Privacy Policy

Last Updated: May 22, 2026

Welcome to WishApp. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application. WishApp is developed by Satish Ranka, Nagpur, Maharashtra, India.

1. Information We Collect

1.1 Contact Information

WishApp accesses your phone contacts to help you track birthdays and anniversaries. We collect:

• Contact names — to display in the app
• Phone numbers — to identify contacts and enable WhatsApp messaging
• Birthday & anniversary dates — to schedule wishes and reminders
• Contact photos — to display in the app (stored locally only)

1.2 Google Account Data

When you connect your Google account, we access:

• Your Google Contacts (names, phone numbers, birthdays) via Google People API
• Your Google account email (for authentication only)
• Google contact data is processed locally and merged with your phone contacts

1.3 Community Birthday Sharing

When you enable the "Community Sharing" feature (opt-in, OFF by default), WishApp uploads birthday and anniversary dates to our community server to help other WishApp users discover birthdays for their contacts.

• Phone numbers are hashed (SHA-256) before uploading — we never store raw phone numbers on the server
• Only birthday/anniversary dates and hashed phone numbers are stored
• Names and other contact details are NOT uploaded
• You can disable this feature at any time in Settings → Sync

1.4 Auto-Import Birthdays

When you enable "Auto-import birthdays" (opt-in, OFF by default), WishApp periodically checks the community server for birthday data matching your contacts who don't have birthdays:

• Sends hashed phone numbers of contacts without birthdays to the server
• Runs automatically every 12 hours when enabled
• Imports matching birthday/anniversary data silently
• Can be disabled at any time in Settings → Sync

1.5 Encrypted Cloud Backup

When you use the "Cloud Backup" feature, WishApp creates an encrypted backup of your app data:

• All data is encrypted with your personal PIN before upload
• The server stores only the encrypted blob — it cannot read your data
• Your phone number (hashed) is used as the backup identifier
• Only you can decrypt the backup using your PIN
• Backup includes: contacts, birthdays, templates, settings, and sent wishes history

1.6 Contact Modification

WishApp may write birthday data to your phone's native contacts when you add a birthday in the app. This helps keep your phone contacts and WishApp data synchronized. This requires your permission through Android's contact write permission.

2. How We Use Your Information

We use the collected information to:

• Birthday/anniversary reminders — scheduling notifications and wishes
• Card generation — creating birthday/anniversary greeting cards
• WhatsApp messaging — sending wishes via WhatsApp share intent
• Community matching — finding birthdays for contacts without dates (only when opted in)
• Cloud backup — securely backing up your data for recovery
• Contact sync — keeping phone, Google, and app contacts in sync

3. Data Storage & Security

Data Type	Storage Location	Security
Contacts & Settings	Your device (AsyncStorage)	Device-level encryption
Contact Photos	Your device only	Device-level encryption
Community Birthdays	Server (share.wishapp.co.in)	Phone numbers hashed (SHA-256)
Cloud Backup	Server (share.wishapp.co.in)	PIN-encrypted (end-to-end)
Google OAuth Token	Your device only	Device-level encryption

All communication between the app and our server uses HTTPS/TLS encryption.

4. Data Sharing

We do NOT:

• Sell your personal data to any third party
• Share your data with advertisers
• Use your data for targeted advertising
• Transfer your data to third-party analytics services
• Access your encrypted backup data

We DO share limited data in these cases:

• Community birthday matching — hashed phone numbers and birthday dates are shared with the community server (only when opted in by you)
• WhatsApp — when you send a wish, the message content is passed to WhatsApp via share intent
• Google People API — OAuth token for contact sync (only when you sign in with Google)

5. Third-Party Services

WishApp uses the following third-party services:

• Google People API: For syncing contacts (opt-in)
• WhatsApp: For sending wishes via share intent
• Expo: For app notifications and build framework
• Google Play Store: For app distribution and updates

WishApp does not use any advertising SDKs, analytics tracking tools, crash reporting services, or third-party data brokers.

6. Permissions Used

Permission	Purpose	Required?
Contacts (Read & Write)	Read contacts for birthday tracking. Write birthdays back to phone contacts.	Required
Notifications	Send birthday and anniversary reminders	Required
Internet	Community sync, cloud backup, Google sign-in	Required
Camera / Photos	Upload sender photo for greeting cards	Optional
Accessibility Service	Auto-send wishes via WhatsApp (optional feature)	Optional

7. Your Rights & Controls

You have full control over your data:

• Community Sharing — toggle ON/OFF in Settings → Sync
• Auto-import Birthdays — toggle ON/OFF in Settings → Sync
• Cloud Backup — create or delete in Settings → Cloud Backup
• Google Sync — disconnect at any time in Settings → Sync
• Contact Write — controlled by Android permission (revoke anytime)
• Delete all local data — clear app data from Android Settings
• Request server data deletion — email us (see contact details below)

8. Data Retention

• Local data — stored on your device until you uninstall the app or clear app data
• Community birthdays — stored on our server until you request deletion
• Cloud backup — stored on our server until you delete it from the app or request deletion
• Google sync data — processed locally; tokens stored on device only

9. Children's Privacy

WishApp is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us to have it removed.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last Updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.