Wishsy
Privacy Policy
Last updated 8 August 2026
The short version. Wishsy stores your wishlists and the products on them so they follow you between devices and so the people you share a list with can see it. Product links you save are sent to our price service so we can fetch the price and keep checking it. If you tell the app which bank cards you hold, so it can show you what a product costs on yours, that stays on your phone and is never sent to us. There are no ads, no advertising identifiers, and no analytics or tracking SDKs in the app.
Who we are
Wishsy is operated by IndicBytes. If you want to reach a human about anything on this page, email support@wishsy.app.
What we collect
| What | Why |
|---|---|
| Account details — your email address, and the display name and profile photo supplied by Google or Apple if you sign in that way | To create your account, keep your lists across devices, and show other members of a shared list who you are |
| Your wishlists and saved products — list names, product links, and the title, image, price, price history and rating we fetch for each | This is the service. Without it there is nothing to show you |
| Price alerts — the target price you set per product | So we can tell you when a price goes below it |
| Messages and reactions in a shared list's chat | To deliver them to the other members of that list |
| A device notification token | To send a push when a price drops. Deleted when you sign out |
We do not collect your contacts, your location, your photos, your browsing history, or any advertising identifier. The app contains no advertising SDK and no analytics SDK.
Cards you tell us about stay on your phone
Products often carry bank offers — "10% off with an HDFC credit card" and the like. So the app can tell you what a product costs on your card, you can record which banks you hold. Two things about that:
- We only ever ask for the bank and the type — "HDFC credit card". Never a card number, never the last four digits, never an expiry. Nothing recorded here could be used to charge anything.
- It never leaves your device. This list is stored on the phone itself and is not sent to us, not stored on our servers, and not included in a backup we hold. The matching happens on the phone.
Because of that, the list doesn't follow you to another device, and it is gone if you reinstall the app — you'd add your banks again. That is the trade we chose: a list of which banks you use is worth something to an advertiser or an attacker and nothing to us, so the safest place for it is somewhere we cannot reach. You can clear it any time from Profile → Your cards.
The offers themselves are read from the retailer's own product page, the same way prices are. They are a property of the product, not of you, and are the same for everyone looking at it.
Who your data goes to
Google Firebase
Sign-in, the database that holds your lists, and push notifications all run on Google Firebase. Your account details, lists, products, alerts and messages are stored there. See Firebase's privacy documentation.
Our price service
When you save a product, the product link is sent to our own price-checking service, which fetches the title, image, price and price history and then rechecks that price on a schedule. It receives the link and the product data — not your name, email or list contents.
Review summaries
If you ask for a summary of a product's reviews, the product link is sent to a large-language-model service which reads the public reviews on that page and returns a short list of pros and cons. This only happens for products where you or another member of the list requests it, or where our backfill job fills in a product that has none.
Other people
If you share a wishlist, everyone you invite can see that list, the products on it, and your display name and profile photo. Anything you type into a list's chat is visible to every member of that list. Removing someone from a list removes their access.
We do not sell your data, and we do not share it with advertisers or data brokers.
How long we keep it
Your lists and products stay until you delete them or delete your account. Invite codes expire after seven days. Notification tokens are removed when you sign out of a device.
Deleting your data
You can delete individual products and lists in the app at any time. To delete your account and everything attached to it, email support@wishsy.app from the address you signed up with and we will remove it.
Note that a message you sent into a shared list's chat, and products you added to a list somebody else owns, may remain visible to that list's members after your account is gone.
Children
Wishsy is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us data, email us and we will delete it.
Security
Access to your lists is enforced by server-side security rules: a list is readable only by its owner and the people invited to it. No system is perfect, and we don't claim otherwise — but we never hold payment details. Wishsy Pro is billed by the App Store or Google Play, so your card details go to them and never reach us. All we ever receive is whether your subscription is currently active.
Your rights
Depending on where you live you may have the right to access, correct, export or delete the data we hold about you, and to object to our processing it. Email us and we will action it.
Changes
If this policy changes materially we will update the date at the top and, where the change is significant, say so in the app.