Privacy Policy

1. Data Controller

The data controller responsible for processing the personal data collected through the Application is the development team of WishSpread. If you have any questions, claims, or requests regarding the management of your privacy, you can contact our technical support directly via email: support@wishspread.com.

2. Information We Collect

To ensure proper operation, platform stability, and real-time synchronization of your wishlists, WishSpread collects the following data:

• Registration & Authentication Data: Email address, security hashed password, and/or encrypted access tokens from third-party providers (such as Google Sign-In or Apple ID) when creating your account.
• Optional Profile Information: Display name or alias, and a profile picture uploaded voluntarily by the user.
• Wishlist & Event Data: All information generated when using the app, such as created wishlists, event dates and descriptions, saved product links (including images, names, and prices extracted automatically via our scraper), and logs of gift reservations made on third-party lists.
• Automated Technical Information: IP address, mobile device hardware model, operating system version (Android/iOS), and unique device advertising identifiers.
• Diagnostic Logs: Technical error reports (crash logs) managed automatically to audit system performance and software stability.

3. How We Use Your Information

The collected data is processed strictly under the following legitimate purposes:

• To provide and maintain the core features of WishSpread, including extracting product metadata from links and managing the gift reservation system.
• To ensure that the hidden reservation system works correctly (making sure the list creator does not see the gifts reserved by their guests to maintain the surprise).
• To ensure instant synchronization and availability of your lists across multiple devices via our cloud infrastructure.
• To monitor, diagnose, and resolve technical bugs, optimizing the fluid performance of our KMP (Kotlin Multiplatform) interface.
• To display advertisements and manage affiliate links (e.g., Amazon Associates) that support the financial viability of the application.

4. Third-Party Service Providers & Cloud Infrastructure

We delegate technical storage and processing to mature infrastructure platforms, which act as data processors under strict confidentiality terms:

International Transfers: Given that Google's servers are primarily located in the US, data transfer is carried out under the Data Privacy Framework and Standard Contractual Clauses approved by the European Commission, guaranteeing a level of protection equivalent to the European standard.

*All these providers comply with industry-standard encryption practices (encryption in transit via TLS/HTTPS and encryption at rest using AES-256 algorithms).*

6. User Rights and Control

You have the right to fully control your personal data. In addition to the rights of access, rectification, and erasure, you may:

• Manage your Consent: Revoke or modify your preferences regarding personalized ads and technical tracking at any time via the "Privacy Settings" button in your Profile.
• Portability: Request a copy of your data in an electronic format.

7. Children's Privacy

WishSpread does not knowingly collect information from children under 16 years of age. If we become aware that we have collected data from a child without verifiable parental consent, we will take steps to remove that information from our servers immediately.