Privacy Policy
Last updated: October 21, 2026
Summary
Gasp lets you surprise someone with news and, if they agree, see their reaction. We built it so the person being filmed stays in control of their own face.
- Nothing is recorded without consent. A recipient chooses to record before anything plays, or chooses to just watch.
- The recording stays on the recipient's phone until they tap Send. If they keep it or delete it, it never reaches us.
- Face detection happens only on the phone, to open the envelope with a smile and to check the face is in frame. Nothing it detects is stored or sent, and we never identify people or analyze emotions.
- The recipient decides who sees it: only the sender, or the sender's family and friends. Each public social-media post needs a separate approval from them.
- We don't sell personal information or show ads, and we never contact recipients ourselves.
- Everything is deleted on a schedule: 30 days on free reveals and 12 months on paid ones. A recipient can delete their reaction at any time.
Who we are
Gasp is operated by Gal Cohen, an individual in Israel (“Gasp”, “we”). We are responsible for the personal information described in this policy. Contact: [email protected].
This policy covers:
- Senders: people who create a Gasp and send it.
- Recipients: people who open a Gasp link. Recipients don't need an account.
- Visitors: people who visit our website or join the waitlist.
The test period
Gasp is in a free test period. Senders sign up with an email address and create each Gasp themselves, with an AI service designing it from their photos and words (see “How we use AI”). Our team doesn't browse senders' Gasps: we open one only when needed, to handle a report about it, to look into a problem, or to help when the sender asks, and each time is logged. Everything else in this policy applies as written.
What we collect
You are not legally required to give us any of this information. Without some of it, we can't provide the service.
| Who | What we collect | Where it comes from |
|---|---|---|
| Senders | Email address (to sign you in), your name and how to address you in Hebrew (female or male) | You |
| Senders | Your Gasp content: the news text, photos, the reveal image, your voice recording, answers to our two questions, a gift description, and the names and forms of address of your recipients | You |
| Senders | Once paid Gasps open: payment records (amount, method, order number and receipt). Card details go directly to our payment provider; we never see or store them | You and our payment provider |
| Recipients | Your reaction video and audio, only if you chose to record and then tapped Send | You |
| Recipients | An optional written reply, and your choices, such as who may see the reaction | You |
| Recipients | Your email address, only if you ask us to email you your link. We use it for that one email and don't store it | You |
| Waitlist | Your phone number or email address, with your consent to be contacted when we open | You |
| Everyone | A random device identifier stored in a cookie, and information about how the service was used (for example, that a link was opened or a reaction was sent), with your device type, browser and approximate time. Like any website, our servers and our network provider also see your IP address when you connect | Your device |
We never collect recipients' phone numbers or email addresses from senders. Senders send their Gasp links themselves.
What never leaves your phone
- The recording before Send. It is saved only on the recipient's device. If they choose “keep it just for me” or delete it, it never reaches us. An unsent recording is erased from the device after 24 hours.
- Face detection. When a recipient chooses to record, the phone checks whether a face is in frame (so it can ask them to lift the phone) and whether they smiled (to open the envelope). This runs only on the device. We don't receive, store or use any face measurements, we don't identify anyone, and we don't analyze emotions.
- The camera picture during the reveal. Recipients never see themselves while watching, and the image isn't sent anywhere until they review it and tap Send.
How we use information
- To provide Gasp: build the reveal, deliver it to the recipient, create the split-screen video, get the result to the sender and keep your files available for the storage period.
- To identify senders and, once paid Gasps open, to take payments and issue invoices.
- To keep Gasp safe: check content against our rules, prevent abuse and fraud, and handle reports.
- To improve reveals: we learn which kinds of reveal work best from what happens, not from faces: whether a link was opened, whether the reveal was watched to the end, whether a reaction was sent or shared. We record these signals with an identifier, not with names or content.
- To contact waitlist members when we open, only if they agreed.
- To meet legal obligations, such as keeping tax records.
We don't sell personal information, don't use it for advertising, and don't use reaction videos in our marketing unless the person shown gives separate written consent.
How we use AI
To create each reveal, we send the sender's text and reduced-size copies of their photos to an AI provider, Google (the paid Gemini API). The AI suggests the order of the photos, drafts the short texts, and checks the content against our rules. Every text is reviewed and approved before the Gasp is sent. Under Google's terms for the paid Gemini API, Google doesn't use this content to improve its products.
The AI never receives reaction videos and never creates or changes anyone's face or voice. Photo improvements are limited to ordinary adjustments such as brightness, contrast and sharpness.
Who sees what
- The sender sees the recipient's reaction and reply only if the recipient tapped Send.
- The sender's family and friends may see it only if the recipient chose “can share with family and friends”.
- The public sees it only if the recipient approved that specific post on that specific platform. Reactions of children under 18 are never approved for public posting.
- The recipient sees the reveal the sender made for them. Senders: anything you put in a Gasp, including photos and a gift description, is shown to your recipient.
- Our team, only when needed: to handle a report, to look into a problem, or to help when a sender asks. Each time is logged.
We share personal information with service providers who process it for us under contract and only for providing Gasp:
| Provider | What it does | Location of processing |
|---|---|---|
| Oracle Cloud Infrastructure | Hosts the website and the database, stores photos and videos, and creates the videos | United States (Ashburn, Virginia) |
| Cloudflare | Delivers the website securely and protects it from attacks; sees connection details such as IP addresses | Global network |
| AI that drafts the reveal texts and checks content (the paid Gemini API) | United States | |
| Brevo | Sends emails | European Union |
We will update this list before we add a provider, for example for text messages or payments when those open. We may also disclose information when the law requires it, to protect someone's safety, or as part of a sale or merger of the business, in which case this policy continues to apply.
Where your information is stored
Photos, videos and the database are stored in the United States (Oracle Cloud, Ashburn, Virginia), encrypted. Transfers outside Israel are made in accordance with the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 2001.
How long we keep it
| Information | Kept for |
|---|---|
| Reveals, photos, reactions and videos, free Gasps | 30 days after sending |
| The same, paid Gasps | 12 months after sending |
| Drafts never sent | 7 days after the last change |
| An unsent recording on the recipient's phone | 24 hours, on the device only |
| Database backups | Up to 7 more days after deletion. Photos and videos have no backup copies |
| Technical logs | 30 days, without content |
| Payment records and receipts | As long as tax law requires |
| Waitlist details | Until we open and contact you, or until you ask us to delete them |
| Usage events | 24 months, linked to identifiers only |
A recipient can delete their reaction at any time using the link in their confirmation. This removes it from our servers immediately, including the videos made from it. Copies that were already downloaded can't be recalled.
Your rights
You may ask to see the personal information we hold about you, to correct it, or to delete it. Write to [email protected]; we will verify your identity and answer within 30 days. If you are in the European Union, you also have the rights given by the GDPR, including to object, to restrict processing and to receive your data in a portable format.
- Recipients: delete your reaction yourself from the confirmation link, at any time.
- Recipients: to block a sender or report a Gasp, write to us.
- Senders: ask us to delete a Gasp or your details at any time.
- Waitlist: ask to be removed at any time.
You can also complain to Israel's Privacy Protection Authority, or to the data protection authority where you live.
Children
Senders must be 18 or older. A Gasp may be sent to a child only by the child's parent or legal guardian, who confirms this before recording is offered. A child's reaction is never approved for public posting and is never used in marketing.
Security
Photos and videos are encrypted when stored and can only be opened through private links that expire within minutes. Gasp links can't be guessed and are stored in a form we can't reverse. Access by our team is limited, protected by two-factor authentication and logged. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
Cookies
We use only cookies needed to run Gasp: to keep senders and our team signed in, to remember your language and a recipient's choices on their device, and to know which shared video brought a visitor to us. We don't use advertising cookies or third-party trackers. Usage events are recorded by our own servers, without third-party scripts.
Changes and contact
We will post changes here with a new date, and tell senders about important changes before they take effect.
Questions or requests: [email protected].