Privacy Policy

Last updated November 1, 2026. Heaps is made by an individual developer in Washington, United States.

What Heaps collects

• Your email address, to sign you in. Heaps has no passwords; we email you a one-time code and link.
• Your display name, so the people in your events know who you are.
• The events you create or join, including their names, dates, budgets and notes.
• Your wishlist items: titles, prices, links and images you add or paste, and how much you want each one.
• Claims: which items you have said you'll buy, and any note you leave for the other givers.
• Your shipping address, only if you choose to add it, so the people buying for you know where to send gifts.
• Lists you keep for other people, such as a child, under a name you choose.
• Reports you send about an item or a person, with the reason you give.
• How you use the app: counts of actions like creating an event, adding an item or opening Amazon, tied to your account. We keep these on our own servers to understand what people use. They contain no device identifiers, no location and no advertising identifiers, and nothing is shared with anyone else.

Heaps does not collect your contacts, location, photos, payment details or advertising identifiers. The app includes no third-party analytics or advertising code. The website does use Google Analytics, described below.

This website

useheaps.com uses Google Analytics to count visits and see which pages people read. It records the pages you view, roughly where you are (country or region), the device and browser type, and how you arrived, with your IP address shortened before it is stored. We use it only to understand what the site's visitors find useful. For visitors in the European Union, United Kingdom, Iceland, Liechtenstein, Norway and Switzerland, Google Analytics runs without cookies or identifiers unless you choose otherwise. You can block it anywhere with a browser extension such as Google's opt-out add-on. Some gift guides embed YouTube videos; the player and its cookies load only if you tap play, through YouTube's privacy-enhanced domain, under Google's privacy policy. The Heaps iPhone app does not include Google Analytics.

Who sees what

People in the same event can see each other's names, lists and event details. Your shipping address, if you add one, is shown only to people in your events. Claims on your own list are hidden from you by design and are never included in the data sent to your device. Claims are visible to the other members of the event. The organizer of an event can see its invite code. Nobody outside an event can see anything in it, with one exception: if you or someone in your event creates a share link for a list, anyone with that link can see the items on it, but never who claimed what. Deleting the list, or leaving the event, stops the link working.

How Heaps uses this information

Only to run the app: showing lists to the right people, sending sign-in links, sending reminders you have turned on, and keeping your events in sync. Heaps does not sell personal information, does not share it with advertisers, and does not use it to train any model.

Amazon

Browsing Amazon inside Heaps happens in a web view that talks directly to Amazon, under Amazon's own privacy policy. Product details you add are read on your device. Links to Amazon carry an Amazon Associates tag; as an Amazon Associate, Heaps earns from qualifying purchases, which never changes the price you pay.

Service providers

• Cloudflare hosts the Heaps servers and database (United States and global network).
• Google Analytics measures visits to this website only, as described above.
• Resend delivers sign-in emails.
• Apple delivers the app. Reminders you turn on are scheduled on your phone, not sent from our servers.

These providers process data only to provide their service to Heaps.

Retention and deletion

Your data is kept while you have an account. Leaving an event removes you and your list from it. Deleting an event removes it for everyone. To delete your account and everything tied to it, open Account in the app and tap Delete my account; it happens immediately. You can also email hello@useheaps.com from the address you sign in with.

Children

Heaps is for adults. A list kept for a child is created and controlled by the adult who manages it, and holds only the name that adult chooses and the items they add. Heaps does not knowingly collect information from children under 13.

Security

Traffic is encrypted in transit. Sign-in codes and links work once and expire in 15 minutes. Sessions are signed tokens stored in the iPhone keychain.

Your rights

You can ask to see, correct or delete your information at any time by emailing hello@useheaps.com.

Changes

If this policy changes in a way that matters, we will note the new date at the top of this page and, for significant changes, tell you in the app.