Privacy Policy

Introduction

At Anjo, privacy isn't a feature; it's our foundation. This Privacy Policy explains how we handle your information when you use our mobile application.

Your phone number stays yours

Anjo uses phone numbers to help you find friends and family. Even so, your number is nowhere in our database. We only store a cryptographic fingerprint: a keyed hash (HMAC-SHA256), computed with a secret server key that is managed separately from the database. If our database ever leaked, not a single phone number could be recovered from it.

Many services say "we hash your number" and leave it at that. We don't think that's enough. There are only about a hundred million Dutch mobile numbers, so a plain hash can be reversed on a laptop in seconds. That is why we key ours with a secret: the fingerprint still works for finding your contacts, and is worthless to anyone without the key.

Information We Collect

Contact Information

With your explicit permission, Anjo reads your device's contact list. Phone numbers are sent over an encrypted connection, normalised and hashed in memory into keyed fingerprints (HMAC-SHA256), and forgotten immediately afterwards. The numbers themselves are never stored or logged, and contact names never leave your phone.

Account Information

When you create an account, we collect basic information such as your name and profile picture (if provided).

Wishlist Data

We store the wishlists you create and gift preferences you share. This information is only visible to contacts you explicitly choose to share it with.

How We Use Your Information

• Send you birthday reminders for your contacts
• Enable wishlist sharing with your chosen contacts
• Provide personalized gift suggestions via affiliate links

Tracking & Analytics

The Anjo app does not use any analytics or tracking tools. We do not collect behavioral data, usage patterns, or device fingerprints. We do not use cookies for tracking purposes.

This website counts page views with Matomo on a server we run ourselves. It sets no cookies, anonymises IP addresses before storing them, collects no personal data, and shares nothing with anyone. If your browser sends a Do Not Track signal, nothing is recorded at all.

Data Sharing

We never sell your personal information to third parties. Information is only shared:

• With contacts you explicitly choose to share wishlists with
• With service providers who help us operate the app (under strict confidentiality agreements)
• When required by law or to protect our users' safety

Affiliate Links & Business Model

Anjo earns revenue through affiliate links. When you purchase a gift through a wishlist link, the retailer pays us a small commission. You pay the exact same price as going directly to the store. We do not share any personal data with affiliate partners beyond the standard click-through.

Data Security

We implement industry-standard security measures including encryption in transit and at rest. Phone-number fingerprints are keyed hashes (HMAC-SHA256): the secret key exists only on our servers and is kept separate from the database, so a database leak alone exposes no phone numbers. If someone obtained both the database and the key, numbers could still be recovered; that is exactly why we keep the two apart.

Your Rights

• Access and review your personal data
• Correct inaccurate information
• Delete your account and all associated data
• Withdraw consent for data processing
• Export your data in a portable format

Children's Privacy

Anjo is not intended for children under 16 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last updated' date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

support@anjo.gift

Anjo Privacy Team, Veemarktkade 8, 5222AE 's-Hertogenbosch, The Netherlands