Privacy Policy

What WishSync handles

• Account and authentication data: your email address, authentication identifiers, confirmation and password-reset status, and information returned by Google if you choose Google sign-in. Passwords are handled by Supabase Auth; WishSync does not receive your password in readable form.
• Profile data: information you choose to add, such as your name, nickname, address, hobbies, favorite things, preferences, clothing and jewelry sizes, and notes.
• Relationship data: partner invitations, connection status, membership in a shared space, and relationship settings.
• Wish and planning data: wishlist items, descriptions, prices, priorities, occasions, product links, retailer and item details; shared-home items; important dates; date ideas; and gift plans, budgets, gift history, and planning notes.
• Private data: your personal gift clues, notes about your partner, pending wishlist imports, and gift plans. These records are designed to be visible only to their owner.
• Shared memories and images: story moments, their titles, descriptions and dates, plus images you upload for story moments or wishlist items. The image buckets are not public.
• Support communications: if you email us, we receive your email address and whatever details, attachments, and device or app information you choose to include. Support emails may be processed by Cloudflare Email Routing and Gmail as part of receiving and responding to your request.
• Crash diagnostics: crash reporting in release builds may include a stack trace, app release and environment, operating-system, runtime and device-model context, coarse geography Sentry may derive when it receives a report, and anonymous technical identifiers generated by the crash-reporting platform. These reports are not guaranteed to be fully anonymous. WishSync does not deliberately attach WishSync account identity or user content. Raw IP-address storage is disabled and IP addresses are scrubbed in the configured Sentry project.

How we use data

We use this information to create and secure accounts, connect partners, display profiles and shared spaces, sync wishlists and relationship content, store private planning information, deliver authentication email, provide support, maintain the service, and diagnose crashes.

WishSync does not currently contain advertising or behavioral analytics, and we do not sell personal data.

What your partner can see

When you connect with a partner, that partner can see the profile information you add, your shared wishlist, shared-home items, important dates, date ideas, shared story moments and their images, and other content placed in the shared relationship space.

Your personal gift clues, private notes about your partner, pending imports, and your gift plans—including budgets and private planning notes—are owner-only. Your partner does not receive access merely because you are connected.

If either partner disconnects, WishSync archives and hides the shared relationship space so it can be explicitly restored after a later reconnection or replaced with a fresh space.

Service providers

• Supabase provides WishSync's production database, authentication, private file storage, realtime synchronization, and account-deletion infrastructure.
• Resend is the email delivery provider configured through Supabase for transactional authentication messages such as confirmation and password-reset email. Resend receives the destination address and message and delivery information needed to send those messages.
• Sentry receives the limited crash diagnostics described above when crash reporting is enabled in a release build.
• Cloudflare hosts the public WishSync website, including the Privacy Policy and Support pages. Cloudflare Email Routing forwards mail sent to support@wish-sync.com to our support inbox.
• Google processes authentication when you choose Google sign-in. Gmail currently receives WishSync support mail and is used to respond to support requests. These services operate under Google's own terms and privacy practices.

These providers process information for the services they supply to WishSync. We may also disclose information when required by law or when necessary to protect users, the service, or legal rights.

Your choices and account deletion

You can update profile, wishlist, planning, and shared content within the app. You can delete your account from Settings > Account > Delete Account. If you cannot sign in, contact support for help.

Account deletion removes your WishSync authentication account, your profile, your owner-only records, your wishlist records and stored wishlist images, and the shared relationship space and its stored story images. Because another person owns their private records, their private notes or gift-planning history may remain after references to your deleted profile or relationship are detached.

Retention

We generally keep account and app content while your account is active. Disconnecting a partner archives the shared space rather than deleting it. Deleting your account starts the deletion behavior described above. Support messages and limited service-provider logs or backups may remain for a reasonable period for support, security, reliability, or legal needs, subject to provider systems and policies.

Security

WishSync uses HTTPS, authenticated access, private storage buckets, database access controls, and server-authorized account deletion. We limit the data sent in crash reports. No service can guarantee absolute security, and beta software may still contain defects.

Children

WishSync is a couples-focused service designed for adults. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to WishSync, contact us so we can review and address it.

Changes to this policy

We may update this policy as WishSync changes. We will post the revised policy here and update the date above. Material changes may also be communicated in the app or by another appropriate method.

Contact

Questions or privacy requests can be sent to support@wish-sync.com. You can also visit the WishSync support page.