Privacy

Effective 2026-09-07

Bodhi holds two things that deserve care: private messages people forward to it, and names of family members who never signed up themselves. This page says plainly what happens to both.

The short version

  • Bodhi is a gift-list app. It does not sell or rent your information, and it runs no analytics and no third-party trackers.
  • Bodhi makes money from affiliate links: the product links in the gift guides, the Gift Finder and on your lists go to Amazon, and if you buy something after following one we may earn a commission. Where those links carry our referral tag, Amazon can also tell that the visit started here. It costs you nothing extra, and it never changes what the app suggests.
  • The text of anything you forward is sent to Anthropic's API so an AI model can pull gift ideas out of it. That is the core of how the app works, and it is the most important thing on this page.
  • A person can be listed in Bodhi without having an account. If that is you, or someone you are responsible for, you can ask us to remove them — see Contact.
  • Two cookies: the one that keeps you signed in, and one that remembers your time zone so dates read correctly. No tracking cookies, so no cookie banner.

Who “we” means

Bodhi is run by Dishajyoti LLC, a Washington limited liability company, who decides what happens to the information described below and is the person to contact about it — at hello@elf.dishajyoti.com.

What we collect

Your account. Your email address, which is the only thing needed to sign up — Bodhi uses emailed sign-in links, so there is no password to store. Optionally a display name, and a mobile number if you choose to link one for forwarding by text.

What you put in. The names of your family circles, the names of the people in them, gift ideas and any notes on them, and which ideas have been claimed. Optionally a birthday, or a one-off occasion and its date, for any person on a list — used only to sort your lists by what is coming up soonest and to say so in the weekly email. When you paste a product link, we fetch that page from our own server and store the title, price and image it advertises — your browser never contacts the retailer, so the retailer does not see you.

Messages you forward. When you paste, text or share a message into Bodhi, we store the message text as you sent it, along with what the AI made of it. We keep the original because the review queue shows it to you next to the suggestions, so you can tell whether a suggestion is right. That text often contains a conversation someone else wrote — please see the section on other people below.

Operational records. For each message: which channel it came in on, a fingerprint of the content used to spot duplicates, timestamps, and how many AI tokens it cost. The token counts are what enforce Bodhi's daily spending limit, so they are not optional. If you forward by text message, the sending phone number is stored with the message.

People who never signed up

This is the part of Bodhi that deserves the most honesty. The whole point of the app is to keep gift ideas for family members — and most of those people will never create an account. Grandparents, children, in-laws. Information about them ends up in Bodhi because someone else put it there.

If you add someone, you are the one deciding to do that. Please only add people you would be comfortable telling that you had. Keep it to what a gift list actually needs: a name and gift ideas. Bodhi is not the place for anyone's address, health details, finances, or anything else sensitive.

If you are listed in Bodhi and did not choose to be — or you are a parent or guardian of someone who is — email hello@elf.dishajyoti.com and we will remove them. You do not need an account to ask, and we will not require you to make one.

What we do with it

We use it to run Bodhi and nothing else: signing you in, extracting gift ideas from what you forward, showing your family's lists, keeping claimed gifts hidden from the person receiving them, stopping abuse and runaway costs, and fixing things when they break.

One weekly email. If there is something worth saying — a birthday coming up, ideas waiting in your inbox — we send you a summary once a week. Nothing is sent in a quiet week, it is never marketing, and you can turn it off in Settings or from the link at the bottom of the email itself.

We do not sell or rent your information, we do not share it for advertising, and no one outside the services listed below receives it.

Who else processes it

Bodhi is a small app built on other people's infrastructure. These companies process data on our behalf, each under its own terms:

  • Supabase — the database and sign-in system. Holds everything listed above.
  • Vercel — hosting. Sees requests to the site, including IP addresses, in server logs.
  • Anthropic — the AI that reads forwarded messages and suggests gift ideas. The full text of every message you forward is sent to Anthropic. Their handling of it is governed by their own terms, linked here.
  • Twilio — receives text messages on Bodhi's number. Sees the message and the phone numbers on both ends. Only involved if you link a phone.
  • Resend — delivers sign-in emails and the weekly summary. Sees your email address and the contents of those messages.
  • Sentry — error reporting, so we find out when something silently fails. Receives technical details of errors and the addresses of pages where they happened.
  • Amazon — product search links in Bodhi may carry an affiliate tag, so Amazon can attribute a visit that started here. Following one is always your choice; see the Terms for the disclosure.

What other people in your family circle can see

A family circle is a shared space, so being in one means other members can see the people, gift ideas and claims in it — with one deliberate exception, which is the rule that keeps surprises intact: you never see what someone else has saved for you, and you are never told that something has been claimed for you. Ideas you wrote for yourself stay visible to you, because they are your own wishes rather than anyone's surprise — but even on those, whether somebody is buying it is hidden.

That is enforced by the database rather than by the interface: the rows you may not see are filtered out, and on the ones you may, the two columns that would give a surprise away are masked before they reach the page.

Two things are worth knowing specifically. If you link a phone number, other members of your circles can see it. And a family circle is joined with an invite code — anyone who has the code can join and see that circle's lists, so treat it like a house key rather than something to post publicly.

What you forward is not shared with the circle at large: the original message text is visible only to you, not to other members, even though the gift ideas it produced are. The one exception is texts sent in by a contributor, described next — those are read by the person who invited them.

Contributing by text, without an account

Someone in your family can invite a person to add gift ideas by text message without ever creating an account. If that is you, this is what it means.

  • We store your mobile number so we can recognise which texts are yours, along with who invited you and which person on the list you are.
  • The person who invited you reads the texts you send in, in their inbox, alongside the gift ideas the AI pulled out of them — so send Bodhi the gift idea, not the rest of the conversation.
  • Bodhi still never texts you. It only receives.
  • You can stop at any time and have your number removed — reply to the person who invited you, or email hello@elf.dishajyoti.com directly. You do not need an account to ask.

Because contributing needs no account, the age rule below cannot be enforced at a sign-up screen. Please do not invite a child to contribute by text.

How long we keep it

Your account and your lists are kept until you ask us to delete them.

Forwarded message text is cleared after 365 days. The record that a message arrived is kept longer, without its contents, because duplicate detection and cost limits depend on it.

Your choices

  • See what we hold. Most of it is already on your dashboard and inbox. For the rest, ask.
  • Correct it. Names, ideas and claims are all editable in the app.
  • Delete it. In Settings, yourself, at any time. It removes your profile, your phone number and every message you forwarded. Gift ideas you added for other people stay on their lists with your name taken off, anything you claimed is released so somebody else can pick it up, and a family circle you started is handed to whoever joined it first — or deleted if you were the only one left. Settings spells this out before you confirm, and it cannot be undone afterwards, by you or by us. If you would rather we did it, email hello@elf.dishajyoti.com.
  • Turn off the weekly email. In Settings, or from the link in the email.
  • Unlink your phone. In Settings, at any time. Bodhi never sends you text messages; it only receives them.
  • Remove someone who is not you. Covered above — just email us.

Depending on where you live you may have further rights, such as asking for a copy of your data or objecting to how it is used. Ask and we will do it; we are not going to make you cite a statute first.

Children

You must be at least 18 to have a Bodhi account. Children are absolutely expected to appear in Bodhi — they are who a lot of these gifts are for — but only as people an adult has added, never as account holders, and never as text-message contributors.

Please add no more about a child than a first name and gift ideas. The app will offer to store a birthday, which is genuinely useful for sorting a list by what is coming up — but a child's date of birth is more sensitive than their name. It is entirely optional and you can clear it later. Be aware that the field stores a whole date even though only the month and day are used to work out when the next birthday falls, so if the year matters to you, skip the field; nothing else depends on it.

Security

Access is controlled in the database rather than only in the app, so a request for someone else's family data is refused at the lowest level, not just hidden by the interface. Sign-in uses single-use emailed links, so there is no password to leak. Traffic is encrypted.

Bodhi is a small project and honesty is worth more than reassurance here: no system is perfect, and if we ever found that data had been exposed we would tell the people affected. If you spot a problem, please tell us at hello@elf.dishajyoti.com.

Cookies

Two cookies. One keeps you signed in. The other stores the name of your time zone — something like Europe/London — because a server has no way of knowing what day it is where you are, and without it a birthday tomorrow can be announced as today. It is set by your browser, never leaves our site, and is not used to recognise you.

Bodhi sets no analytics, advertising or third-party cookies of its own, and loads no tracker from anyone else — which is why you are not being asked to accept anything. Fonts are served from our own site rather than fetched from Google.

Following one of those product links is the one place that boundary ends: once you land on Amazon you are on their site, under their cookies and their privacy policy. That happens only if you choose to follow one.

Where your data is held

Bodhi's hosting and the services listed above are based in the United States, and information is processed there. If you are outside the US, using Bodhi means your information is handled in a country with different data protection laws from your own.

Changes

If this page changes in a way that matters, we will update the effective date at the top and tell circle owners by email rather than quietly editing it.

Contact

Privacy questions and deletion requests: hello@elf.dishajyoti.com. Anything else is on the contact page.