privacy policy
last updated 30 October 2026
Wishful is operated by Bohdan Tsapenko, a sole proprietor (Individual Entrepreneur) registered in Georgia, the controller of your personal data. Contact: chercheuse.du.feu@gmail.com.
What we collect
- Account: your email address, the name you choose and a profile photo if you add one.
- Your wishes on the free plan: stored only on your device, not on our servers.
- Shared lists: when you share, a copy of the wishes in the list, the sizes and preferences you choose to show and the photos, so others can open the link.
- Premium sync: with Premium, your wishes, lists, settings and photos are stored so they appear on all your devices.
- Reservations: which gifts you reserved from friends’ lists. List owners never see who reserved what.
- Gift helper: the details you write about a person and your budget, sent to generate ideas. The ideas stay on your device; we keep a monthly count of your requests.
- Rough location for “Where to buy it”: your approximate city and country, worked out from your internet connection (not GPS, so no location permission is needed). It’s used only when you search where to buy an item, to show shops near you, and is sent with that search. We don’t store it.
- Payments: handled by Paddle. We receive your subscription status, never your card details.
- Technical logs: such as IP address and errors, kept for a short time for security.
Why we use it
To run your account and the features you use (contract), to keep the service secure (legitimate interest) and to meet legal and tax duties (legal obligation). We don’t sell your data, don’t use it for advertising and don’t share it with brands.
Who processes it for us
- Supabase: database, sign-in and file storage (EU, Frankfurt)
- Vercel and Cloudflare: hosting, and the small servers that read product links and run the gift helper
- Paddle: payments, as Merchant of Record
- Anthropic: the AI model behind the gift helper and the “Where to buy it” search. Requests sent through its API aren’t used to train its models.
- Google: only if you choose to sign in with Google
Some providers may process data outside the EU under standard contractual clauses.
Cookies and storage
We don’t use advertising or tracking cookies. Wishful uses your browser’s storage to keep you signed in and to save your wishes on your device.
How long we keep it
Account data is kept while your account exists. Shared lists are deleted when you stop sharing. When you delete your account we delete your data within 30 days, except what we must keep for tax records.
Your rights
You can ask to access, correct, export or delete your data, or object to how we use it, by emailing chercheuse.du.feu@gmail.com. You can also complain to your local data protection authority.
Children
Wishful isn’t meant for children under 16.