We understand that digital gifts contain your most cherished memories, private photos, and heartfelt words. That's why security isn't an afterthought at MiYo Gift—it's built into our foundation.
Connections between your browser and MiYo Gift are protected with HTTPS/TLS. Traffic is encrypted from your browser to Cloudflare and again from Cloudflare to our origin infrastructure, helping protect your content while it travels across the network.
Database information is stored in infrastructure located in the United States and protected with encryption at rest. This adds an additional layer of protection for stored gift and account data.
Each gift payload is protected independently rather than relying only on storage-level encryption. If you enable password protection, access to the protected gift requires the correct password before the gift content can be opened.
We do not store your full credit card details. Payments are handled through PCI-DSS compliant payment providers, such as Creem.
A simple look at how your gift is protected from the moment you create it to the moment your recipient opens it.
When you add text, photos, videos, audio, or other content, it is transferred between your browser and MiYo Gift over encrypted HTTPS/TLS connections.
Uploaded photos, videos, audio, and other files are stored in private object storage rather than exposed through a public bucket.
When protected media needs to be displayed, MiYo Gift grants temporary access through time-limited signed URLs. These links expire automatically instead of remaining permanently public.
Each published gift receives a unique UUID-based link identifier designed to be difficult to predict or enumerate. In normal use, someone needs the private link you choose to share in order to reach the gift.
For gifts that need an extra layer of privacy, you can enable password protection. Recipients must enter the correct password before they can access the protected gift content.
When your recipient opens the gift, the page and its protected media are delivered over encrypted connections, with private media authorized only when it is needed.
We operate on a zero-exploitation model. Your personal moments are never treated as a commodity.
We do not inject third-party advertisements into the personal gifts you create.
Your personal information and gift content are not products. We do not sell them to third parties.
We use technical controls designed to keep personal gift pages out of search indexes and block known search and AI crawlers. These controls cannot guarantee that no automated system or third party will obtain content through a shared link or another source. We do not intentionally expose your gift content for public search discovery or AI model training.
Your data belongs to you. You can permanently delete eligible gift data here to revoke access through its link. This action cannot be undone. Deletion may not immediately remove every backup, log, transaction record, or legal record that must be retained for security, technical, accounting, fraud-prevention, or legal reasons.