User data security & GDPR
If you don't need target users by their usernames (as they are used in your application), we recommend to hash (i.e. MD5) these values provided to Product Fruits to avoid GDPR issues.
Also, it is highly recommended to not insert any sensitive content (i.e. passwords) into Product Fruits tours, hints, or announcements.