Privacy Policy

Introduction

Welcome to WishDay ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

By using WishDay, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

Information We Collect

Information You Provide

• Account Information: When you create an account, we collect your email address and name (if you sign in with Google, we receive your Google profile information).
• Occasion Data: Names of people, dates, occasion types, and relationships you add to remember special moments.
• Contact-Derived Data: If you use "Find in Contacts," we read your address book on your device only to help you search by name. We never upload your full contact list. When you confirm adding someone, we store their name, occasion details, an opaque device contact identifier (for de-duplication if you sync again), and their phone number in normalized international format so we can later help you message them on their day (e.g., open a pre-filled chat). You choose who to add — we do not import your entire address book.
• Message Context: Additional context you provide to personalize AI-generated messages (e.g., memories, preferences, tone).
• Preferences: Your notification settings, reminder times, and app preferences.

Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, and timezone.
• Usage Data: How you interact with the app, features used, and time spent.
• Push Notification Tokens: Required to send you reminders (you can disable notifications anytime).
• Advertising Identifiers: On iOS, with your permission via the App Tracking Transparency prompt, we may access the Identifier for Advertisers (IDFA) to measure the effectiveness of our advertising campaigns. On Android, we may use the Google Advertising ID for the same purpose. You can reset or limit these identifiers at any time in your device settings.
• Attribution Data: If you installed WishDay after seeing one of our ads, we receive attribution information (such as the campaign, ad group, and keyword) from advertising networks like Apple Search Ads, Google Ads, and Meta Ads. This helps us understand which ads lead to installs but does not identify you personally.

How We Use Your Information

We use the information we collect to:

• Provide the Service: Store your occasions, send reminders, and generate personalized messages.
• Find People in Contacts: With your permission, read contacts on-device to help you add people by name; store only the details you explicitly confirm for each person.
• Generate AI Messages: Your occasion details and context are sent to our AI service to create personalized messages. This data is processed but not stored by the AI service.
• Send Notifications: Remind you about upcoming occasions at your preferred times.
• Improve the Service: Analyze usage patterns to enhance features and user experience.
• Measure Advertising: Attribute app installs to advertising campaigns we run on platforms like Apple Search Ads, Google Ads, and Meta, so we can understand which ads perform well and spend our marketing budget responsibly.
• Communicate: Send service-related announcements when necessary.

Advertising and Attribution

WishDay runs ads to help new people discover the app. When you install WishDay after tapping one of our ads, advertising networks share aggregated, privacy-preserving attribution signals with us so we know the install came from a specific campaign.

Apple App Tracking Transparency (iOS)

On iOS, Apple's App Tracking Transparency framework gives you explicit control over whether apps can track you across other companies' apps and websites. WishDay will show you the system permission prompt once after you complete onboarding. Your choice is respected throughout the app:

• If you allow tracking: We may use your Identifier for Advertisers (IDFA) to measure the effectiveness of ads you interacted with, including ads from Meta, Google, TikTok, and other networks.
• If you don't allow tracking: We do not access the IDFA. Attribution still works on a privacy-preserving, aggregated basis via Apple's SKAdNetwork and AdServices frameworks, which do not identify you.

You can change your decision at any time in iOS Settings → Privacy & Security → Tracking → WishDay.

Apple Search Ads (AdServices)

If you installed WishDay after tapping an Apple Search Ads ad, Apple shares campaign-level attribution data with us through the AdServices framework. This data is anonymous and does not contain any personally identifiable information.

SKAdNetwork

We use Apple's SKAdNetwork to measure ad performance in a privacy-preserving way on iOS. SKAdNetwork reports install conversions to advertising networks without sharing any personal information or device identifiers. This works even if you decline tracking via App Tracking Transparency.

Google Advertising ID (Android)

On Android, we may use your Google Advertising ID for attribution and analytics. You can reset this identifier or opt out of ads personalization at any time from your device settings (Settings → Google → Ads).

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information, advertising identifiers, or attribution data to third parties.

Third-Party Services

We use the following third-party services to operate WishDay:

Data Storage and Security

• Where: Your data is stored on secure servers provided by Supabase (hosted on AWS).
• Encryption: All data is encrypted in transit (TLS/SSL) and at rest.
• Access: Only you can access your occasion data through your authenticated account.
• Retention: We retain your data as long as your account is active. When you delete your account, your data is removed immediately; residual copies in encrypted backups are purged within 30 days.

Your Rights and Choices

You have the following rights regarding your data:

• Access: View all your data within the app.
• Export: Request a copy of your data by contacting us.
• Delete: Delete individual occasions or your entire account from Settings.
• Notifications: Enable/disable push notifications at any time.
• Advertising Tracking: On iOS, change your tracking permission at any time in Settings → Privacy & Security → Tracking → WishDay. On Android, reset or opt out via Settings → Google → Ads.
• Opt-out: Stop using the service and request account deletion.

For EU/EEA users (GDPR), you also have the right to:

• Request rectification of inaccurate data
• Object to processing
• Request restriction of processing
• Data portability
• Lodge a complaint with a supervisory authority

Children's Privacy

WishDay is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers in compliance with applicable laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the app or sending you a notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected] or through the app's Settings → Help & Support section.