Privacy matters, especially when a wishlist can say a lot about a person. This policy explains what Bestboy collects, why we need it, who receives it, and the choices you have. We use plain language because you should not need a legal dictionary to understand it.
House of MA s.r.o., ID No. 300 39 479, with its registered seat at Příčná 1892/4, 110 00 Prague 1, the Czech Republic, file No. C 455543 maintained by the Municipal Court in Prague, is the controller of personal data described in this policy. Contact us at yo@bestboy.app.
1. The information we collect
We collect information you give us, information created while the Service works, and information an optional device feature provides.
Account and profile information. Email address, display name, password stored by our authentication provider as a protected credential, profile photo, birthday, preferences, and settings.
Wishlist content. Wishes, notes, links, product details, images, list names, sharing choices, follows, reservations, donation preferences, and activity related to your lists.
Gift ideas for other people. Names, relationships, birthdays, photos, and gift ideas you choose to enter. Please only add information you are allowed to use.
Connected assistants and API keys. If you connect an AI assistant or create an API key: which assistant you approved, the access it was granted, when, and sign-in tokens issued to it; for an API key, its name, a short prefix, a one-way hash, and when it was last used. See section 6.
Technical and security information. Device, browser, app version, log, IP-address, and session information used to deliver, secure, troubleshoot, and prevent abuse of the Service.
Support and communications. Information you send us, plus service emails such as account confirmation, password reset, and notifications you choose to receive.
2. Mobile app permissions
The iOS app asks for permission only when you choose a feature that needs it. Microphone access lets you turn a spoken note into a wish. The system photo picker lets you select a photo for a profile, person, or wish; Bestboy receives the photo you select, not your whole library. You can decline or change permissions in iOS Settings. We do not ask for contacts, precise location, or advertising tracking to use Bestboy.
3. How we use information
provide and personalize Bestboy, including lists, sharing, reservations, reminders, and chosen notifications;
authenticate you, protect accounts, prevent fraud and misuse, and keep the Service reliable;
answer support requests and communicate important service changes;
understand aggregate product use and improve features when you allow optional analytics; and
meet legal obligations and enforce our Terms.
Where GDPR applies, we process data to provide the Service and perform our contract with you, for our legitimate interests in security and improving Bestboy, with your consent where required, and where we need to meet a legal obligation. You can withdraw consent at any time; this does not affect processing before withdrawal.
4. Sharing and visibility
Anyone with a public share link can see the content and details that the list owner has chosen to make visible. A shared list can be made private again or given a new link by its owner. Reservation status may be visible to prevent duplicate purchases; Bestboy is designed not to reveal the reservation giver’s identity to the list owner.
Your private account data and private gift ideas are not visible to other users unless you actively share them. We do not sell personal information or use it for targeted advertising.
5. Service providers and other recipients
We use selected providers to run Bestboy. They may process personal data only to provide services to us and under appropriate contractual safeguards:
Supabase for database hosting, authentication, storage, and backend services.
Vercel for hosting and web performance services.
Resend to deliver transactional email.
Umami, and when you consent on the web, Google Analytics, for analytics.
Sentry for error monitoring when it is enabled.
DiceBear when you choose a generated avatar.
If you follow a product link, connect an AI assistant (see section 6), use a payment method outside Bestboy, or visit another website, that third party handles information under its own policy. We may disclose information where law requires it or to protect users, our rights, or the Service. Some providers may process data outside the EEA; where required, we use a lawful transfer mechanism and appropriate safeguards.
6. AI assistants and MCP connections
Bestboy offers a Model Context Protocol (MCP) server and API keys so an AI assistant you choose, such as Claude (Anthropic) or ChatGPT (OpenAI), can work with your Bestboy account on your behalf. This section applies if you connect one, use an API key, or use the public share-link tools. Setup steps are at bestboy.app/docs/mcp.
What a connected assistant can access. You sign in to Bestboy and approve each assistant on a consent screen. Once approved, it can read and change your own Bestboy content — your wishlists, wishes, gift ideas, the people you plan gifts for, lists you follow, and collaborators on your lists — and nothing outside your account. Access is not limited to read-only; the sign-in scopes we offer (openid, email, profile) identify you but do not narrow what a connection can do. Bestboy never returns your password, sign-in credentials, or bank-transfer details to an assistant.
What the assistant receives. Only what a tool call returns: wish and list details (names, notes, links, prices, images, priority, occasion, reserved and received status, sharing status and share links); for people you plan gifts for, their name, relationship, birthday, and photo link, plus your gift ideas for them; names of public lists you follow and their owners’ display names; and the display names and photos of collaborators on your lists. Through a public share link, anyone can view that list, including through an assistant, exactly as on the shared-list web page. Reserving a gift through a public link is anonymous, using a random session identifier rather than your identity.
What Bestboy receives from the assistant. The tool request — its name and the values the assistant fills in, such as a wish title, a link, or an email address to invite — and the sign-in token or API key. We do not receive your conversation with the assistant, its memory, or your other files, and we do not keep a separate copy of tool requests: content you ask the assistant to add or change is saved as your Bestboy content, like anything you enter yourself.
Invitations. If you ask an assistant to invite a collaborator, we email the address it supplies, through our email provider, with a link to join the list.
What we keep, and for how long. A record of each approved assistant (its name, granted access, and time) and its refresh tokens are kept until you revoke the connection or delete your account. API keys are stored only as a one-way hash with a short prefix and last-used time, until you revoke them or delete your account. A per-account daily counter of wishes added through assistants is kept for a few days to enforce a daily limit. Short-lived request counters, held in memory and not stored, apply rate limits per account or IP address. Our hosting providers keep standard request logs (time, endpoint, status, and IP address) for security and troubleshooting under their own retention schedules.
How we use it. Only to carry out the action you or your assistant requested, keep the service secure, and prevent abuse. We do not sell it, use it for advertising, or use your Bestboy content received through MCP to train AI models.
The assistant provider. Whatever a tool returns becomes part of your conversation with that assistant, which its provider (for example Anthropic or OpenAI) processes under its own terms and privacy policy; we do not control what it stores or whether it uses it. Because gift ideas can include other people’s names and birthdays, only connect an assistant you are comfortable sharing that with, and check the provider’s data settings.
Your controls. Review and disconnect assistants and delete API keys under Settings → AI Agent; revoking takes effect immediately and removes the tokens we issued. Items an assistant deletes go to Trash and can be restored for 30 days, like deletions in the app. Deleting your account removes your connections and keys along with your other data (see section 8).
7. Cookies, analytics, and your choices
When someone opens a private Card, Bestboy records the first time the envelope is opened so the sender can see a generic “Card opened” status. A shared link does not identify who opened it. The recipient can read the card without an account. The sender may revoke its link; cards remain available until the link is revoked or the sender deletes their account. Card messages and recipient email addresses are not sent to analytics.
Essential browser storage keeps you signed in and remembers your privacy choice. Optional web analytics load only after you choose “Accept all” in our cookie banner. We do not use session replay or screen-recording tools. You can change that choice any time from the cookie icon. Read our Cookie Policy for the current list. The native iOS app does not use browser cookies; its App Store privacy details describe the version you install.
8. Retention and deletion
We keep personal data for as long as your account is active or as needed to provide the Service. You can edit most information in Bestboy. You can initiate deletion of your whole account from Account settings in the web app and iOS app. Account deletion removes your account and associated personal data from active systems.
We may keep a minimal record where law requires it or for security, fraud prevention, dispute handling, and backup recovery. Backup copies are protected and isolated from normal use, then removed in the normal backup rotation. If deletion fails or you need help, email yo@bestboy.app.
9. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your data, and to withdraw consent. Use the settings above or email yo@bestboy.app. We may need to verify your identity before acting on a request.
If you are in the EEA or UK, you may also complain to your local data-protection authority. In the Czech Republic, this is the Office for Personal Data Protection (ÚOOÚ).
10. Children
Bestboy is not designed for children under 16. We do not knowingly collect personal information from children under that age. If you believe a child has provided us personal information, please contact us.
11. Chrome extension
The Bestboy Chrome extension saves the product on the page you are viewing to your Bestboy account. This section describes what it does with data; the rest of this policy applies to the account it saves to.
Your choice. Before reading product details or connecting your account, the extension explains its data use and asks you to agree. You can close it without agreeing. It remembers this choice on your device; uninstalling removes it.
When it reads a page. Only when you click the Bestboy toolbar icon or choose “Save to Bestboy” from the right-click menu, and only on that one tab. It does not run in the background, does not read other tabs, and does not record your browsing history.
What it reads. Product details the page publishes or shows: title, images, price, currency, and the page link. You can edit all of it before saving.
What it sends, and when. Those details, plus any note, occasion, list, or person you choose, are sent to Bestboy only when you press Save. When you are signed in, the extension also loads your lists, people, and recent wishes from your account so it can fill its pickers and warn you if you already saved the same link; that comparison happens on your device and the page you are on is not sent for it.
Sign-in. You sign in through Bestboy’s own sign-in page (or with an API key you create in Settings). The extension never sees your password.
What it stores on your device. OAuth access/refresh tokens or your API key, the pending capture, and page-scoped drafts (product edits, chosen lists or person, occasion and note) stay in browser-session memory, accessible only to trusted extension pages. They are not written to disk or Chrome Sync and clear on browser restart or extension disable, reload or update. Drafts are reused for up to 30 minutes and cleared on a successful save or sign-out. Sign-out also clears the pending capture. Your theme, data-use choice and non-secret OAuth client registration stay in local extension storage. Legacy credentials stored by earlier versions are removed rather than reused.
Third parties. The extension has no analytics, advertising, or tracking code; fonts are bundled. Product previews, list covers and person photos load directly from their image hosts over HTTPS, without a referrer. Those hosts receive the requested image URL and network information, including your IP address. Account data and saves use Bestboy’s services and necessary providers described in section 5, including Supabase. Exchange rates also come from Bestboy.
Limited Use. Bestboy’s use and transfer of information received through the Chrome extension comply with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use extension data only to provide and support the disclosed save feature. We do not sell it, use or transfer it for advertising, unrelated profiling, creditworthiness or lending. Transfers are limited to what is necessary for this feature, security or compliance with law. Humans may access this data only with your explicit consent for specific support, where necessary for security or law, or as aggregated and anonymized data for internal operations. Signing out in the extension’s settings removes the token from your device, and uninstalling the extension removes everything it stored. You can revoke an API key in Settings and delete your account as described in section 8.
12. Changes and contact
We may update this policy when Bestboy or the law changes. We will post the new version here and update the date above. For questions, privacy requests, or feedback, email yo@bestboy.app.