Privacy Policy

Who we are

My Christmas (product brand MyChristmasapp) is operated by Speakbird LLC, registration code 14790610, registered at Harju maakond, Tallinn, Kesklinna linnaosa, F. R. Faehlmanni tn 2-6, 10125, Estonia. Speakbird LLC is the controller of the personal data described in this policy. My Christmas is a year-round Christmas planning, memory and inspiration service available at mychristmas.app. For any privacy question or request, write to hello@mychristmas.app.

Information you give us

Almost everything we hold is content you chose to create. Depending on how you use the app, that can include:

• Account details: your email address, your first name, and (if you sign in with Google) the basic profile information Google returns to us.
• Your registration confirmations: that you confirmed you are at least 16, that you accepted the Terms and acknowledged this policy, and whether you allowed campaign attribution — with the date and the version of the documents shown to you.
• Preferences: your country, time zone, focus areas, notification and personalisation choices, and your Christmas Year style.
• Planning content: gift ideas and recipients, lists and checklists, Planning calendar entries, bucket-list items, traditions and decorating ideas you save or create.
• Money content: budget categories, expenses, Christmas Fund goals and savings entries you enter yourself.
• Kitchen content: recipes, menus and shopping items you save or create.
• Memories: photos you upload, stories and captions, dates, locations you type in, favourites and the albums you organise them into.
• Cards: the Christmas cards you compose and any wishes or poems you generate for them.
• Mary conversations: the messages you send to Mary and her replies.
• Household: the household you create or join, the members you invite, and their roles.
• Support: anything you send us by email when you contact us.

Information collected automatically

We keep this deliberately small. We do not run advertising trackers, ad pixels or third-party analytics suites.

• Authentication and session data, stored in your browser so you stay signed in.
• Technical request data handled by our hosting and database providers, including IP address and browser information in their standard security and error logs.
• Product usage counters we need to run the service, such as how many Mary messages you have sent today and which daily content you have already seen.

We use browser storage (local storage and session storage) for your sign-in session and small interface preferences. We do not use cookies or storage for advertising or cross-site tracking, and we do not store campaign attribution in your browser before you have given consent.

Campaign attribution and your consent

If you arrive from a campaign link with UTM parameters, or from another website, that referral information is held only in your browser's memory for the current page visit. It is saved to your account only if you tick the optional box during registration allowing us to remember how you found the app. If you do not tick it, nothing about your referral source is stored, and account creation works exactly the same.

You can change your mind at any time in Settings → Privacy → Campaign attribution. Turning it off stops future attribution and removes the attribution stored under that consent. It never affects your account, your content or any feature. We use this information only to understand which campaigns bring people to My Christmas — never for advertising profiling, and it is not a subscription to marketing emails.

Why we use your information

• To provide the service and show your Christmas Year back to you.
• To create and authenticate your account and keep it secure.
• To save and sync your content across your devices and, where relevant, your household.
• To personalise your experience, such as country-aware content and your daily tip and song.
• To generate Mary's replies to the messages you send her.
• To operate purchases, access codes and the features your plan includes.
• To answer support requests and to detect, investigate and prevent abuse or security problems.
• To keep the product reliable, and — with your consent — to understand which campaigns bring new people to My Christmas.

We do not sell your data, and we never use your private content for marketing.

Legal bases for processing

If you are in the European Economic Area or the UK, we rely on the following legal bases:

• Performance of a contract — for everything needed to provide My Christmas to you: running your account, Gifts, Lists, Planning, Budget & Fund, Kitchen, Traditions, Memories, Cards, Mary, household features, giving effect to the product access you bought, and providing your data export.
• Legal obligation — where information has to be processed or kept to meet applicable accounting, tax, payment and other regulatory obligations.
• Legitimate interests — for keeping the service secure and reliable: preventing fraud and abuse, necessary technical and error logging, and protecting the service and its users. We only rely on this where it does not override your rights.
• Consent — for campaign/referral attribution, which is optional, separate, and fully reversible. We do not currently send marketing emails.

Mary, your AI Christmas helper

Mary is an AI-powered assistant. When you send Mary a message, that message — together with recent messages in the same conversation and general context about your Christmas Year — is sent to our AI provider (the Lovable AI Gateway, which currently runs Mary on a Google Gemini model) so a reply can be generated. Your conversation history is stored in your account so you can read it later; you can delete it from within the app.

Please avoid sending Mary sensitive personal information you would not want stored. Mary's answers are generated automatically, can be incomplete or wrong, and are not professional, legal, medical or financial advice.

Photos and memories

Photos you upload are stored in a private storage area that is not publicly accessible. When you view a photo, the app creates a short-lived signed link for you. Memories belong to the person who created them: joining or sharing a household does not make your personal memories visible to other members, and albums are visible only to their owner. There are no shared memory albums in My Christmas today.

Households and families

If you create or join a household, the shared Christmas Year content for that household — such as household planning, budget, kitchen and calendar content — is visible to its active members, according to their role. Your personal Christmas Year content and your private items stay yours. Household owners can invite and remove members; removing a member ends their access to shared content going forward.

Payments

Purchases are processed by Stripe. Your card details are entered on Stripe's own checkout and never reach our servers — we do not store full payment-card numbers. We keep a receipt record of what was purchased, when, for how much, the resulting access, and your acknowledgement that access should begin immediately, as our financial and audit trail.

Service providers we use

• Supabase — database, authentication and private file storage.
• Lovable — application hosting and infrastructure.
• Stripe — payment processing and checkout.
• Lovable AI Gateway (currently using a Google Gemini model) — generating Mary's replies and card wishes.
• Google — optional “Sign in with Google” authentication, if you choose it.
• YouTube — the Song of the Day links out to YouTube; opening a link takes you to Google's service under their terms and privacy policy.

These providers process data on our behalf, or as independent services you choose to use. We do not share your content with anyone else.

International processing and transfers

My Christmas is operated from Estonia, and the providers listed above may process data on servers outside Estonia and outside the European Economic Area. Where such an international transfer takes place, we rely on the safeguards required by applicable data-protection law, such as the data-protection terms and contractual safeguards agreed with those providers. You can ask us for more detail about a specific provider by writing to hello@mychristmas.app.

Storage and retention

We keep your content for as long as your account exists, including past Christmas Years — that is the point of the product. When paid access ends, nothing is deleted: your history stays readable and only editing of paid features is limited. If you delete your account, the timeline in the next section applies. Purchase, consent and accounting records are kept for as long as needed to meet our legal obligations. Provider security and error logs are kept for the limited periods those providers apply.

Export your data

You can download a copy of your My Christmas data at any time from Settings → Export your data. It is available to every signed-in account — Free, Premium, Family, Season Pass and lapsed. The archive contains your profile and preferences, Christmas Years, gifts and recipients, lists, Planning entries, budget and fund data, memories and albums, cards, your Mary conversation history and a summary of your access. You can optionally include your memory photos, up to 300 files or 150 MB; anything not included is listed in the archive's README. That limit applies only to a single export file — it does not limit or remove the memories stored in your account.

Deleting your account

You can request deletion in Settings at any time. There is a 30-day grace period during which you can cancel the request with one tap and keep full access. After that, your personal content — including gifts, recipients, lists, planning entries, budget and fund data, kitchen content, memories and uploaded photos, your Mary history and your preferences — is permanently deleted and your profile is anonymised. Purchase and entitlement records are retained as a financial audit trail where legally necessary. Shared household content created for the rest of your family remains with the household.

Your privacy rights

Depending on where you live, you may have rights to access your personal data, correct it, delete it, receive a portable copy, withdraw consent, and object to or restrict certain processing. In practice you can do most of this directly in the app: edit your details in Settings, switch campaign attribution off, download an export, or request deletion. For anything else — or to raise a concern — write to hello@mychristmas.app. If you are in the EEA or the UK, you can also complain to your local data protection authority; in Estonia this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Children and minimum age

My Christmas is intended for people aged 16 and over, and you confirm this when you create an account. It is not a service directed at children. If you believe someone under 16 has created an account, write to hello@mychristmas.app and we will look into it.

Changes to this policy

If we make a material change to how we handle your data, we will update this page and change the version and date below. The current version is 2026-09-04. Continuing to use My Christmas after a change means the updated policy applies to you.

Contact

Speakbird LLC, F. R. Faehlmanni tn 2-6, 10125 Tallinn, Estonia. Privacy questions, requests and complaints, and general support: hello@mychristmas.app.