enable push notifications, we collect a device push notification token generated by your device's operating system.
Feedback contact info (optional). If you submit feedback through the Platform and choose to provide a reply email address, we collect and store it, together with your phone number, so we can respond to you.
Claim photos. When you attempt a Claim, you select a photo from your device's photo library and submit it to us. We use it, together with the relevant Merchant's business name, to run an automated check for whether it substantiates your engagement with that Merchant's business. We do not access your camera or microphone directly, even though the app's permission prompts mention them.
Reservation, Wallet, and Redemption records. We keep a record of the Campaigns you reserve and claim, your Points balance, and your Redemption history, including which gift-card retailer you chose and the resulting order details.
Email address (Reward Link redemptions only). For most Redemptions, we do not collect your email address — our systems and our gift-card fulfillment partner require a value in the field where an email address would normally go, so we supply a fixed, non-functional placeholder value on your behalf, and instruct our fulfillment partner not to send anything to it, and your gift card is delivered entirely within the Platform. The exception is a "Reward Link" Redemption: because that Redemption's final gift card is issued through our fulfillment partner's own checkout page once you select a retailer, we ask you to provide a real email address so that page can deliver your gift card to you. We keep this email address as part of that Redemption's record, described further in Section 5, and also cache it on your own device so it can pre-fill your next Reward Link Redemption; it is not used for any other purpose, such as marketing.
We use Customer personal information to: operate the Platform; verify your phone number to sign you in; show you Campaigns available in your country; process your Reservations and Claims, including the automated review of Claim photos described above; maintain your Points Wallet and fulfill your Redemptions; detect and prevent fraud and abuse; and respond to support inquiries you submit to support@giggys.app.
The Platform does not send you marketing emails. If you enable push notifications — optional, controlled by your device's notification settings and the toggle in Account Settings — we may send you account-relevant alerts (such as telling you if a spot you reserved was cancelled) and occasional reminders about time-limited activity on the Platform (such as a weekly reservation window closing soon). Other than responding to feedback you submit with a reply email address, all other communication with you happens within the app itself when you open it.
We do not sell personal information. We share Customer personal information only with the following categories of recipients, and only to the extent needed to provide the Platform:
The Merchant whose Campaign you reserve or claim — receives a record tied to your Reservation or Claim that includes a non-identifying account reference (not your phone number, and not your name — we do not collect a name), your device identifier, and, once you attempt a Claim, the automated review's pass/fail result and its written reasoning. This record references, but does not include, the photo itself — only you can actually view it. The Merchant does not receive your Wallet balance or Redemption history, which are visible only to you.
Google Cloud / Firebase (hosting, authentication, database, file storage, and, if you enable push notifications, delivery of those notifications via Firebase Cloud Messaging using your device's push token) — hosts substantially all Customer data described in this Policy.
Tango Card (gift-card fulfillment) — receives the order details needed to issue your Reward (amount, retailer, and either the non-functional placeholder value or, for a Reward Link Redemption, the real email address described in Section 1) when you complete a Redemption. For a Reward Link Redemption, Tango Card uses that email address to deliver your gift card directly to you once you select a retailer. Tango Card does not receive your phone number.
Google Gemini (generative AI) — receives the photo you submit for a Claim, together with the relevant Merchant's business name, solely to run the automated verification check described in Section 1.
Resend (transactional email) — used to route feedback you submit through the Platform to our support team, and to any reply email address you provide with it.
Firebase App Check — a device-attestation mechanism used to help distinguish genuine use of the Platform from automated abuse.
Expo / EAS Update — the Platform periodically contacts Expo's update servers to check for and download app updates. This exchange may expose technical information such as your device's IP address and app version to Expo; no Customer account data described in Section 1 is sent to Expo.
Google Analytics for Firebase — receives non-identifying usage data (which screens you view, general app interactions, device model, operating system version, and app version) to help us understand how the Platform is used and improve it. This is configured without Apple's advertising identifier (IDFA) and without linking your usage data to any advertising network or other company's data for advertising purposes.
Firebase Crashlytics — if the app crashes or encounters an unexpected error, receives a crash report containing diagnostic information such as the error itself, device state at the time of the crash, and device model, operating system version, and app version, to help us find and fix the underlying bug.
We may also disclose personal information where required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets.
Giggys is a Canadian company, but our infrastructure providers (principally Google Cloud/Firebase) and other service providers (Tango Card, Google Gemini) are based in, or process data in, the United States. Our backend systems that handle Customer requests run in Google Cloud's us-central1 region. By using the Platform, you acknowledge that your personal information may be transferred to and processed in a country other than your own, which may have different data protection laws than your country of residence.
When you delete your account, we immediately disable your ability to sign in. We do not delete your Reservation, Wallet, or Redemption records when you delete your account — we keep them, any Claim photo you submitted, your push notification token (if any), and any feedback you submitted, for seven (7) years following account deletion as a record of Points issued and Rewards fulfilled, including gift-card order details if you redeemed a Reward. After that period, this data is automatically and permanently deleted.
For a short period after you delete your account, if you were also signed in on another device, that device's existing session may still be technically capable of attempting some actions before it naturally expires; our servers independently check whether your account has been deleted and block new Reservations, Claims, and Redemptions once it has.
We rely on the security infrastructure provided by Google Cloud/Firebase, including encryption of data in transit and at rest as provided by that platform. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
You may delete your account at any time from within the Platform, or request access to, correction of, or deletion of your personal information by contacting us at support@giggys.app. As described in Section 5, account deletion does not erase your Reservation, Wallet, or Redemption records; if you require complete erasure of this data, please state this explicitly in your request, and we will evaluate what is technically and legally possible.
The Platform uses Google Analytics for Firebase to collect non-identifying usage data, such as which screens you view and how you interact with the app, as described in Section 3. It also uses Firebase Crashlytics to receive crash and error reports so we can find and fix bugs, and a Firebase Authentication session on your device and a Firebase App Check token. The Platform also stores a small amount of non-identifying information only on your own device, never sent to us: your consent-acceptance status, whether you've completed the Platform's introductory screens, your last-detected country for browsing convenience, a cached email address for your convenience on your next Reward Link Redemption (Section 1), and rate-limiting information used to limit how many verification codes can be requested for a phone number in a short period. Google Analytics for Firebase is configured without Apple's advertising identifier (IDFA) and does not link your usage data to any advertising network or other company's data for advertising purposes; the Platform does not run advertising technology. If that changes, we will update this Policy accordingly.
The Platform is intended for use only by people who are at least eighteen (18) years old, and Customers attest to this when they accept our Terms of Service. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us at support@giggys.app so we can address it.
We may update this Privacy Policy from time to time. Because a Giggys account is not associated with an email address, we do not notify you of changes by email. If we make material changes, you will be asked to review and re-accept this Policy the next time you open the Platform. Continued use of the Platform after that point constitutes acceptance of the revised Policy.
If you have questions about this Privacy Policy or how we handle your personal information, contact us at support@giggys.app.
This policy covers the mobile app. The website has its own Privacy Policy.
View the Giggys Business app Privacy Policy →