Effective 16 October 2026
Kyaft provides invitation and greeting cards at kyaft.com. For privacy questions or requests, contact [email protected].
If you choose to enable event notifications, we store your browser notification subscription and associate it with your personal invitation. Your host can send event updates to subscribed guests. Your browser or operating system asks for permission, and you can turn updates off from the invitation or browser settings. Turning updates off in the invitation removes that device subscription for that invitation; delivery counts may remain in the host’s notification history. Notification services operated by your browser provider deliver these messages.
When you sign in with Google, we receive your name, verified email address and Google's account identifier. Google may include basic profile information in its identity response; Kyaft stores your name, email and account identifier to create and recognise your account. We do not receive your Google password or request access to Gmail, Drive, contacts or calendars.
We also store information you choose to provide through Kyaft, including card text, celebration details, photos or other uploaded media, contact details, guest lists, invitation responses and order records. Which information is collected depends on the features you use. Hosts must have permission to upload information and media about other people, especially children.
If you submit a custom-card idea, we store your name, WhatsApp number, occasion, idea and contact consent in our private request inbox. Our team uses these details to discuss your request and provide a quote on WhatsApp. Your request is not published or added to other customers’ cards. We also use hashed contact and network identifiers to limit repeated submissions. Contact support if you want your request corrected or deleted.
We use account information to sign you in, connect your cards to your account, protect access and provide support. Card and guest information is used to deliver invitations and the celebration features selected by the host. We do not sell Google account information or use it for advertising. This Google sign-in integration does not request offline access or retain Google access or refresh tokens.
Hosts can access their card's management tools and guest information. People who receive a card or guest link can view the content made available through that link; links can be forwarded. Do not put information in a card that you would not want its recipients to see. Authorised Kyaft administrators can access account and service information for operation, support, security and abuse handling.
Infrastructure providers process data as needed to operate the service: Google provides sign-in, Hostinger provides hosting, and Cloudflare provides network delivery and security. Support messages are handled through Google Groups. These providers may process information in countries other than yours. We may disclose information where required by applicable law or necessary to address fraud or threats to safety and security.
When online payments are available, Razorpay processes your payment details. Kyaft stores order identifiers, amounts, payment status and provider references; we do not store your full card number or UPI PIN. If you choose manual QR payment, we store the transaction reference and verification record. Screenshots you choose to send through WhatsApp are handled through that service and our support team. Avoid including unrelated bank balances, transactions or personal information in your screenshot.
\nAccount and card records are stored in Kyaft's server-side database; uploaded assets are stored on the server. We use necessary cookies for login sessions and sign-in security. Customer sessions can last up to 30 days unless signed out or revoked earlier. Network providers may process IP addresses and technical request information to deliver and protect the service. We use HTTPS and access controls, but no service can guarantee absolute security.
You can sign out, change supported card details through your host desk and remove supported guest or media items. To request access, correction or deletion of account information, email our support address from your account email. We may need to verify ownership. Some information may need to be retained for security, dispute handling or legal obligations, and backups may retain copies until replaced. Deleting an account may affect access to linked cards; we will clarify the requested scope before removing linked content.
You can also remove Kyaft's connection in your Google Account settings. This does not by itself delete information already held by Kyaft.
We will update this page if our practices change. Material changes to our use of Google account information will be disclosed before that new use begins, with additional consent where required.