Draft template. This must be reviewed and completed before App Store submission.

Privacy Policy

Last updated: [DATE]. Controller: [COMPANY LEGAL NAME, ADDRESS].

What we collect

• Account: your Apple ID user identifier and, if you share it, your name (via Sign in with Apple).
• Phone number, if you choose to add it, so wishes sent to that number can reach you.
• Wishes: recipient phone number or account, intention text, chosen cause, timestamps.
• Push token, to notify you when a wish arrives.
• Purchases are processed by Apple; we receive transaction identifiers, never card details.

Contacts

WISHOM uses the system contact picker. We never upload your address book, only the one number you pick.

Processors

Supabase (database and authentication), Google Firebase Cloud Messaging (push notifications), Cloudflare (web claim pages), Apple (payments).

Retention and deletion

You can delete your account in the app (Profile → Delete Account). [STATE retention for charity-allocation accounting records, which contain no personal data.]

Your rights

[GDPR / CCPA rights and contact details.]