Privacy Policy

The Nice List (“we”, “us”) is a personal Christmas planning application that helps you track gifts, recipients, budgets and tasks. We are the data controller responsible for your personal data within the meaning of the UK GDPR and the Data Protection Act 2018.

To contact us about your data or this policy, please email support@the-nice-list.base44.app (replace with your preferred contact address).

We only collect the information needed to provide the service:

• Account data: your email address and name, used to create and sign in to your account.
• Planning data you enter: recipient names, interests and notes; gift details (names, stores, links, costs, status); tasks; and budget figures you choose to record.
• Settings & preferences: your theme, snowfall preference and shopping region.
• Technical data: standard information such as IP address, browser type and device, collected automatically when you use the app.

You are not required to provide planning data, but some features will not work without it. We do not collect special category data, and we do not collect data from anyone under 13.

• To create and manage your account and authenticate you.
• To store and display the gifts, recipients, tasks and budgets you enter, so the app works for you.
• To provide features such as the E.L.F. (Expert List Finder), which reads your data only to generate suggestions for you.
• To operate, secure and monitor the service, and to prevent misuse.
• To respond to your requests and comply with our legal obligations.

• Performance of a contract: processing your account and planning data to deliver the service you signed up for.
• Legitimate interests: securing, maintaining and improving the service, and generating AI suggestions for you.
• Consent: for any optional analytics or marketing, which you can withdraw at any time.
• Legal obligation: where we must retain records to comply with the law.

The E.L.F. (Expert List Finder) uses AI to read your recipients, budget and existing gifts and suggest ideas. Your data is used solely to produce suggestions shown to you. We do not use your personal planning data to train third-party models, and suggestions are generated for your account only.

We use essential cookies and local storage to keep you signed in, remember your theme and region, and make the app work. We do not use advertising cookies. Any analytics cookies are optional and used only to understand how the app is used so we can improve it.

We share data only with trusted providers who help us run the service:

• Base44 — the platform that hosts the app, database and authentication.
• Cloudflare — hosting and content delivery.
• AI providers — used by the E.L.F. (Expert List Finder) to generate suggestions, receiving only the data needed for that request.

These providers process data on our behalf under contract and may transfer data outside the UK/EEA only with appropriate safeguards (such as UK International Data Transfer Agreements or recognised adequacy).

We keep your account and planning data for as long as your account is active. You can delete individual records (gifts, recipients, tasks) at any time. If you close your account or request deletion, we will remove your data within a reasonable period, except where we must retain it to comply with legal obligations.

We protect your data with industry-standard measures including encryption in transit, access controls, and row-level security so that each user can only access their own records. No system is perfectly secure, but we take reasonable steps to safeguard your information and will notify you and the relevant authority of any personal data breach where required by law.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erasure (“right to be forgotten”).
• Restrict or object to processing.
• Data portability — receive your data in a structured, machine-readable form.
• Withdraw consent at any time where processing relies on it.
• Lodge a complaint with the Information Commissioner’s Office (ico.org.uk).

To exercise any of these rights, contact us at the address above.

The Nice List is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.

Because some of our providers operate outside the UK/EEA, your data may be processed there. We only permit such transfers where appropriate safeguards are in place to protect your rights.

We may update this policy to reflect changes in the app or the law. We will post the updated version here with a revised date and, for significant changes, notify you within the app.