Privacy Policy

1. What we collect

We only collect information that we need to run the Service. This includes:

Account information

• Your email address, and optionally your name and profile picture.
• Sign-in credentials. If you sign in with a passkey, the passkey's public key is stored with us; the private key never leaves your device. If you sign in with Google, we receive your name, email address, and profile picture from Google. If you sign in with an email code, we send a one-time code to your address.
• Your timezone and notification preferences.

Registry information

• The details you add to a registry: its title and description, your baby's name, due date or date of birth, and your postcode (used to match clothing recommendations to your local seasons).
• Your answers to the setup questionnaire (for example your housing situation, feeding and nappy preferences, and budget).
• The items you add, including product links, notes, prices, and sizes, and your reactions to recommendations (added, dismissed, feedback given).

Guest information

• If you visit a registry as a gift-giver, you can optionally provide a display name and email address so the registry owner knows who reserved or purchased a gift, and so we can send you reservation reminders.

Sharing and invitations

• When you invite someone to view or help manage a registry, we collect their email address and any notes you record, solely to send and track that invitation.

Payment information

• Payments for Smart Features are processed by Stripe. We receive confirmation of your payment and a customer reference, but we never see or store your card details.

Technical information

• Standard server logs (such as IP address, browser type, and pages requested) and the cookies and local storage entries needed to keep you signed in and remember your preferences.
• We do not use third-party advertising trackers or third-party analytics services.

2. Anonymous registries

You can create and edit a registry without an account. Draft registries are tied to a private token stored in your browser. If you later create an account, the draft is linked to it. Until then, we hold the registry details you entered without knowing who you are.

3. Information about your child

A baby registry naturally involves information about your child, such as their name, due date or date of birth, and clothing sizes. This information is provided by you as the parent or guardian, and we use it only to personalise your registry and recommendations, and to show it to the people you choose to share your registry with. We never sell it, use it for advertising, or disclose it beyond what is described in this policy.

4. How we use your information

• To provide, maintain, and improve the Service.
• To generate personalised product recommendations based on your questionnaire answers, your baby's age and sizes, your postcode's seasons, and how you interact with recommendations.
• To coordinate gift-giving: showing guests what has been reserved or purchased so gifts are not doubled up.
• To send transactional and service emails, such as sign-in codes, invitations, reservation confirmations and reminders, and registry notifications. You can control notification emails in your settings, and we honour your quiet hours.
• To process payments and maintain your entitlements.
• To keep the Service safe, including moderating content, preventing abuse, and applying rate limits.

We do not use your personal information to train AI models, and we do not send you marketing email without your consent.

5. Who can see your registry

Your registry is shared via a link. Anyone who has that link can view the registry, including its title, the items on it, and the baby details you have chosen to include. Share the link only with people you want to see it. You can also invite specific people by email to view or help manage a registry.

6. Service providers we share information with

We share personal information with a small number of service providers who help us run the Service. They may only use it to provide their service to us:

• Convex — our database and backend platform, where Service data is stored.
• Vercel — hosts the website.
• Resend — delivers our transactional emails.
• Stripe — processes payments.
• Google — if you choose to sign in with Google.
• OpenAI — when you add an item by link or via the browser extension, we may send the product's public details (title, description, brand, and price) to OpenAI to categorise it. Only public product information is sent — never your account, registry, or baby details.

We do not sell personal information, and we do not share it with advertisers or data brokers. We may disclose information where required by law.

7. Overseas disclosure

Some of our service providers (including Convex, Vercel, Resend, Stripe, and OpenAI) store or process data in the United States and other countries. We take reasonable steps to ensure these providers handle your information consistently with the Australian Privacy Principles, including relying on their contractual commitments and security certifications.

8. Browser extension

The EverRegistry Quick Add extension:

• Only reads the page you are on when you click the extension, to extract product details (title, price, image) for adding to your registry.
• Does not track your browsing history, and does not read pages in the background.
• Stores your sign-in session, a short-lived cache of your registries, and any unsaved item draft locally in your browser, and communicates only with EverRegistry's own servers.

9. Security

All traffic to the Service is encrypted in transit. Sensitive tokens (such as invitation and guest tokens) are stored as one-way hashes, so they cannot be read even by us. We support passkeys as a phishing-resistant sign-in method and encourage you to use them. No system is perfectly secure, but we take reasonable steps to protect your information from misuse, loss, and unauthorised access.

10. Retention and deletion

We keep your information while your account or registry is active. Operational logs are kept only for a limited retention window. If you want your account, a registry, or your guest details deleted, contact us at privacy@everregistry.com.au and we will delete them unless we are required to retain them (for example, payment records we must keep for tax purposes).

11. Access, correction, and complaints

You can access and update most of your information directly in the app. You may also contact us to request access to, or correction of, the personal information we hold about you.

If you have a privacy concern or complaint, contact us at privacy@everregistry.com.au and we will respond within a reasonable time. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you through the Service or by email. The "Last updated" date at the top shows when it was last revised.

13. Contact us

Questions about this policy or how we handle your information? Email us at privacy@everregistry.com.au.

See also our Terms of Service.