Privacy Policy

What WishSync handles

• Account and authentication data: your email address, authentication identifiers, confirmation and password-reset status, and information returned by Google if you choose Google sign-in. Passwords entered in WishSync are transmitted securely to Supabase Auth for authentication. WishSync does not store passwords in readable form or include them in support or diagnostic reports.
• Profile data: information you choose to add, such as your name, nickname, address, optional gender, hobbies, favorite things, preferences, clothing and jewelry sizes, and notes.
• Relationship data: partner invitations, connection status, membership in a shared space, and relationship settings.
• Wish and planning data: wishlist items, descriptions, prices, priorities, occasions, product links, retailer and item details; shared-home items; important dates; date ideas; and gift plans, budgets, gift history, and planning notes.
• Private data: your personal gift clues, notes about your partner, pending wishlist imports, and gift plans. These records are designed to be visible only to their owner.
• Shared memories and images: story moments, including their titles, descriptions and dates; profile photos; and images you upload for wishlist items, Shared Home items, or story moments. These images are stored in private, non-public storage and are accessible only as permitted by WishSync’s account and relationship access controls.
• Support communications: if you email us, we receive your email address and whatever details, attachments, and device or app information you choose to include. Support emails may be processed by Cloudflare Email Routing and Gmail as part of receiving and responding to your request.
• Safety reports: an in-app report includes opaque reporter, reported-partner, and relationship identifiers; the content type and record identifier where applicable; the selected reason; any optional explanation you enter; the app version/build; and the submission time. Reports do not automatically include the reported text, photo, unrelated profile fields, owner-private notes, gift clues, credentials, or invitation and recovery links.
• Crash diagnostics: crash reporting in release builds may include a stack trace, app release and environment, operating-system, runtime and device-model context, coarse geography the crash-reporting platform may derive, and pseudonymous technical or installation identifiers. These reports are not guaranteed to be anonymous. WishSync does not deliberately attach WishSync account identity or user content. We use these reports to investigate crashes and reliability issues, not for advertising or cross-app tracking. Raw IP-address storage is disabled in the configured Sentry project.

How we use data

We use this information to create and secure accounts, connect partners, display profiles and shared spaces, sync wishlists and relationship content, store private planning information, deliver authentication email, provide support, review safety reports, enforce content rules, maintain the service, and diagnose crashes.

WishSync does not currently contain advertising or behavioral analytics, and we do not sell personal data.

Optional Smart Starters

Smart Starters uses OpenAI to generate gift ideas. Each person controls permission for their own data. Before a new generation uses both connected people’s data, both must enable general OpenAI processing for Smart Starters. This permission is off by default and can be withdrawn in Settings.

With your general permission, WishSync may send OpenAI your eligible wishlist details and the important dates you share with your connected partner to generate Smart Starters about you. When you request Smart Starters, your permission also covers your feedback, selected or previous ideas, and preferred currency. Photos are not included in Smart Starters requests.

A separate, optional personalization permission controls whether your private gift clues and eligible gifting preferences, sizes, favorite things, and other protected profile context may be used to personalize Smart Starters about you. It is off by default and has no effect unless both required general permissions are enabled. This permission controls AI processing; it does not change which profile details you already share with your partner. Your private clues remain owner-only, and your partner receives derived suggestions.

Turning off either permission stops future requests that require it. Requests already sent may finish. Withdrawing permission does not delete saved ideas or private plans. WishSync excludes previously generated ideas that used protected personalization from future AI context when that personalization permission is off. You can continue to use saved ideas and Gift Lab’s other tools. OpenAI’s applicable API data-handling policies apply.

Guided Gifting is separate: it uses rule-based matching and does not call OpenAI.

Optional safety checks before sharing

WishSync uses OpenAI’s Moderation API to check eligible text and images before new or changed content is shared with a connected partner. Safety-processing permission is separate from Smart Starters and personalization, is off by default, and can be withdrawn in Settings.

Your permission covers the content you submit for your Personal Wishlist, your profile photo, and free-form profile content you share. Your partner does not need to enable safety processing for WishSync to check your own submissions. For content in a shared relationship space—including Shared Home, Important Dates free text, Date Wishlist, and Our Story—both connected people must enable safety processing before new content is sent for a check and published. One person cannot grant this permission for the other.

Safety checks send only the free text being newly published or changed and the images being submitted for sharing. They exclude structured address, postal-code, size, price, currency and date fields; account and relationship identifiers; unrelated profile fields; owner-only gift clues; private partner notes; and private Gift Lab plans. A photo check does not send the rest of your profile. Existing shared content is not automatically sent for retrospective screening when this permission is introduced.

When required permission is missing, a check is unavailable, or content is rejected, the affected new content is not published. You can edit or retry when appropriate. Turning off safety processing stops new safety-check requests that require your permission. Requests already sent may finish. Reporting, blocking, disconnecting, and account deletion remain available without enabling AI permissions.

Safety checks do not create a stored queue of pending text. Selected images are converted on your device to the still image that will be checked and shared. Product images imported from a link are checked using the fetched image bytes. WishSync checks images in server memory before creating an immutable stored image; it does not store unmoderated staging copies. Approved images become available to a partner only after they are attached to an authorized shared record. Rejected or failed checks do not create pending image objects. If a save fails after an image has passed safety checks, WishSync attempts to remove the unattached image promptly. A scheduled cleanup process retries removal of exceptional orphaned images. Such temporary unattached images are generally cleared within 24 hours, although a prolonged service or storage outage may delay cleanup.

WishSync records permission choices, the disclosure version and server-recorded change time. It keeps limited operational records, including short-lived publication-approval fingerprints, request counts used to limit abuse, and references for approved images. Submitted text and image bytes are not written to safety-check diagnostic logs. OpenAI’s applicable API data-handling policies apply.

Product links and images. When you ask WishSync to read a product link, our service requests that page and relevant product images from the retailer or image host. The destination may receive the requested URL and ordinary connection information. A product-image preview may also load directly from its image host on your device, which can expose your IP address and browser or app connection information to that host. Imported images are stored in WishSync’s private storage and delivered through our authenticated media service. We do not send your WishSync authentication token or private gift clues to a retailer to fetch a product page.

What your partner can see

When you connect with a partner, that partner can see the information included in your partner-visible profile, your shared wishlist, Shared Home items, important dates, date ideas, shared story moments and their images, and other content you place in the shared relationship space. Profile information that is not included in the partner-visible profile and your personal gift-clue records remain owner-only. Optional processing of protected information to derive Smart Starters is described above.

Your personal gift clues, private notes about your partner, pending imports, and your gift plans—including budgets and private planning notes—are owner-only. Your partner does not receive access merely because you are connected.

If either partner disconnects, WishSync archives and hides the shared relationship space so it can be explicitly restored after a later reconnection or replaced with a fresh space.

If either person uses Block & Disconnect, shared access is removed immediately and the pair cannot accept new invitations or restore an archived space while either directional block remains. A person can remove a block in Settings; unblocking does not itself reconnect the accounts.

Safety review

You can report a partner or eligible partner-visible content in the app. We use the limited report data described above for safety triage, content-rule enforcement, support, recordkeeping, and legal obligations. Authorized reviewers may examine the minimum reported content needed to understand and resolve the report; owner-private information is outside that review scope.

Report records and related support communications may be retained for a reasonable period needed to investigate repeat abuse, document outcomes, protect users, resolve disputes, or meet legal obligations. Reports are delivered to WishSync Support through Resend and the support-mail systems described below.

Service providers

• Supabase provides WishSync's production database, authentication, private file storage, realtime synchronization, and account-deletion infrastructure.
• OpenAI processes permitted Smart Starters context to generate gift ideas and check generated suggestions for safety. With the separate safety-processing permissions described above, OpenAI also checks eligible newly submitted or changed shared text and images before publication. WishSync disables response storage for generation requests. OpenAI’s applicable API data-handling policies apply, including any applicable abuse-monitoring retention; this is not a promise of Zero Data Retention.
• Resend delivers transactional authentication messages and authenticated in-app safety reports to WishSync Support. For safety reports, it receives only the limited report metadata and optional explanation described above.
• Sentry receives the limited crash diagnostics described above when crash reporting is enabled in a release build.
• Cloudflare hosts the public WishSync website, including the Privacy Policy and Support pages. Cloudflare Email Routing forwards mail sent to support@wish-sync.com to our support inbox.
• Google processes authentication when you choose Google sign-in. Gmail currently receives WishSync support mail and is used to respond to support requests. These services operate under Google's own terms and privacy practices.

These providers process information for the services they supply to WishSync. We may also disclose information when required by law or when necessary to protect users, the service, or legal rights.

Your choices and account deletion

You can update profile, wishlist, planning, and shared content within the app. You can delete your account from Settings > Account > Delete Account. If you cannot sign in, contact support for help.

Account deletion removes your WishSync authentication account, profile and stored profile photos, owner-only records, wishlist records and stored wishlist images, and your participation in the shared relationship space. Relationship-scoped Shared Home and Story content and their stored images are removed as part of the relationship cleanup performed by account deletion. Because another person owns their private records, their private notes or gift-planning history may remain after references to your deleted profile or relationship are detached.

Retention

We generally keep account and app content while your account is active. Disconnecting or blocking a partner archives the shared space rather than deleting it. Deleting your account starts the deletion behavior described above. Safety reports, support messages, and limited service-provider logs or backups may remain for a reasonable period for safety, enforcement, support, security, reliability, or legal needs, subject to provider systems and policies.

Security

WishSync uses HTTPS, authenticated access, private storage buckets, database access controls, and server-authorized account deletion. We limit the data sent in crash reports. No service can guarantee absolute security, and beta software may still contain defects.

Children

WishSync is a couples-focused service designed for adults. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to WishSync, contact us so we can review and address it.

Changes to this policy

We may update this policy as WishSync changes. We will post the revised policy here and update the date above. Material changes may also be communicated in the app or by another appropriate method.

Contact

Questions or privacy requests can be sent to support@wish-sync.com. You can also visit the WishSync support page.