Privacy Policy

Last updated: 2 October 2026

Wish It ("we", "us") lets you create wishlists and share them with friends and family. This policy explains what information we collect, how we use it and the choices you have. Questions? Email support@wish-it.org.

What we collect

Account details: your email address and password (stored hashed by our authentication provider), or your basic profile from Google, Facebook or Apple if you sign in with them.
Profile information you choose to add: name, username, photo, bio, country, language, and optionally date of birth, gender, phone number and zip code.
Content you create: wishlists, wishes (titles, descriptions, links, prices, images), friends, follows, reservations and collaborators.
Activity and notifications generated by using the app (for example "added a wish" or "accepted your friend request").
Basic usage data: anonymous page-view and performance statistics.

Who can see what

Your name, username, photo and bio are visible to other users. If your account is private, only your friends can see your profile and lists.
Your date of birth, gender, phone number and zip code are private: only you can see them.
Wishlists are visible according to the setting you choose (public, link-only or private).
When a friend reserves or buys one of your wishes, you can see that it was reserved but not who reserved it, so surprises stay surprises.

How we use your information

To run the service: your account, lists, friends, reservations and notifications.
To send account emails, such as confirming your email or resetting your password.
To keep the service secure and prevent abuse.
To understand, in aggregate, how the app is used so we can improve it.

We do not sell your personal information or use it for advertising.

Services we use

Supabase stores the database, uploaded images and handles sign-in.
Vercel hosts the website and provides privacy-friendly, cookie-free analytics.
Groq generates AI Gift Finder suggestions from the details you type into that form (such as age, interests and budget). These details aren't linked to your account.
Pexels supplies example photos for gift ideas. Only a short description of the gift (for example "wireless headphones") is sent, never your details.
Google, Facebook and Apple if you choose to sign in with them.
When you add a wish from a link, our server fetches that product page to fill in its details.

Cookies

We use only the cookies needed to keep you signed in. We don't use advertising or tracking cookies.

Your choices and rights

You can view and edit your profile at any time in your account settings.
You can delete your account from your account settings. This permanently deletes your profile, wishlists, wishes, photos, friendships, reservations and activity.
You can ask us for a copy of your data or to correct it by emailing support@wish-it.org.

Data retention

We keep your information for as long as your account exists. When you delete your account, your data is removed from our database immediately; backups held by our providers expire on their normal schedule.

Children

Wish It is not intended for children under 13. Parents can create wishlists on behalf of their children from their own account.

Changes

If we make significant changes to this policy we'll update the date above and, where appropriate, let you know in the app. See also our Terms of Service.