Privacy Policy

Effective October 8, 2026 · Updated October 28, 2026

This policy explains what information the Many Balloons app ("Many Balloons", "we", "us") uses, why, and the choices you have. Many Balloons is published by Harrison Riehle. If you have questions, email harrison@riehle.co.

1. Information stored on your device

Everything you keep in Many Balloons is stored in the app on your iPhone, including:

• people's names, birthdays, anniversaries and other dates;
• photos, notes, gift ideas and links you add or import;
• your choices about who to track, reminder settings, and groups;
• the last greeting you sent someone from the app, so the next one is different.

We don't have access to this information. Many Balloons' widgets, Siri shortcuts and share extension read it on your device only.

2. iCloud sync and backup

If you turn on iCloud sync, your Many Balloons data is stored in your own private iCloud database by Apple, so it's available on your other devices and on a new phone. Only you can access it; we can't. Apple's handling of iCloud data is described in Apple's Privacy Policy. You can also export a backup file or spreadsheet yourself; those files go wherever you choose to save them.

3. Contacts

With your permission, Many Balloons reads your contacts to:

• import birthdays and anniversaries, names and contact photos;
• suggest names as you type when adding someone;
• find the right phone number or email when you tap Message.

Contact information is read and used on your iPhone. It is not uploaded to us. You can change this permission anytime in the Settings app.

4. Facebook import

If you choose to import from Facebook, Many Balloons opens Facebook's own website inside the app. You sign in directly with Facebook; Many Balloons never sees your Facebook password. Many Balloons reads the friends' names, birthdays and profile photo links shown on Facebook's birthdays page and saves them on your iPhone. Your use of Facebook is governed by Meta's Privacy Policy.

5. Google sign-in and Google Calendar

Signing in with Google is optional. If you use it, Many Balloons asks Google for limited access, and only for these purposes:

• Import birthdays (read-only access to calendar events): Many Balloons reads events with "birthday" in them to import names and dates. It doesn't change your calendars.
• Add birthdays to Google Calendar (access to calendars Many Balloons creates): Many Balloons creates a calendar named "Many Balloons" in your Google account and keeps its birthday events up to date. It can't read or change your other calendars.

Information from Google is used on your iPhone only to provide these features. It is not sent to our servers, sold, used for advertising, or shared with anyone. Google sign-in tokens are stored securely on your device by Google's sign-in software.

Many Balloons' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of raw or derived user data received from Google Workspace APIs (such as Google Calendar) will adhere to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements. Many Balloons does not use, transfer or sell Google user data, whether raw, aggregated, anonymized or derived, to create, train or improve any machine learning or artificial intelligence model, ours or anyone else's.

You can stop using Google features by turning off Google Calendar in Many Balloons' settings (which removes the Many Balloons calendar from your Google account) and remove Many Balloons' access anytime at myaccount.google.com/permissions.

6. Apple Calendar

If you turn on Apple Calendar, Many Balloons asks for calendar access so it can create a "Many Balloons" calendar and keep its birthday events up to date. Many Balloons only changes the events it adds.

7. Notifications, messages and AI

• Reminders are scheduled on your iPhone as local notifications. They aren't sent through our servers.
• Messages you send from Many Balloons open in Apple's Messages app. We never see them.
• Suggested greetings are written by Apple's on-device foundation model (part of Apple Intelligence), using the person's first name, the occasion, your notes and gift ideas. The model runs entirely on your iPhone: what it reads isn't sent to Apple, to us or to anyone else.
• Sharing your birthday. If you add your own birthday in Settings, it's stored on your iPhone. When you choose to share it, Many Balloons makes a link with your first name and birthday (and your birth year only if you include it), and you send it however you like. These details sit after the "#" in the link, a part browsers never send to a server, so our website shows them in your friend's browser without ever receiving them. Only the people you send the link to can see them.
• No third-party or cloud AI. Many Balloons doesn't use any third-party AI service, AI aggregator or cloud AI model. A name that came from Google (for example, a friend imported from Google Calendar) may be used on your iPhone to personalize a greeting, but information from Google is never sent to an AI provider and is never used to train or improve any AI model.

8. How we protect your data

• It stays on your devices. We don't run servers that receive or store your contacts, birthdays, photos, notes or any information from Google or Facebook.
• Encrypted on your iPhone. Many Balloons stores its data inside the app's private storage, which iOS Data Protection encrypts with keys tied to your device passcode. Other apps can't read it.
• Encrypted in transit. Every network connection the app makes, to Google, Apple iCloud and our analytics provider, uses encrypted HTTPS (TLS).
• Sign-in credentials. Google sign-in tokens are kept in the encrypted iOS Keychain by Google's sign-in software. You sign in to Google and Facebook directly on their own pages, and Many Balloons never sees your passwords.
• iCloud. If you turn on sync, your data is stored in your own private iCloud database, encrypted by Apple in transit and at rest (and end-to-end if you turn on Advanced Data Protection). We can't access it.
• The least access needed. Many Balloons asks Google only for read-only access to calendar events (to import birthdays) and for access to the one calendar it creates. It can't read or change your other calendars or any other Google data.
• No human access. Because your data never reaches us, no one at Many Balloons can read it.
• Retention. Information from Google stays in the app on your iPhone (and your iCloud, if sync is on) only for as long as you keep it there. Removing a person, resetting the app, or deleting the app removes it.

9. Anonymous usage statistics

To understand how the app is used and fix problems, Many Balloons sends anonymous usage events, such as "finished setup" or "added a birthday", to TelemetryDeck, a privacy-focused analytics service. These events never include names, birthdays, phone numbers, emails, notes or any other personal or contact information. TelemetryDeck uses a scrambled, one-way identifier that can't be linked back to you. We don't track you across other apps or websites.

This website. Separately from the app, this site records anonymous usage — which pages are visited, where visitors arrive from, and how far down a page they read — so we can see what people are looking for. It is collected by our own analytics on our own servers, never sold or shared, and your IP address is converted to a scrambled, one-way daily value that is not stored. No names, birthdays or contact details from the app are involved. The shared-birthday page is not measured at all, and we never record video of your session.

10. App settings

Many Balloons may check an app-wide settings file (for example, to switch off a feature that has stopped working). This check doesn't send any information about you.

11. Purchases

Many Balloons Pro is free during launch. If we offer paid purchases in the future, payments are handled by Apple through the App Store. We don't receive your payment details.

12. What we don't do

• We don't show ads.
• We don't sell, rent or share your personal information.
• We don't track you across apps or websites owned by other companies.
• We don't store your contacts or birthdays on our own servers.

13. Children

Many Balloons isn't directed to children under 13, and we don't knowingly collect information from them.

14. Deleting your information

• Delete a person from their profile, or delete everything with Settings › Reset App & Clear All Data in the app.
• Deleting the app removes the data stored on that device.
• iCloud data can be removed in your iPhone's Settings › [your name] › iCloud.
• Google: turn off Google Calendar in Many Balloons and remove access at myaccount.google.com/permissions.

Because your Many Balloons data isn't stored on our servers, there's nothing for us to delete on our end. If you'd like help, email us.

15. Your rights

Depending on where you live (for example, California or the EU), you may have rights to access, correct or delete personal information. Since your Many Balloons data stays on your devices and in your iCloud, you can do all of this directly in the app. For anything else, contact us and we'll respond within 30 days.

16. Changes to this policy

If we change this policy, we'll update the date at the top of this page and, for significant changes, let you know in the app.

17. Contact

Harrison Riehle
Email: harrison@riehle.co