Privacy
Last updated: 29 September 2026
Short version: we store what you put in a Tohfa so the person you send it to can open it, and we show you when they open it, their answer and their reply. No ads, no trackers, no selling data. Delete your Tohfa any time — free.
What we store when you make a Tohfa
- The names, messages, letter, question and photo captions you type, and the photos you add.
- Photos are shrunk and re-saved on your phone before upload, which removes hidden data such as location and camera details.
- A random ID for the link and a secret key for your tracking page.
What we record when someone opens it
- How many times it was opened, and the time of the first and latest open (counted when they tap “open”, not when a chat app loads a preview).
- Their answer to your question and the reply they choose to write. Only you (whoever has the tracking link) can see these.
- We do not store IP addresses, device IDs or locations. To stop abuse (for example, someone creating hundreds of Tohfas), we keep a salted one-way hash of the network address for the current day only; it is deleted the next day and cannot be turned back into an address.
Microphone
Birthday Tohfas let the recipient blow out candles by blowing into the microphone. The microphone is used only if they tap “Blow into the mic” and allow it. The sound is measured for loudness inside the browser, in real time; it is never recorded, stored or sent anywhere.
Analytics
We count anonymous events per day (for example “preview opened” or “link copied”) to understand what works. Each count is just an event name and a date — no cookies, no identifiers, no third-party analytics or advertising tools.
On your device
Your list of Tohfas (with their tracking keys) and any unfinished draft are saved in your browser’s local storage on your device, so you can come back to them. Clearing your browser data removes them; you can restore a paid Tohfa with its payment ID.
Payments
Payments are processed by Razorpay. We receive the order ID, payment ID and amount — never your UPI PIN, card number or bank details. Razorpay’s own privacy policy applies to the payment.
Who else processes data
- Cloudflare — hosts the website and the database that stores Tohfas.
- Razorpay — processes payments.
We don’t sell or rent data, and we don’t share it with anyone else unless the law requires us to.
How long we keep it
- A live Tohfa is deleted automatically one year after it goes live.
- An unpaid draft is deleted after 3 days.
- You can delete a Tohfa any time from its tracking page; its photos, answer and reply are deleted with it.
- Payment records (order ID, payment ID, amount, date) are kept as long as tax and accounting law requires.
If you received a Tohfa
If a Tohfa about you is hurtful or shares your photo without permission, tap “Report this Tohfa” on its last screen or email us with the link. We act on these quickly.
Children
Tohfa is meant for people aged 13 and over. If you’re under 18, please ask a parent or guardian before paying.
Your rights and contact
You can see, change (by making a new one) or delete your Tohfa at any time. For anything else — access, correction, deletion or a grievance under India’s Digital Personal Data Protection Act, 2023 — write to dev@udbhav.uk. We reply within 2 business days.