Information We Collect
We collect only what's necessary to provide and improve the app — specifically to help you create and share wishlists with the people who matter to you.
Account information — your username, email address, password, date of birth, and optional profile photo and bio when you create an account.
Content — wish images, wish captions, wishlist names, and occasion dates you create within the app.
Social connections — the users you follow and who follow you, and your follow request decisions (public or private account).
Location (optional) — if you enable the Whispers feature, we collect your precise location while the app is open to show proximity-based reminders near stores linked to your wishes. This is opt-in and can be disabled at any time in Settings.
We request the following permissions to enable core features:
| Permission | Why we need it | What we access |
|---|---|---|
| Camera | To let you take photos and attach them to your wishes | Camera feed, only when you initiate a photo action |
| Storage / Photos | To let you select images from your photo library | Only the specific files you choose to upload |
| Push Notifications | To send you reminders about upcoming occasions and wishlist activity from friends | Device notification token (FCM); never used to send marketing without consent |
| Location (when in use) | To power the optional Whispers feature — proximity reminders when you are near a store linked to a tagged wish | Precise location, only while the app is open and only when you have enabled the Whispers feature in Settings. Never accessed in the background. |
Images you upload are stored on our Supabase server to display in your wishlists. We never access your camera, storage, or location without a direct action from you or your explicit opt-in.
We collect minimal technical data — how you use the app (features used, session events), crash reports, and basic device information (device type, OS version) via Firebase Analytics and Firebase Performance — to help us improve the app. This data is not tied to your name or email.
We also store a push notification token (FCM token) associated with your account to deliver notifications about wishlist activity and upcoming occasions.
How We Use Your Information
We use your data only for the following purposes:
To provide the app's core functionality — displaying your wishlists and uploaded images.
To manage your account and respond to support requests.
To analyse and improve app performance and features.
To comply with legal obligations and enforce our policies.
Sharing Your Information
We do not sell your personal information.
Supabase — Our primary cloud database, authentication, and file storage provider. Supabase stores your account data, wish content, and social graph on our behalf and is contractually prohibited from using it for any other purpose.
Google Firebase — We use Firebase Cloud Messaging (FCM) to deliver push notifications, Firebase Analytics to understand how the app is used, and Firebase Performance to monitor app stability. Google may process device identifiers and usage events in line with their Privacy Policy.
Legal requirements — We may disclose your information if required by law or legal process.
Business transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
Data Security
We take commercially reasonable steps to protect your information from loss, misuse, and unauthorised access. Specifically:
In transit — All data between the app and our servers is transmitted over HTTPS/TLS.
At rest — Your authentication credentials are stored using your device's secure storage (Android Keystore). Wish content and images are stored in Supabase with access controls enforced by Row Level Security policies.
That said, no method of electronic storage or transmission is entirely secure. We recommend using a strong, unique password and keeping your account credentials private.
You may request deletion of your account and all associated data at any time — see the Account Deletion page or email us directly.
Children's Privacy
The app is designed for users aged 12 and older and may appeal to children under 13.
We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and applicable global laws. We do not knowingly collect personal information from children under 13 without verifiable parental consent.
If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at service@giftwishit.com and we will promptly delete that information.
Your Rights
Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, or to object to or restrict certain processing.
Access & correction — You can view and update most of your account information directly in the app (Profile → Settings).
Account deletion — You can delete your account and all associated data at any time via Profile → Settings → Account → Delete Account, or by emailing us. We process deletion requests within 30 days.
Notification opt-out — You can disable push notifications at any time via your device's system settings or in the app.
Location opt-out — You can disable the Whispers location feature at any time in Settings, or revoke location permission in your device's app settings.
To exercise any of these rights, contact us at service@giftwishit.com.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we'll post the revised version at mywishper.giftwishit.com/app/privacypolicy.html and update the last-updated date at the top of the page.
Continued use of the app after any changes constitutes your acceptance of the updated policy.
Contact Us
If you have questions or concerns about this Privacy Policy or how we handle your data, please reach out.
Email us at
service@giftwishit.com