Privacy policy

1. Introduction

Welcome to WishApp ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we look after your personal data when you visit our website, what your privacy rights are, and how the law protects you.

2. The data we collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data includes first name, last name, username or similar identifier.
• Contact Data includes email address.
• Technical Data includes internet protocol (IP) address, browser type and version, device information.
• Usage Data includes information about how you use our website and services.
• Diagnostic Data includes crash reports, performance metrics, and on-error session replays collected through Sentry so we can find and fix bugs. Replays have all text, images, and graphics masked, so we cannot read your wishlist content or see your photos.
• File Data includes profile pictures, avatars, and any files you upload to our service, stored securely on our cloud storage infrastructure.

3. How we collect your data

We use different methods to collect data from and about you including through:

• Direct interactions. You may give us your information by filling in forms or contacting us.
• Third-party services. When you sign in with Google, we receive your name, email address, and profile picture from Google to create your account.
• Automated technologies. As you interact with our website, we automatically collect technical data using cookies and similar tracking technologies.
• Crash and performance monitoring. We use Sentry to record crashes, slow operations, and on-error session replays of the app's interface. Replays have all text, images, and graphics masked. We use this data only to diagnose problems, never to track behavior for advertising.
• File uploads. When you upload files such as profile pictures or avatars, we store them securely on cloud storage infrastructure for delivery and display within our service.

4. How we use your data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data to:

• Register you as a new user
• Provide and improve our services
• Manage our relationship with you
• Administer and protect our business and website
• Diagnose crashes and performance issues so we can ship fixes quickly
• Measure and improve the performance of our features

5. Google OAuth data

When you sign in with Google, we access and use your Google data as follows:

• We collect your name, email address, and profile picture to create and manage your account
• We do not sell your Google data to third parties
• We store your data securely and only use it to provide our services
• You can delete your account and associated data at any time

6. File storage and uploads

When you upload files to our service, including profile pictures and avatars, we handle your data as follows:

• Files are stored securely on cloud storage infrastructure with encryption at rest
• Profile pictures and avatars are automatically processed and optimized for performance
• Files are served through a secure content delivery network for fast access
• You can delete your uploaded files at any time through your profile settings
• When you delete your account, all associated files are permanently removed

7. International data transfers

Your personal data may be transferred to and processed in countries outside your country of residence:

• Our service providers may process data in the United States and other countries
• We ensure appropriate safeguards are in place for international transfers
• These transfers are governed by EU Standard Contractual Clauses or similar legal mechanisms
• Cloud storage providers may process your uploaded files in accordance with their international data protection policies

8. Cookies and tracking

Our website uses cookies and similar tracking technologies to provide functionality and improve your experience:

• Essential cookies are required for authentication and session management through Better Auth
• We use secure, HTTP-only cookies to maintain your login session
• Cookies help us remember your preferences and settings across visits
• You can control cookie settings through your browser, but disabling essential cookies may affect site functionality
• Third-party services like Google OAuth may use their own cookies as described in their privacy policies

9. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We use encryption to protect your information.

10. Your legal rights

Under data protection laws, you have rights including:

• Request access to your personal data
• Request correction of your personal data
• Request erasure of your personal data
• Object to processing of your personal data
• Request restriction of processing

11. Browser extension

Our browser extension allows you to save products from any website to your wishlists. When you use the extension:

• Product metadata (title, price, image URL, page URL) is read from the current page only when you click the extension icon
• This data is sent to getwish.app only when you explicitly submit the form to add a product to your wishlist
• Your authentication session is managed through secure cookies shared with getwish.app
• Extension preferences (theme, settings) are stored locally on your device using browser storage
• Cached wishlist data is stored locally with a 5-minute expiration and is cleared on sign-out
• The extension does not collect analytics, tracking data, or browsing history
• No data is read or transmitted in the background. All activity requires your explicit action

12. Legal basis for processing

We process your personal data based on the following legal grounds:

• Contract performance: Processing necessary to provide our services, including account creation, wishlist management, and wish reservations
• Legitimate interests: Processing for security, fraud prevention, service improvement, and analytics
• Consent: Where required, such as for optional analytics cookies or marketing communications
• Legal obligation: Processing required to comply with applicable laws and regulations

13. Data retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account data (name, email, profile picture) is retained until you delete your account
• Wishlist and reservation data is retained until you delete it or your account
• Crash and performance data collected through Sentry is retained for up to 90 days. On-error session replays are retained for up to 30 days
• Authentication session data is retained for the duration of your session
• Uploaded files are retained until you delete them or your account is removed

14. Account deletion

You can delete your WishApp account at any time:

• In the app: open Profile, tap Settings, then choose "Delete account."
• Without the app installed, you can request deletion here.
• Deletion is permanent and removes your wishlists, wishes, reservations, follows, profile data, and uploaded files.
• We respond to web-based deletion requests within 30 days.
• Some data may be retained for legal or fraud-prevention reasons as described in the Data retention section.

15. Data controller

WishApp is the data controller responsible for your personal data. If you have questions about how your data is handled, you can reach us at contact@getwish.app.

16. Children's privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will take steps to delete such information.

17. Exercising your rights

To exercise any of your data protection rights listed in section 10, or if you have concerns about how we handle your data, please contact us at contact@getwish.app. We will respond to your request within 30 days.

18. Affiliate links

Some product links on our platform may be affiliate links. When you click on these links and make a purchase, we may earn a small commission at no additional cost to you. This helps us keep the service free. Affiliate links do not affect the products you see or the prices you pay.

19. Contact us

If you have any questions about this Privacy Policy, please contact us.