Privacy Policy

FindMyWish is operated by Wiztrom. This policy explains how FindMyWish collects, uses, shares, and deletes data when you use the FindMyWish mobile app, website, and related backend services.

Contact: support@findmywish.com

Use of FindMyWish is also governed by the FindMyWish Terms of Service.

Data We Collect

Depending on how you use the app, we may collect:

• Account data, such as your Firebase account identifier, email address, display name, profile photo URL, sign-in provider, and account settings.
• Content you create or save, such as wishes, lists, tasks, habits, collections, tags, notes, URLs, product details, reminders, completion history, and attachments.
• Images and attachment metadata when you upload images to your lists or saved items.
• Device, app, and request metadata, such as app version, platform, device model, operating system version, locale, timezone, IP address, user agent, and network/request diagnostics.
• Analytics and diagnostics, such as app interactions, screens viewed, feature usage, crash reports, performance traces, session metadata, and strictly masked session replay data.
• Notification and reminder settings, such as whether reminders are enabled, the reminder times you configure, and whether reminder details should be hidden on your device's lock screen.
• Authentication and security data used to sign you in, prevent abuse, rate-limit requests, protect accounts, and operate sync.

Voice Features

Voice command features are not currently available in the production app release on Google Play or the Apple App Store. While voice is disabled, the production app should not request microphone access or upload audio. If voice features are enabled in a later release, we may collect voice audio, transcripts, detected language, command processing results, locale, timezone, device metadata, and related diagnostics to provide and improve voice commands.

If voice is enabled, voice data may be processed by speech-to-text and language model providers, including Deepgram, Sarvam, DeepInfra, and OpenRouter, depending on routing and availability. De-identified voice transcripts, command plans, and processing results may be used internally for quality evaluation and model/provider assessment. We do not describe this data as anonymous because audio and transcripts can contain personal information.

How We Use Data

• To provide account sign-in, cloud sync, saved wishes, lists, tasks, habits, reminders, attachments, and app settings.
• To fetch metadata for URLs you save and improve item details.
• To operate analytics, diagnostics, debugging, reliability monitoring, abuse prevention, rate limiting, and security.
• To communicate with you about account, support, security, and service-related matters.
• To evaluate and improve app quality, including internal analysis of de-identified data where appropriate.

Processors and Third Parties

We use service providers and processors to operate FindMyWish. They may receive data as needed to provide their services:

• Firebase and Google services for authentication, Google Sign-In, app infrastructure, and related security services.
• Sentry for crash reporting, performance monitoring, and backend/frontend diagnostics.
• PostHog for product analytics and strictly masked session replay.
• Cloudflare R2 for attachment, image, and object storage.
• Deepgram, Sarvam, DeepInfra, and OpenRouter for voice transcription, voice command processing, and language model routing if voice features are enabled.
• ScrapingAnt, Scrapfly, Serper, and similar providers for URL metadata, page retrieval, search, and enrichment services.
• Hosting, database, cache, observability, and infrastructure providers used to run the backend.

Payment providers are not active in the current release. If paid features are launched later, this policy and the app store data disclosures will be updated before payment processing is enabled.

Session Replay and Analytics

FindMyWish asks for your analytics and diagnostics choice before starting client telemetry. The default choice is on, but Sentry and PostHog client SDKs do not start until you continue from that prompt. You can turn analytics and diagnostics off later from Profile > Analytics & diagnostics.

When enabled, analytics help us understand app reliability and feature usage. Session replay may be enabled with strict masking so text and images are masked before analytics review. Analytics events should not intentionally include saved item content, emails, names, URLs, transcripts, audio, tokens, secrets, or request bodies.

Data Sharing

We do not sell personal data. We share data with processors and service providers only as needed to operate, secure, analyze, debug, and improve FindMyWish, comply with law, respond to legal requests, protect rights and safety, or complete a business transfer if applicable.

Security

Production app traffic is transmitted over HTTPS/TLS. We use access controls, provider privacy settings, telemetry scrubbing, backup exclusions for local app data where supported, and operational safeguards to reduce unnecessary exposure of user data.

Retention

• Account and content data is retained while your account is active.
• After account deletion, associated account data is deleted or anonymized within 30 days, except where retention is needed for security, fraud prevention, legal compliance, dispute handling, or audit records.
• Backup copies may persist until normal backup rotation completes, up to 90 days.
• Security, abuse-prevention, and audit logs may be retained for up to 24 months where needed.
• Minimal deletion request records may be retained for up to 3 years to show that a deletion request was handled.
• If payments are introduced later, billing, tax, and transaction records may be retained as required by applicable law.

Your Choices and Rights

• You can edit profile and notification settings in the app.
• You can turn client analytics, diagnostics, and masked session replay on or off in Profile > Analytics & diagnostics.
• Reminder notifications may show user-created titles or reminder text on your device unless you enable the in-app lock-screen privacy setting. On Android, the setting asks the OS to conceal lock-screen content; on iOS, reminder notifications use generic text while the setting is enabled.
• You can delete your account in the app from Profile > Delete Account.
• You can request account deletion from the web at findmywish.com/account-deletion.
• Account deletion deletes or anonymizes app account/content data. Deletion requests for Sentry and PostHog analytics or diagnostics records are handled manually through vendor tooling where supported until an automated vendor deletion pipeline is added.
• You can contact us at support@findmywish.com to request access, correction, deletion, or help with privacy questions.

Children

FindMyWish is not intended for children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child provided personal data, contact us so we can take appropriate action.

Changes

We may update this policy as FindMyWish changes. We will update the date above and, when required, provide additional notice in the app or through the app store.