Wish is an app for saving things you'd like to receive and sharing those lists with the people who might buy them for you. This page explains what that takes, in plain words.
1. Who we are
Wish ("we") is run by [FILL: legal entity name, address, tax ID], which decides how your data is used (the data controller). For privacy questions, write to [FILL: privacy email].
2. What we collect and why
Your account
When you first open Wish, the app creates an account for you automatically. It has no name, email or password: it's just a random identifier that keeps your lists yours.
Your first name (optional)
If you add it, we show it on lists you share ("Getting this for Ana?").
Your lists
List names, occasions, the items you save, your notes, and the options you choose (colour, size, storage). We store them so you can see them again and share them.
What you search for
Your search words and your country are sent to our server to find products. We keep search results for 24 hours, by the words searched and without your identity, so the next person searching the same thing doesn't trigger a new paid search.
When you save a product after a search that didn't find it directly, we keep those search words linked to your account, so Wish learns other ways people name that product. They're deleted with your account.
Screenshots, photos and links
When you save something from a screenshot or photo:
- The whole picture stays on your phone. Wish finds the objects in it on your phone, with Apple's on-device tools, and you choose which ones you want.
- Nothing leaves your phone unless you allow identification. Wish asks once, before the first time, and you can switch it off in Profile ("Identify things in photos"). If you say no, your captures are saved as photos only.
- If you allow it, only a crop of each object you chose leaves your phone. Before it leaves, faces and other people inside the crop are blurred, and text from elsewhere in the screenshot (messages, names) is never included.
- Text printed on the product itself (for example a name on a personalised label) is not removed, because it can identify the product.
- The crop is used only to identify the product, by the companies in section 3.
- We delete the crop when you confirm what the product is, or after 24 hours at the latest, whichever comes first.
When you share a link from Safari or paste one, your phone reads the page (its title, product details and pictures). This happens on your phone, from your own connection.
People you share a list with
Anyone with your list's link can see it in a browser and mark an item as taken, so two people don't buy the same thing. You, the owner, never see who is getting what.
- Reserving doesn't need an account. A random undo code is kept in the visitor's browser; we keep only a scrambled (hashed) version of it.
- A visitor can leave their name with a reservation if they want to (up to 40 characters). Only Wish keeps it: the list's owner and other visitors never see it.
- On some lists (an Event Pass or Annual), a visitor can also leave a short note for the owner (up to 280 characters). The owner can read it only after the list's occasion date. The note doesn't say who wrote it unless the visitor chooses to sign it with their name.
- If a visitor marks a gift as bought, we keep that, and when.
- We protect shared pages from abuse by counting visits per visitor. We store a scrambled version of the visitor's internet address, using a key that changes every day, never the address itself.
What everyone wants (Top Products)
Wish shows which products people want most right now, worldwide and in each country. To make these lists, Wish counts, for each product, each country and each day, how many times it was searched for, saved to a list, removed from a list, or confirmed from a screenshot or photo.
- What counts. A search counts only when it names one product (for example "Galaxy S25 Ultra", not "gold chain"), and the words you typed aren't kept for this. Saving a product, removing one wish from a list and confirming which product a screenshot or photo shows also count. Moving or editing a wish counts nothing; deleting a whole list or your account counts nothing either.
- No identity in the counts. The totals hold only the product, the country, the day and the numbers. No account, device, name, internet address or location.
- Country. The region set on your phone, which the app already sends with each search and screenshot (never GPS, never your internet address). If none is known, the count goes only to the worldwide list.
- Counting each person once. So one person counts once per product per day, and one account can't inflate a list, the server keeps, for the current day only, a scrambled code made from your account and the product with a random key that changes every day. At most 60 searched, 40 saved, 40 removed and 20 confirmed products a day count per account. The key and every code are deleted the next day; after that no code can be linked to anyone, including by us.
- Minimum numbers. A product appears only when at least 3 different people acted on it on one same day and it has at least 10 person-days in the last 7 days. The lists show only the order, never the numbers.
- No paid placement. The lists come only from these counts. No brand or store can pay to appear, move or be left out.
What we don't do
- No advertising, no ad identifiers, no tracking across other companies' apps or websites.
- No analytics, crash-reporting or session-recording tools. (Top Products, above, are Wish's own anonymous totals; no third party receives them.) [LAWYER: confirm this wording]
- We don't sell or rent personal data.
3. Who handles data for us
These companies process data on our behalf, only to run Wish.
Supabase
- What it does
- Runs Wish's backend: database, accounts, storage and server functions.
- What it receives
- Everything in section 2 that leaves your phone.
- Where and on what terms
- [LAWYER/FILL: project region; Supabase DPA]
Vercel
- What it does
- Hosts the page people see when they open a shared list.
- What it receives
- Requests from people opening shared links (internet address and browser details, as in any web request).
- Where and on what terms
- [LAWYER: Vercel DPA, log retention]
Anthropic (Claude AI model)
- What it does
- Understands searches and groups results; helps identify products in screenshots; reads which product a chat asks for.
- What it receives
- Search words and product listing titles; for screenshots you allowed, the object crops and the text read on each object; for a chat screenshot you allowed, the text you pick from it, with the contact's name, phone numbers, emails, addresses and links removed first.
- Where and on what terms
- Doesn't train on this data; deletes inputs and outputs after 7 days by default. [LAWYER: DPA; zero-retention option]
SerpApi, which queries Google
- What it does
- Finds products and stores (Google Shopping, and Google Lens for pictures).
- What it receives
- Search words and country; for screenshots you allowed, one object crop per lookup, sent as a link that expires after 2 minutes.
- Where and on what terms
- SerpApi keeps search data for 31 days; how long it keeps uploaded pictures isn't documented. Google's processing of what SerpApi sends is under Google's terms. [LAWYER: SerpApi DPA; whether Google is a processor, a sub-processor or an independent controller here; Google v. SerpApi litigation is ongoing]
OpenAI
- What it does
- Cleans up the picture of an item when you tap “Clean it up” (after you allowed identification). It can also be switched on to tidy product listing titles (no personal data).
- What it receives
- The picture of the item you chose, cut out from its photo, with personal text on it covered; product titles if switched on.
- Where and on what terms
- Keeps abuse-monitoring logs for up to 30 days. [LAWYER: DPA; zero-retention option]
Apple
- What it does
- App Store distribution and purchases, and Sign in with Apple once it's added.
- What it receives
- What Apple's own services need.
- Where and on what terms
- Apple's own terms.
Your phone also loads product pictures directly from where they're hosted, which can be a store's website or Google's image servers, so those servers see your internet address, as with any picture on the web. The shared-list page doesn't do this: it shows only pictures stored by Wish.
International transfers
Several of these companies are in the United States.
4. How long we keep data
| Data | Kept |
|---|---|
| Account, first name, lists, items, notes, options | Until you delete them or your account |
| Reservations on your items (and a giver's optional name and note) | Until the item or list is deleted, or the giver undoes it. A giver's name is erased within 30 days after the gift is marked as bought, within 30 days after the list's occasion date (or one year after the reservation if the list has no date), and with the list or item when it is deleted. A giver's note (and the name it is signed with, if it is) is erased 30 days after the owner can first read it, and with the reservation |
| Screenshot object crops | Until you confirm the product, and 24 hours at most (an hourly job deletes anything older) |
| Capture records (no pixels, no text) | With the account today. [LAWYER: set a period] |
| Learned search words | Until you delete your account |
| Top Products totals (product, country, day and numbers; no identity) | 180 days |
| Daily codes for counting each person once, and the day's key | Until the next day (UTC) |
| Search results (no identity) | 24 hours |
| Daily usage counters (per account, per day) | With the account |
| Scrambled visitor addresses for abuse limits | Counters older than 1 day and keys older than 2 days are removed (cleanup runs from time to time, so a little longer in practice) |
5. Your rights
You can:
- See and change your lists and name in the app at any time.
- Delete any item or list in the app.
- Delete your account in the app. This deletes your account and everything that's yours: profile, lists, items, the reservations on them, capture records, learned search words and the files you sent. Wish's own copies of product pictures stay, because they're catalog pictures shared by everyone, not yours. Top Products totals already counted stay too: they hold no account and can't be traced back to you.
- Ask us for a copy of your data, to correct it, to restrict or object to its use, or to move it to another service, by writing to [FILL: privacy email]. We answer within one month.
- Complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or the authority where you live.
Because the account has no email, we may need you to make the request from inside the app so we know it's your account.
6. Legal basis (GDPR)
| Use | Basis |
|---|---|
| Account, lists, sharing, search, screenshot identification | Performing our contract with you (providing the app you asked for), Art. 6(1)(b) |
| Learned search words to improve matching | Legitimate interest in improving search, Art. 6(1)(f). [LAWYER: balancing test; or treat as contract] |
| Top Products counting (anonymous totals; a one-day scrambled code to count each person once) | Legitimate interest in showing what people want right now, Art. 6(1)(f). [LAWYER: balancing test; whether an opt-out or notice is needed] |
| Abuse limits on shared pages (scrambled addresses) | Legitimate interest in security, Art. 6(1)(f) |
| Other people visible in a screenshot (blurred before it leaves the phone) and personal text on a product | [LAWYER: basis for third parties' data; household exemption for the user; our role] |
We don't make decisions with legal or similarly significant effects by automated means. The AI only suggests which product you saved; you confirm it.
7. Children
Wish is for people 16 and over. The app asks Apple, through Apple's Declared Age Range, only whether you are 16 or over; Apple asks you (or a parent) whether to share that. Wish never asks for your date of birth, never receives or keeps your age range, and remembers on your phone only that the check passed. If you are under 16, or choose not to share, you can't use the app. We don't knowingly collect data from younger children, and we delete it if we learn we have.
8. Security
Data is encrypted in transit. Lists are protected so only their owner can read them; a shared list can be read only through its link, which the owner can turn off or replace. Screenshot crops are kept in a private storage area and passed to the companies above only through links that expire after 2 minutes. Our service keys stay on our servers, never in the app.
9. Changes
We'll update this policy when Wish changes how it uses data, and show the date of the last change at the top. For important changes, we'll tell you in the app.
Questions about your data: [FILL: privacy email]. Anything else: Support.