Privacy Policy

1. Who we are

myWishbook is a shared wishlist app. You make lists of things you want, share them with a group of people, and they can mark items as taken without you finding out.

myWishbook is operated by Dallas Smith in Alberta, Canada.

Contact: support@mywishbook.app

2. What we collect

Everything in this list is something you type, choose, or do in the app. There is no hidden collection.

Your account

• Email address. Required to sign up. It is held by our authentication provider (Supabase) and is used to sign you in, confirm your address, reset your password, and send you the app emails described in section 5.
• Password. Stored only as a cryptographic hash by Supabase. We never see or store the password itself.
• Display name and a unique @handle. Required. Other people find and invite you by handle.
• Country. Optional, and free text that you type. We do not detect it, and we do not use location services.
• Profile photo. Optional, and only if you pick one.

What you put in the app

• Lists — the name, and an optional list image.
• Items — name, description, a link, the price you typed, size, where to buy it, and an optional photo. All of it is free text you write yourself.
• Groups — the group name, an optional group image, who is in it, and each member's role.
• Invitations you send. If you invite someone by email who does not have a myWishbook account, we store the email address you typed so the invitation can be sent and later claimed.
• Items you mark as taken. We store which item, when, and that it was you. See section 4 — this is the most carefully protected data in the app.
• Messages the app generates for you, such as "an item you claimed was removed".

Records we keep about the account itself

• The date and version of the Terms of Use and Privacy Policy you accepted at sign-up.
• Your plan (free or Premium) and, if Premium, when the term ends.
• A log of subscription events received from RevenueCat: the event type, the product, the dates, and RevenueCat's own identifiers.
• A log of emails we tried to send you: the address, which kind of email, and whether it succeeded or failed.

About photos. Photos are only ever chosen from your device's photo library. The app never opens the camera. A photo is uploaded exactly as it is stored on your device, which means any information the photo file itself carries — for example the date, camera model, or GPS coordinates a camera may have written into it — is uploaded with it. We do not read that information, but we do not strip it either.

3. What we do not collect

We do not collect or use the following:

• No analytics. No Google Analytics, no Firebase, no product analytics of any kind.
• No crash or error reporting. Errors are printed to the developer console in development builds only. Nothing is sent anywhere.
• No advertising, no ad networks, no advertising identifiers, and no tracking across other apps or websites.
• No location data. No GPS, no IP-based location lookup.
• No contacts or address book access.
• No camera, microphone, phone number, date of birth, or health data.
• No payment card details. If you subscribe, payment is handled by the app store through which you purchase Premium. We never see your card, and we do not receive your billing address.

4. Who can see what

This is the part of the app worth reading twice. The rules below are enforced in the database itself, not just hidden in the app's screens — so they hold even for someone using the app in an unusual way.

Your email address. No other user can see it, ever. It is not on your profile and there is no way to look someone up by email.

Your basic profile — display name, @handle, profile photo and country — can be seen by any signed-in myWishbook user, not only people in your groups. This is what makes "invite by @handle" work. Nothing else about you is visible this way, and a signed-out visitor sees nothing at all.

Your lists and items are visible to the members of the groups you choose to link them into, and to nobody else. Within a group, a member's role decides what they see:

• Admin and Member can see other members' lists and mark items as taken.
• Youth can keep their own list but cannot see or take items from anyone else's list. This role exists so a child can take part without spoiling the surprise.
• External can only see the specific lists the group's owner or an admin chose for them.

Who bought what — the part we protect hardest.

• A list owner can never see whether their own items have been taken, or by whom. Not in the app, not by refreshing, not by asking the server directly. The record simply is not readable to them.
• Other members of the group can see that an item has been taken, but never by whom. They get a yes or no, with no name attached.
• Only you can see the list of things you have taken (your Shopping Bag).

The only people who can technically match a purchase to a person are whoever administers the database — the same as with any hosted service. No user can, and the app has no screen that would show it.

Group names, group images, and who else is in a group are visible to the other members of that group.

5. Emails we send you

There are two kinds, and both are described exactly:

Account emails, sent by our authentication provider (Supabase) when you sign up, confirm your address, reset your password, or change your email. They contain your email address and a one-time link.

App emails, sent through Resend (opens in a new tab) from noreply@mywishbook.app. There are exactly three:

We do not send marketing email, newsletters, or promotions. There is no mailing list.

6. Who else receives your data

The following companies provide services for myWishbook. We do not sell data, and we do not share it for advertising.

Supabase serves its traffic through Cloudflare's network, so requests pass through Cloudflare on the way to the database.

7. Where your data is stored

myWishbook is operated from Alberta, Canada. The database, file storage and authentication run on Supabase, hosted on Amazon Web Services in the US East (Ohio) region — us-east-2, in the United States. Resend and RevenueCat are also US companies.

Relevant information is stored and processed in the United States regardless of where you live. It may be subject to the laws of the jurisdiction where it is processed and may be accessible to US authorities under US law.

8. How we protect it

• All traffic between the app and our servers uses HTTPS/TLS. Plain http requests are redirected to https, and the server sends HSTS, which tells browsers never to try http again. This was verified, not assumed.
• Passwords are hashed by Supabase. Nobody, including us, can read them.
• Uploaded images live in a private storage bucket. They are not on the public internet and have no public URL; the app fetches them through short-lived signed links. Any signed-in myWishbook user who knew the exact internal path of a file could request it, but the paths contain random identifiers and are not listable or guessable.
• Every database table has row-level security switched on, which is how the visibility rules in section 4 are enforced rather than merely displayed.

No system is perfectly secure, and we cannot promise it is.

9. How long we keep it

myWishbook does not automatically delete accounts merely because they are inactive. Account information is generally retained until you delete your account, myWishbook deletes or suspends it under the Terms of Use, or retention is otherwise required or permitted for a documented legitimate reason.

Operational email-delivery and subscription-event logs are retained for up to 12 months, unless a longer period is reasonably required for legal obligations, accounting/financial recordkeeping, fraud/security investigation, or dispute resolution.

Expired invitations are cleaned up nightly.

10. Deleting your account

You can delete your account yourself, from Profile → Delete my account. You have to type the word DELETE to confirm. It cannot be undone, and we cannot restore it.

What is erased

• Your account and sign-in record, including your email address and password hash.
• Your profile: display name, handle, country, and the record of which policy versions you accepted.
• Your lists and every item on them, including the photos' database records.
• Images uploaded by you and associated with your account are deleted as part of the account-deletion process.
• Any group you own is deleted for every member of it. The other members lose the group. Anything they had marked as taken inside it is released, unless the same list is also shared into another group they are still in — in which case their claim is left alone.
• Your membership of other people's groups, and any of your lists shared into them are unlinked.

What survives

• Items you had marked as taken in other people's groups stay marked as taken, but with your identity removed. The record is stripped of any link to you. This is deliberate: it stops your departure from telling a list owner what was bought for them, which is the whole point of section 4.
• Content other people created stays theirs. Their lists, items and groups are unaffected, apart from groups you owned.
• Operational log rows may remain, with any link to your account removed: the email delivery log and the subscription event log both keep the row and drop the account reference.

Cancelling your subscription is separate. Cancel through the app store where you purchased Premium. Deleting your account does not cancel your subscription or refund it. Cancel first.

If you cannot access the app to delete your account, email support@mywishbook.app to request deletion. We may verify that you control or are otherwise authorized to act for the account before processing the request.

We aim to handle verified deletion requests within 30 days, unless additional verification is reasonably required, applicable law requires or permits a different period, or exceptional circumstances reasonably prevent completion in that period.

You can also find these instructions on our Account & Data Deletion page.

11. Your choices

You can change your display name, handle, country and photo at any time in Profile → Edit profile, change your email address and password there, and delete your account as described above.

You may contact support@mywishbook.app to request access to or a copy of information associated with your account, correction of information, deletion assistance, or answers to privacy questions. These requests may initially be handled manually.

12. Children

You must be at least 13 to create a myWishbook account. myWishbook is not designed for or aimed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact us and we will delete it.

myWishbook has a Youth role for use inside a family group. It is meant for a younger family member who keeps their own wishlist but is deliberately prevented from seeing anyone else's, so they cannot spoil their own surprise. A Youth account is still an account, and it must be created and supervised by a parent or guardian who is satisfied their child is old enough to use it.

We do not ask for a date of birth, and we do not verify age.

13. Changes to this policy

If we change this policy in a way that matters, we publish the new version and increase its version number. The app keeps a record of which version you accepted when you signed up.

If we make a material change to this Privacy Policy, we may provide additional notice or ask users to acknowledge or accept the updated policy where appropriate. Minor or administrative changes may be published without requiring renewed acceptance.

14. Contact

support@mywishbook.app. We aim to reply within 30 days.