Wishlist is a small family app. We keep only what it needs to work, we don't sell anything about you, and we don't show ads or use tracking cookies.
What we keep
- Your account: your email address, and your name and photo from Google or Apple when you first sign in. You can change your name and photo anytime. If Apple hides your email, we get the relay address instead.
- Your wishlist: what you add, including links, notes, prices and photos you upload.
- Gift exchanges: which exchanges you're in, who you invite (their email address), and the gifts you say you'll get and whether you've bought or wrapped them.
- Kids' lists: a name, an optional photo and a wishlist for each child you add. Kids don't sign in; the parents who manage the list do.
- AI helpers: if you connect an assistant (Muse, Claude, ChatGPT), we keep a scrambled copy of your helper key (we can't read it back) and when it was last used.
- Notes and usage: in-app notes (like "they took it off their list") and a log of AI searches (which task, which model, cost) so we can keep costs and limits in check.
Who sees what
People in your gift exchanges see your list. You never see who is getting you what, so surprises stay surprises. Parents of a child see who is getting that child what. People outside your exchanges see nothing.
Services we use
These companies handle data for us, only to run the app:
- Clerk: sign-in with Google and Apple.
- Vercel: hosts the app, and stores uploaded photos (Vercel Blob).
- Neon: our Postgres database.
- Resend: sends invite and notification emails.
- Surplus Intelligence: AI that tidies item titles and finds product links. It gets what you type into the add box, not your name or email.
- Microlink and our own page fetcher: read a store page to fill in a pasted link's title, photo and price. They get the link, nothing about you.
- PostHog: usage counts, like which screens get opened and how many gifts get claimed, so we can tell what's working. It gets your account id, never your email, your list, or what anyone is buying.
Deleting your data
Go to Settings and tap Delete my account. Your account, list, photos, helper key and any kids' lists only you manage are deleted. Gifts you'd said you'd get open up again. Gifts you already bought stay marked as bought, without your name, so nobody buys them twice. Removing an item or a photo also deletes it right away. More detail, and what to do if you can't sign in: Delete your account.
Changes and questions
If this changes, we'll update this page and the date at the top. Questions or requests: hello@wishlist.holiday.