Last updated: Dec 1, 2025
This Privacy Policy explains how Gift Guru, a Shop Mini operated by RamiApps, handles information when you use it inside the Shop app.
It applies only to Gift Guru and our backend (including gift-guru-backend-production.up.railway.app). It does not cover Shopify/Shop itself or individual merchants’ own websites and policies. Shopify requires every Shop Mini to provide a clear privacy policy describing what data is collected, how it is used, and how users can request deletion.
1. Data We Receive
When you use Gift Guru, we may receive:
1.1 From Shopify / Shop (via scopes)
- OpenID token (
openid) – an identifier that lets us verify a valid Shop user session. We do not see your Shop password. - User settings (
user_settings:read) – such as language, region, and other app-level preferences exposed to Shop Minis, used to localize content. - Product/catalog data (
product_list:write+ related APIs) – product identifiers and related metadata needed to assemble and display gift/product lists and navigate you to merchant products in Shop.
1.2 From You (inputs in the Mini)
Information you choose to provide, for example:
- who you are shopping for (e.g., partner, friend, parent);
- basic descriptors (e.g., age range, interests, hobbies, “likes photography and yoga”);
- budget range and occasion;
- feedback on suggestions (e.g., like/dislike, “show more like this”).
1.3 Technical data
We may collect limited technical data such as:
- device and app context (via Shop SDK),
- IP address and timestamps,
- error and performance logs (e.g., request IDs, response times).
This is used for monitoring, debugging, and improving performance, in line with Shopify’s expectations for Shop Minis performance and data privacy.
2. How We Use Data
We use the data described above to:
- generate gift ideas and product suggestions tailored to your session;
- show relevant products and navigate you to product pages and checkout in Shop (payments are still handled only by Shop Pay);
- respect your language/region and user settings;
- maintain, debug, and improve Gift Guru, including aggregated analytics on feature usage and suggestion quality.
We do not use data from Gift Guru to send you marketing emails from the Mini or to show third-party ads inside the Mini (ads are not allowed in Shop Minis).
3. Payments and Orders
Gift Guru never processes payment data.
All payment details and checkout flows are handled by Shopify / Shop Pay. We do not see your full card number or full payment credentials. If you have issues related to payment, shipping, or refunds, you must contact the merchant or Shopify support directly.
4. Data Sharing
We do not sell your personal data.
We may share data only:
- With Shopify / Shop, as part of normal operation of a Shop Mini within the Shop app;
- With service providers (hosting, logging, monitoring) that process data on our behalf under contractual safeguards;
- If required by law, when we must disclose limited information to comply with legal requests;
- In aggregated or anonymized form, where individual users cannot be identified (for example, statistics on budgets or popular flows).
5. Data Retention
We keep data only as long as reasonably necessary for the purposes in this Policy, for example:
- session-level inputs and logs for a limited period for debugging and improving suggestion quality;
- technical logs for a limited retention window (e.g., 30–90 days) before deletion or anonymization, unless we must keep them longer for security or legal reasons.
You can stop data collection from Gift Guru by stopping use of the Mini in the Shop app; some data may remain in backups or logs for a limited period.
6. Security
We use reasonable technical and organizational safeguards, such as:
- encrypted connections (HTTPS/TLS),
- restricted access to production systems and API keys (including the Minis Admin API key used to manage the Mini).
No system is perfectly secure, but we aim to minimize the data we handle and protect it appropriately.
7. Your Rights and Choices
Many account-level rights and settings (account deletion, export, Shop notifications) are handled directly by Shopify / the Shop app.
If your local laws give you rights such as access, correction, or deletion of personal data processed by us, you can contact us. We will handle what we can directly or, where Shopify or merchants are the primary data controllers, direct you to them.
8. Children
Gift Guru is not intended for children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data directly from children. If you believe we have received such data inappropriately, contact us and we will delete it where required.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date shows the latest version. Continued use of Gift Guru after changes means you accept the updated Policy.
10. Contact
For privacy questions or requests, contact:
RamiApps
Email: support@ramiapps.com
Website: https://ramiapps.com