Privacy Note

In short

Nimito keeps your gift ideas, the people you give to and their dates, so it can remind you in time. What you enter is private to you unless you choose to share it. We don't sell data, we don't show ads, and your notes are not processed by AI.

Who we are

Nimito is a private pilot run by Thomas M. Zimmerman, Laveno Mombello, Italy, who is the data controller. Contact: hey@nimito.app.

The pilot is by invitation, for friends and family. It is not a public service yet.

What we collect about you

Account: your email address, first name, language, country and your confirmation that you are 16 or older. If you add a passkey (Face ID, fingerprint), your device keeps the biometric; we store only a public key and the device name. If you sign in with Google or Apple, we receive only your name and email from them.

Your birthday, if you add it, is shared only with the Nimito connections you choose. It is off by default.

Help requests: what you write to us and any screenshot you attach.

Technical: the notification address of each device where you turn on notifications, and error reports when something breaks. Error reports contain no name, email, IP address or what you typed.

What you enter about other people

Nimito works because you note things about people you give gifts to: their name, relationship, birthday (and birth year if you want), tastes and sizes, a photo, notes, gift ideas, and the gifts you gave and how they landed. These people usually don't have a Nimito account and don't see any of it.

Only you see this information. We use it only to show it back to you and to send your reminders. Please add only what you need to choose a gift, and nothing sensitive such as health, religion or political views.

If someone asks us to remove information about them, write to us and we will help.

Children

Nimito is for people aged 16 and over. Children can appear as gift recipients, and parents can make a wish list for their child. Keep it to what helps with gifts: a first name, a birthday, tastes and sizes. A photo of a child stays private to you; on a shared wish list, think twice before adding one.

What others can see

Private by default: your people, ideas, notes, photos and gift history are visible only to you.

Wish lists: a list stays private until you share it, by link or with the connections you pick. They see only that list. When someone marks an item “I'll get this”, you are not told, except on a list you made for someone else (for example your child), where you see only that it is taken.

Connections (Friends on Nimito): you connect only when both of you accept. A connection never sees your people, ideas, notes or gift history.

Group gifts: the other members see the gift title, the first name of who it is for, the proposals and votes, the amounts promised and whether payments are marked or confirmed. If you organise, they also see the payment link you add (for example Revolut, Satispay, PayPal or IBAN). Money never passes through Nimito.

The person who runs Nimito can see, for running the pilot, the list of accounts (name, email, sign-up date, last activity) and totals such as “14 people, 31 ideas”, but never who those people are or what your ideas and notes say. Help requests are read to answer them.

Why we use it

Only to run Nimito for you: store your ideas, send reminders by email and notification, and let you share lists and plan group gifts. The legal basis is the performance of our agreement with you (GDPR art. 6.1.b). For error reports and visit totals it is our legitimate interest in keeping the app working (art. 6.1.f).

No advertising, no selling of data and no AI processing of your notes during the pilot.

Affiliate links: when you open a shop link from Nimito (for example Amazon), Nimito may add its affiliate code at that moment, so the shop pays Nimito a small commission if you buy, at no extra cost to you. As an Amazon Associate, Nimito earns from qualifying purchases. The link you saved never changes, and if it already carries someone else's affiliate code we leave it as it is. We count taps per shop and per Nimito Pick, never who tapped. Once you are on the shop's site, its own privacy and cookie rules apply.

Link previews: when you paste a link, our server opens that page once to fetch its title and picture. The shop sees our server, not you.

Where it is stored and who helps us

Your data is stored in the European Union, in Frankfurt (Germany), with Supabase (database, pictures, sign-in). The app runs on Vercel, in its Frankfurt region. Emails are sent by Resend from its EU (Ireland) region. Error reports go to Sentry's EU region. Vercel Web Analytics counts page views without cookies.

These providers process data only on our instructions, under data processing agreements. Some are US companies: where data could reach the US, the transfer is covered by the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

Cookies and similar

We use only what is needed: a sign-in cookie, a language cookie, and your appearance choices (theme, text size) saved on your device. Our visit counter uses no cookie, no IP address and no identifier: it keeps only daily totals. On public pages only (the welcome page, sign-in, privacy, terms and invite pages, never inside the app), we use Google Analytics 4 to see how people find Nimito: it sets cookies (_ga), page addresses are stripped of any ids, Google Signals and all advertising features are off, and Google does not store IP addresses. No advertising cookies.

How long we keep it

Until you delete your account, which you can do yourself in You › Your data. Everything is erased straight away, including your pictures. Backup copies roll over and are gone within 30 days. Error reports are kept for up to 90 days.

If you organise a group gift and delete your account, the gift is handed to the member who joined first, so the others don't lose it; your payment link is removed. Group gifts with no other members are deleted.

When the pilot ends we will tell you in advance what happens to your data.

Your rights

You can download all your data at any time (You › Your data: a gift book as PDF, or all your data as a ZIP with spreadsheets and photos), correct it in the app, or delete your account. You can also ask us to access, correct, export, restrict or delete your data, or object to its use, by writing to hey@nimito.app. We answer within one month.

You may complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).