WishMap — Privacy Policy

Last updated: 18 June 2026

WishMap (“we”, “the app”) is a living map of hopes where people release anonymous wishes as stars and send each other hope. We are built to be private by default. This policy explains what we collect, why, and your choices.

1. No account required

You can use WishMap without signing up. On first launch the app creates an anonymous identity (a random device identifier) so your wishes and the hope they gather stay with you on this device. You may optionally add an email + password later so your wishes survive a device change — this is the only time we store an email, and only if you choose to.

2. What we collect

• Wishes you send: the wish text, category, your country and an approximate (city-level) location derived from your IP address, and the star style. Wishes are public and shown anonymously to others.
• Engagement: the hope, support messages, follows and gifts you send or receive (counts and the related wish).
• Anonymous device ID: a random identifier stored on your device for hope de-duplication and notifications. It is not linked to your real identity.
• Optional email: only if you create an account.
• Push subscription: if you enable notifications, the token needed to deliver them.
• Abuse prevention: your IP address is hashed (one-way) to enforce a daily wish limit. We do not store your raw IP.
• Purchases: handled by Apple / Google. We receive only a receipt to unlock your purchase; we never see your card details.

3. What we do NOT collect

We do not collect your name, contacts, photos, precise GPS location, or advertising identifiers. We do not sell your data. We do not build advertising profiles.

4. How we use your data

To run the app: show wishes on the globe, count and deliver hope and support, send notifications you opt into, moderate content, translate wishes into your language, prevent spam, and process purchases.

5. Service providers

We share the minimum necessary with providers that operate the service:

• Supabase — database, authentication and hosting.
• Groq — AI content moderation, translation and encouragement (wish text is processed to provide these features).
• Vercel — web hosting.
• ipapi — approximate location from IP, to place your star.
• Apple / Google — in-app purchases and push delivery.

6. Content moderation

Wishes are automatically screened for hateful, harassing, sexual, or personal-data content before they appear. Users can report wishes; we may hide content that violates our rules.

7. Your choices & rights

• Delete your account & data: in the app, open Profile → “Delete account”. This removes your account; released wishes become fully anonymous.
• Notifications: turn them on or off any time from the app.
• Access / deletion requests: email us (below).

8. Children

WishMap is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect data from children.

9. Data retention

Wishes remain part of the public sky unless removed. Hashed rate-limit records are short-lived. If you delete your account, associated personal identifiers are removed.

10. Changes

We may update this policy; the “last updated” date will change accordingly.

11. Contact

Questions or requests: azadbilek34@gmail.com