Last updated: 15 June 2026
This Privacy Policy explains what personal information Wrapp ("Wrapp", "we", "us") collects, why we collect it, and the choices you have. Wrapp is operated by Uri Busharian, an individual developer based in Israel ("the operator"), who is the data controller for the purposes of the EU/UK General Data Protection Regulation (GDPR).
By creating an account or using Wrapp, you agree to this Policy. If you do not agree, please do not use the app.
Contact for any privacy question or request: wrappgiftideas@gmail.com
Wrapp is a mobile and web application for sharing gift ideas — things people bought or made — so others can discover them. Anyone can browse Wrapp without an account. You only need an account to post, comment, like, save, or follow.
We collect only what the app needs to work. We use a crash-reporting service to detect and fix errors (see Section 3). We do not use any advertising, behavioural analytics, or cross-app tracking technologies.
a) Information you provide
| Data | Purpose |
|---|---|
| Email address | To create and secure your account, sign you in, and send account/password emails |
| Password | To authenticate you. Stored only as a salted hash by our authentication provider — we never see or store your plaintext password |
| Username and optional bio | Your public identity on Wrapp |
| Posts you create — title, description ("pitch"), optional price, optional external link | The content you choose to publish |
| Photos and captions you upload | The images attached to your posts |
| Comments you write | Published under your username |
| Likes, saves, follows, and blocks | To operate engagement features and to filter content you have blocked |
| Reports you submit | To moderate content and abuse |
b) Information collected automatically
| Data | Purpose |
|---|---|
| IP address and basic device/request data | Security, abuse prevention, and rate-limiting at sign-up and sign-in |
| A bot-protection (CAPTCHA) token at sign-up | To prevent automated/abusive account creation |
| Crash and error diagnostics (e.g. app version, device model, OS version, error/stack-trace data) | To detect, diagnose, and fix crashes and errors, via our crash-reporting provider (see Section 3) |
We do not collect location, contacts, advertising identifiers, or behavioural analytics.
We do not sell your personal information, and we do not share it for advertising. We share data only with the service providers ("sub-processors") that run the app on our behalf, and only as needed to provide the service:
| Sub-processor | Role | Data involved |
|---|---|---|
| Supabase | Database, authentication, and file storage backend | Account data, posts, photos, comments, engagement, IP at auth time |
| Cloudflare Turnstile | Bot protection at sign-up | CAPTCHA token and associated request metadata |
| Email/SMTP provider | Sending account and password-reset emails | Your email address |
| Sentry | Crash and error reporting | App version, device model, OS version, and error/stack-trace data at the time of a crash |
| Apple App Store / Google Play | App distribution | Handled under their own privacy policies |
We use Cloudflare Turnstile to protect sign-up against bots. Turnstile runs invisibly and our use of it is also governed by Cloudflare's Turnstile Privacy Addendum.
These providers may process and store data outside Israel, including in the United States and the EU. We rely on their respective safeguards (such as Standard Contractual Clauses) for international transfers. We do not otherwise disclose your information except where required by law or to protect rights, safety, and the integrity of the service.
Affiliate links. Some outbound product or shop links in Wrapp are affiliate links — if you buy through them we may earn a commission at no extra cost to you. As an Amazon Associate we earn from qualifying purchases. Links open in your device's browser, where the destination retailer's own privacy policy applies.
Your username, bio, posts, photos, captions, comments, and like/follow counts are public by design — visible to anyone using Wrapp, including people without an account. Do not post anything you would not want to be public. Content you block is filtered from your own view only.
We keep your information for as long as your account exists. When you delete your account (see Section 7), we remove your account, profile, posts, photos, comments, and engagement data. Some records may persist briefly in encrypted backups before being overwritten on the normal backup cycle, and we may retain minimal records where required by law.
You can, at any time:
Depending on where you live, you may also have rights under the GDPR (access, rectification, erasure, restriction, portability, objection) or the California Consumer Privacy Act (CCPA/CPRA). We do not sell or "share" personal information as those terms are defined under California law. To exercise any right, contact wrappgiftideas@gmail.com. You also have the right to lodge a complaint with a supervisory authority.
Wrapp is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us information, contact wrappgiftideas@gmail.com and we will delete it. Where local law sets a higher age of digital consent, that age applies.
Passwords are stored only as salted hashes by our authentication provider; connections use HTTPS/TLS; and access to stored data is restricted by row-level security rules. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.
We may update this Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Continued use of Wrapp after changes take effect means you accept the updated Policy.
Questions or requests: wrappgiftideas@gmail.com (operator: Uri Busharian, Israel).