Privacy
Last updated 14 November 2026
A gift is full of personal photos and words, so we collect as little as we can, keep it only as long as the gift needs it, and never use it for advertising.
Made You a World is run by Viresh Tushar Koli, a sole proprietor in Mumbai, Maharashtra, India, who decides how this data is used (the "data fiduciary"). Questions or requests: hello@madeyouaworld.com.
What we collect, and why
| Data | Why |
|---|---|
| The words, names and quiz answers you put in a gift; the looks you choose for the characters | To make and show the gift |
| Photos you add, after your own phone has made them smaller | To show them in the gift |
| Your email address and WhatsApp number | To send your links and receipt, and to help you if something goes wrong |
| The recipient's email address, only if you ask us to send the gift at a set time | To send it |
| Payment record: amount, date, order reference | Accounts and tax law |
| Which parts of a gift have been played, and when it was first opened | So the recipient can continue where they left off, and so you can be told it was opened |
We do not collect your card or UPI details (those go only to the payment partner), and we do not collect the recipient's details beyond the above.
Your photos
- Before upload, your phone makes each photo smaller and saves it again. This removes the camera details and location stored inside photos. Our server also refuses any photo that still carries a location.
- Photos are kept in private storage that can only be reached through a gift's link (and its passcode, if it has one).
- Nobody at Made You a World looks at your photos unless you ask for help with your gift, or someone reports it. Each such look is recorded.
Where it is kept, and for how long
| Data | Kept until |
|---|---|
| An unfinished form (draft) and its photos | Deleted 14 days after your last visit, or 3 days if you didn't leave an email |
| A paid gift's words and photos | The gift's year online plus 30 days, then permanently deleted. Sooner if you delete it or ask us to |
| Your email and WhatsApp number | As long as the payment record. Used for news only if you said yes |
| The recipient's email (scheduled sending only) | 30 days after sending |
| Payment record | As long as tax law requires (currently up to about 7 years) |
| Signature originals (full-size photos and videos) | Deleted from online storage once downloaded for building, and from our encrypted computer 30 days after delivery |
| A record of admin actions (no names or messages) | One year |
Our hosting keeps backups of the database for 7 days, so deleted data may survive in a backup for up to 7 days before it is gone for good.
Who else handles it
We use a few services to run the shop. Each receives only what it needs:
- Cloudflare: hosts the website and gifts, and stores the database and photos.
- Razorpay or Cashfree: take your payment. They receive your payment details directly; we receive only the result.
- Resend and Brevo: send our emails, so they handle your email address and the links inside your emails.
- Anthropic: only if you press "Help me say this" in the form. The text you typed in that box is sent to produce suggestions; photos never are. Anthropic deletes it within 30 days, or keeps it for up to 2 years if its automatic safety checks flag it as breaking its usage rules, and is not allowed to use it to train its models.
- ElevenLabs: Signature gifts only. The short hello lines spoken by characters (text that may include first names) are sent to record the voices. You'll be told at booking.
The messaging app you use to send a gift (for example WhatsApp) also carries its link; that is between you and that app. We do not sell personal data, and we do not share it with anyone else unless the law requires it.
Cookies and tracking
- Inside gifts: no ads, no analytics, no trackers, and nothing loaded from other websites. Opening a gift sets one short-lived cookie that lets its photos load; progress is saved on the device and on our server.
- On these shop pages: Cloudflare Web Analytics counts visits without cookies and without identifying you.
- Gifts are hidden from search engines.
The people in a gift
A gift's recipient, or anyone shown in it, didn't fill in our form. So every gift tells its recipient who made it and what it contains, and offers a link to remove it, which hides the gift immediately. Anyone in a gift can also email us to have it removed.
Your rights
You can ask us to show you the personal data we hold about you, correct it, or delete it, and you can withdraw any consent you gave. Buyers can delete a gift and its photos at any time from their editing link. Recipients and people shown in a gift can have it removed as above. Email hello@madeyouaworld.com; we reply within 48 hours and act within one month at most. If you're not satisfied, you can write to our grievance officer (see contact), and you may complain to the Data Protection Board of India.
Children
Our gifts are for adults only. We do not knowingly accept gifts for, from or showing anyone under 18, and delete any we find.
Keeping it safe
Everything travels encrypted. Every gift has a long, unguessable link and can have a passcode. Storage is private, admin access is protected by a separate login, our server logs do not record names, emails or messages, and secret keys are kept out of our code. If a breach ever affects your data, we will tell you without delay, along with what we are doing about it, and report it as the law requires.
Changes
If we change this policy, we'll update the date at the top. If a change affects how we use data you've already given us, we'll email you first.