1. Who we are
Wisht (“we,” “us”) operates the application and related websites/APIs. For privacy inquiries, contact privacy@wisht.io.
2. Information we collect
- Account data: name, email address, and credentials you use to register or sign in. Passwords are handled with standard security practices on our systems (for example, hashed storage); we do not store plaintext passwords.
- Profile and preferences: optional profile details you choose to add (such as a profile message, avatar image, birthday, and important dates you save in the app).
- Wishlist content: wishlist names, item names, descriptions, notes (such as size or color), links to third-party product pages, images or image URLs, optional prices, and similar details you enter or import.
- Social features: information about friends or connections you add inside the app, as implemented by our services.
- Photos you upload: if you choose an image from your library (or camera, where available), the app may send that image to an automated processing workflow so it can be stored and served as a URL used in your wishlist. That workflow may run on infrastructure operated by us or our subprocessors.
- Product link import: if you use a feature to fill item details from a store URL, the app sends that URL (and an account identifier we use to attribute uploads or processing) to an automated service that retrieves public product information. Results are used to pre-fill your form.
- Technical data: when you use our services, standard server logs may include IP address, timestamps, and request metadata for security and reliability.
3. Information collected on your device (third-party services)
Barcode scanning. When you scan a barcode, the app may send the scanned code directly from your device to our API to retrieve public product information.
Store and product pages. If you open external websites from the app, those sites have their own privacy practices.
4. How we use information
- Provide, maintain, and improve (accounts, wishlists, sharing, and related features).
- Authenticate you and protect against abuse, fraud, and security incidents.
- Communicate with you about the service (for example, responses to support requests sent to support@wisht.io).
- Comply with law and enforce our terms.
We do not sell your personal information. We do not use in-app advertising analytics SDKs in the app as of the effective date above; if that changes, we will update this policy.
5. How we share information
- Service providers that host our API, databases, automation (for example workflow tools that process product links or images), and file storage (for example cloud object storage for images). They may process data only on our instructions and subject to appropriate safeguards.
- Other users when you use sharing features (for example, showing wishlist content to friends you connect with), as designed in the product.
- Legal and safety: when required by law, legal process, or to protect rights, safety, and integrity of users or the service.
- Business transfers: in connection with a merger, acquisition, or sale of assets, with notice as required by law.
6. Retention
We keep information as long as your account is active and as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account as described below; some residual backups or logs may persist for a limited period.
7. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure.
8. Your choices and rights
- Access and correction: update profile and wishlist information in the app where supported, or contact us.
- Deletion: email privacy@wisht.io to request account deletion, subject to legal retention needs.
- EEA, UK, Switzerland: you may have rights to access, rectify, erase, restrict or object to processing, and data portability, and to lodge a complaint with a supervisory authority.
- California (U.S.): California residents may have additional rights under applicable law (for example, to know, delete, and opt out of certain sharing). We do not “sell” personal information as defined by the CCPA/CPRA as of the effective date above.
9. Children
Wisht is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, contact privacy@wisht.io.
10. International users
If you access from outside the country where our servers are located, your information may be transferred to and processed in countries that may have different data protection laws. Where required, we use appropriate safeguards.
11. Changes
We may update this policy from time to time. We will post the new version on this page and update the effective date. For material changes, we may provide additional notice (for example, in-app or by email).
12. Contact
Privacy: privacy@wisht.io
Support: support@wisht.io