Your privacy is important to us. This Privacy Policy explains how Wishy ("we", "our", or "us") collects, uses, and protects your personal information when you use our mobile application.
1. Information We Collect
1.1 Information You Provide
When you use Wishy, you may provide us with the following information:
- Account Information: Email address, display name, and password (encrypted)
- Profile Information: Avatar emoji, user preferences, and settings
- Wishlist Data: Wishlist titles, descriptions, products/wishes, prices, notes, and images
- Social Features: Friend connections, friend requests, and wishlist sharing preferences
- Contact Messages: When you contact us through the app, we collect your message content
1.2 Automatically Collected Information
- Device Information: Device model, operating system, and app version
- Usage Data: App features used, screens viewed, and interaction patterns
- Log Data: Error logs, crash reports, and performance metrics
1.3 Google Sign-In Information
If you choose to sign in with Google, we receive:
- Your Google account email address
- Your Google profile name
- Your Google profile picture (optional)
2. How We Use Your Information
We use the collected information for the following purposes:
- Provide and Maintain the Service: Create and manage your account, store your wishlists and wishes
- Social Features: Enable friend connections, wishlist sharing, and wish reservations
- Authentication: Verify your identity and secure your account
- Communication: Respond to your inquiries and send important service updates
- Improve the App: Analyze usage patterns to enhance features and user experience
- Security: Detect and prevent fraud, abuse, and security incidents
- Compliance: Comply with legal obligations and enforce our Terms of Service
3. Data Storage and Security
3.1 Where We Store Your Data
Your data is stored using Google Firebase services, including:
- Firebase Authentication: Secure account credentials (passwords are encrypted)
- Cloud Firestore: Wishlist data, user profiles, and social connections
- Firebase Hosting: Static content like this Privacy Policy
Firebase servers are located in secure data centers in the United States and other regions globally.
3.2 How We Protect Your Data
- Encryption: All data is transmitted over HTTPS (SSL/TLS encryption)
- Password Security: Passwords are encrypted using industry-standard hashing algorithms
- Access Controls: Firestore security rules ensure users can only access their own data
- Regular Updates: We regularly update security measures and patch vulnerabilities
Important: While we implement strong security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
4. Data Sharing and Disclosure
4.1 What We Don't Do
- ❌ We do NOT sell your personal information to third parties
- ❌ We do NOT share your data with advertisers
- ❌ We do NOT use your data for marketing purposes without consent
4.2 When We Share Information
We may share your information in the following limited circumstances:
- With Friends: Wishlists marked as "Friends" or "Public" are visible to your friends or all users respectively
- Service Providers: Google Firebase and other essential service providers that help us operate the app
- Legal Requirements: When required by law, court order, or government regulation
- Safety and Security: To protect the rights, property, or safety of Wishy, our users, or the public
- Business Transfers: In the event of a merger, acquisition, or sale of assets
5. Your Privacy Rights
5.1 Access and Control
You have the following rights regarding your personal data:
- Access: View and download your data through the app
- Correction: Update or correct your information in Profile settings
- Deletion: Delete your account and all associated data (Settings → Profile → Delete Account)
- Portability: Request a copy of your data in a machine-readable format
- Objection: Object to certain data processing activities
5.2 How to Exercise Your Rights
To exercise these rights, you can:
- Use the in-app settings and profile management features
- Contact us through the Contact Form available in the Wishy app (Settings → About → Contact Form)
6. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:
- Active Accounts: Data is retained while your account is active
- Deleted Accounts: Data is permanently deleted within 30 days of account deletion
- Backups: Backup copies may be retained for up to 90 days for disaster recovery
- Legal Requirements: Some data may be retained longer if required by law
7. Children's Privacy
Wishy is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using Wishy, you consent to the transfer of your information to the United States and other countries where Firebase operates.
9. Cookies and Tracking Technologies
Wishy uses minimal tracking technologies:
- Firebase Analytics: Anonymous usage statistics to improve the app
- Crashlytics: Crash reports to identify and fix bugs
- Authentication Tokens: Secure session management
You can opt out of analytics through your device settings or by contacting us.
10. Third-Party Services
Wishy integrates with the following third-party services:
- Google Firebase: Backend infrastructure, authentication, and database (Privacy Policy)
- Google Sign-In: Optional authentication method (Privacy Policy)
These services have their own privacy policies. We encourage you to review them.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will:
- Update the "Last Updated" date at the top
- Notify you through the app or email
- Post the new policy on this page
Your continued use of Wishy after changes indicates acceptance of the updated policy.
12. GDPR Compliance (European Users)
If you are located in the European Economic Area (EEA), you have additional rights under GDPR:
- Right to be informed about data processing
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Rights related to automated decision-making
Our legal basis for processing your data is your consent and the necessity to provide our services.
13. California Privacy Rights (CCPA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to say no to the sale of personal information
- Right to access your personal information
- Right to delete personal information
- Right to equal service and price
Note: We do NOT sell your personal information.
14. Contact Us
15. Your Consent
By using Wishy, you consent to this Privacy Policy and agree to its terms. If you do not agree with this policy, please do not use the app.
Summary: We collect minimal data necessary to provide Wishy's services. We protect your data with strong security measures, never sell it to third parties, and give you full control over your information. You can delete your account and all data at any time.
View Terms of Service →