Your wishlist is nobody’s business.

Who we are

WishNap is made by Wissam Elmasry, an individual trading as WishNap, not a company (“we”, “us”). This policy covers the WishNap app for iPhone, including its Share sheet extension, widgets, Live Activity and the quiet-hours screens it shows through Apple’s Screen Time, and this website. Where privacy law talks about a “controller”, that’s us, for the small amount of personal data described below that we actually handle.

Questions about any of it: support@wishnap.com.

No account

There’s nothing to sign up for. WishNap has no accounts and no logins, and it never asks for your name, email address or phone number. It doesn’t connect to a bank or a card, and it doesn’t look at purchases you make anywhere else. It only knows what you share with it, one wish at a time.

What WishNap keeps

Everything here is stored on your iPhone. The first four are also copied to your own iCloud, if you use iCloud (next section).

Deleting one item

When you delete a single item, it disappears from your list, but WishNap keeps a record of it marked as deleted, with everything you saved about it (name, link, price, note and feeling), on your iPhone, in WishNap’s own backup, in your iCloud copy if you use iCloud, and in exports. Its photo, if it had one, also stays on this iPhone. Your decisions are kept as a history and aren’t deleted one at a time. To erase all of it, use Delete all data (see Export and delete).

Your iCloud copy

If you’re signed in to iCloud and iCloud is allowed for WishNap, the app keeps a copy of your data in your private iCloud database, in WishNap’s own iCloud container. That’s how your things come back on a new iPhone signed in with the same Apple ID. The copy includes the first four things in the list above, and none of the ones marked “This iPhone only”.

• It’s stored by Apple in your iCloud account, under your agreement with Apple and Apple’s privacy policy. We have no access to it. There’s no server of ours, and WishNap doesn’t use any shared or public iCloud database.
• Apple’s iCloud security protects it. WishNap doesn’t add encryption of its own on top, so we don’t describe it as end-to-end encrypted.
• There’s no iCloud switch inside WishNap. To keep WishNap on this iPhone only, turn iCloud off for WishNap in the Settings app on your iPhone: tap your name, then iCloud, then Show All (or See All) under the apps using iCloud, and turn off WishNap. When you do, iOS may clear WishNap’s synced data from this iPhone; WishNap then offers to bring it back from its own backup. What’s already in your iCloud stays there until you delete it (see Export and delete). In WishNap, Settings › Your data › iCloud shows whether iCloud is in use.
• To keep devices in step, Apple delivers silent sync notices to your iPhone. They come from Apple’s iCloud service, not from us.

What leaves your phone

Apart from your own iCloud copy, these are the only things that leave your iPhone. None of them sends us the names, links, prices or notes of what you park.

No usage statistics. WishNap doesn’t collect usage statistics or analytics. The app contains a usage-statistics library, TelemetryDeck, but it’s switched off in this version and sends nothing. We won’t turn it on without first updating this policy and adding a switch in the app to turn it off.

RevenueCat works on our behalf, as our processor (service provider). Its data processing terms with us let it use this data only to provide its service to us, and require it to protect the data at least as well as this policy describes. Apple handles iCloud and App Store data under its own privacy policy.

1. Subscriptions (Apple and RevenueCat)

WishNap Pro is bought through the App Store. Apple handles the payment, your Apple ID and your billing details under its own privacy policy. We never see them.

To know whether WishNap Pro is active, WishNap uses RevenueCat, a subscription service. Each time you open WishNap, whether or not you subscribe, RevenueCat’s software in the app checks your subscription with RevenueCat’s servers. They receive:

• a random ID RevenueCat creates for your install;
• the identifier iOS gives our apps on your iPhone (Apple’s “identifier for vendor”, which changes if you delete all of our apps; it isn’t the advertising identifier);
• if you subscribe, the App Store purchase and transaction details for your WishNap plan;
• technical details: the app version, iOS version, iPhone model, up to three of your preferred languages, your App Store country, whether a purchase is a test, and a note that WishNap has no permission to track you.

Like any server, RevenueCat’s sees the IP address a request comes from. None of this is connected to your name, email address or Apple ID, and none of it is used to track you or for advertising. WishNap gives RevenueCat nothing else about you. RevenueCat keeps a record for each install on our behalf (see How long things are kept). We can find a record from the Order ID on your App Store receipt, and otherwise can’t tell whose it is (see Your rights). Your subscription status is also kept on your iPhone, so WishNap works offline. See RevenueCat’s privacy policy.

2. Product photos (the shop’s website)

When the page you share names a product photo, your iPhone downloads that photo directly from the address the shop gives for it (often the shop’s image server). It’s a plain request: no cookies, no saved logins, and nothing about you or your list. As with any download, that server sees your iPhone’s IP address, your language setting and the standard details iOS sends with any app’s request, such as the app’s name and the iOS version. The photo is shrunk and stored on your iPhone and is never uploaded by WishNap. If you share a photo instead of a page, nothing is downloaded.

Reading the page happens on your iPhone. From Safari, WishNap reads only the page’s address, its title, the product details shops publish for search engines and link previews (such as name, price and photo), and the address of the first large picture, never the whole page. Before a link is saved, WishNap removes common tracking tags from it (such as utm_ and fbclid).

3. Apple’s own services

Some features run on Apple’s systems, under Apple’s privacy policy: iCloud (above), the App Store, and Screen Time for quiet hours. WishNap’s notifications and Live Activity are made on your iPhone; there’s no server of ours sending them. Tapping Open link opens the shop’s page in your browser, where the shop sees your visit like any other.

Quiet hours (part of WishNap Pro) use Screen Time to rest the shopping apps and websites you choose during the hours you set. The pause screen you see over them, and what happens when you tap its buttons, are handled on your iPhone. Nothing about which apps you open, or when you get through, is sent to us.

WishNap has no crash reporter of its own. If you’ve turned on Share With App Developers (on your iPhone, in Settings › Privacy & Security › Analytics & Improvements), Apple may share crash reports and usage statistics with us in a form that doesn’t identify you.

What we never do

• No ads, and no advertising software in the app.
• No tracking across other companies’ apps or websites. WishNap never asks for permission to track you, because it doesn’t.
• We don’t sell data, and we don’t share it for advertising.
• No bank or card connections.
• No access to your contacts, location, camera or photo library. To add a photo yourself, you pick it with Apple’s photo picker, which hands WishNap only the photo you choose.

WishNap asks for two permissions at most: notifications, once you’ve parked something (it explains why first, and you can say Not now) or when you tap Notifications in WishNap’s Settings, and Screen Time, only if you set up quiet hours.

On your Lock Screen

Notifications, widgets and the Live Activity can show an item’s name and price, your “not spent” total or your goal on your Lock Screen, where anyone holding your phone can read them. During quiet hours, the pause screen over shopping apps can also show your savings and your goal. iOS lets you hide notification previews, and you can remove widgets, turn off Live Activities, or turn off Show my savings on the pause screen at any time.

How long things are kept

• Your data on your iPhone and in your iCloud: until you delete it. We can’t delete it for you, and we can’t recover it, because we don’t have it.
• A single deleted item: kept as a deleted record until you use Delete all data (see Deleting one item).
• Uninstalling WishNap removes its data from your iPhone, but not your iCloud copy. To remove that too, use Delete all data while you’re online and iCloud is on for WishNap, then keep WishNap open for a minute so the deletion reaches iCloud before you uninstall. Or reinstall WishNap later with the same Apple ID, let your things come back, and use Delete all data then.
• Subscription records: Apple keeps its own under its privacy policy. RevenueCat keeps a record for each install that has opened WishNap, on our behalf, until we delete it or stop using RevenueCat. Ask us and we’ll delete yours (see Your rights).
• This website’s server logs are kept by Vercel, which hosts it, as Vercel’s privacy notice describes.
• Emails to support are kept only as long as they’re useful for helping you. We don’t add you to any mailing list.

Export and delete

Everything is in your hands, in WishNap’s Settings:

• Settings › Account › Export history makes one file (JSON) with everything that syncs: your items, including deleted ones, your decisions, goals, settings, quiet-hours schedule and setup answers. Photos and the apps you chose for quiet hours aren’t included. You choose where to save it, and WishNap removes its temporary copy when you’re done.
• Settings › Your data › Import a copy brings an export back. It merges with what’s there and never overwrites anything newer.
• Settings › Your data › Delete all data asks twice, then erases everything you’ve parked, every decision, your goals and your settings from this iPhone. It also removes WishNap’s own backup, product photos and the apps you chose for quiet hours from this iPhone. It can’t be undone. Your subscription isn’t affected, because it belongs to your Apple ID, and neither is RevenueCat’s record of it (see Your rights to have it deleted). Exports you saved stay wherever you put them, and copies inside backups of your iPhone follow those backups.

While iCloud is on for WishNap, the deletion also reaches your iCloud copy and, from there, your other devices, which then delete their own WishNap backup. Photos and quiet-hours app choices on another device stay there until you use Delete all data on that device or uninstall WishNap from it. If iCloud is off for WishNap when you delete, your iCloud copy isn’t touched: to delete it too, turn iCloud back on for WishNap, wait until your things are back in WishNap, and use Delete all data again. In place of your data, WishNap keeps just a note of when you deleted, with nothing else in it, so your other devices know to delete their own backup.

Your rights

Wherever you live, you can ask us what personal data we hold about you, and ask us to correct it, delete it, hand it over or stop using it. In practice, almost everything is already in your hands: your data is on your iPhone and, if you use iCloud, in your own iCloud, and you can export or delete it from Settings at any time.

For subscription records, send us the Order ID from your App Store receipt email (you can also find it at reportaproblem.apple.com) and we’ll find your record at RevenueCat, then send you a copy or delete it. Deleting it doesn’t cancel your subscription, which belongs to your Apple ID, and if WishNap is still installed, RevenueCat may start a new record the next time the app checks. If you’ve never subscribed, there’s no Order ID to find your record by, and it holds no purchases; tell us and we’ll help as far as we can. Write to support@wishnap.com. Asking will never change how WishNap works for you.

If you’re in the EU, EEA, UK or Switzerland

Here’s what we rely on for each thing we handle:

Your items, decisions and goals are stored by you, on your iPhone and, if you use iCloud, in your own iCloud. We don’t receive or process them.

No law requires you to give us personal data. Using WishNap does mean its subscription check (above) runs, because that’s how WishNap offers and gives you WishNap Pro. If it can’t reach RevenueCat, WishNap keeps working with the status it last saw. Writing to us is up to you. WishNap makes no decisions about you by automated means that have legal or similarly significant effects. What it works out, like your monthly estimate and your patterns, is calculated on your iPhone and shown only to you.

You have the right to access, correct, erase, restrict and port your data, and to object to processing based on legitimate interests. You can also complain to your local data protection authority.

Where the data goes: RevenueCat, Inc. is based in the United States and keeps subscription records on servers there; transfers from Europe rely on the European Commission’s Standard Contractual Clauses in RevenueCat’s data processing terms. Vercel Inc., which hosts this website, is based in the United States and is certified under the EU–U.S. Data Privacy Framework and its UK and Swiss extensions. Email to support@wishnap.com is forwarded by Namecheap to our Gmail mailbox at Google; both companies are based in the United States. Apple explains its own transfers in its privacy policy.

If you’re in California

In the last 12 months, the personal information handled for WishNap has been: identifiers (the random ID RevenueCat creates for your install, the identifier iOS gives our apps on your iPhone, IP addresses, and your email address if you write to us), commercial information (subscription purchases), and internet or other electronic network activity (the technical details sent with each subscription check, and this website’s server logs). It comes from the app on your iPhone, from your browser when you visit this site, and from you when you email us. It is used only for the purposes above, and is disclosed only to the companies named here (RevenueCat, Vercel and, for email, Namecheap and Google) for those purposes.

We don’t sell personal information, we don’t share it for cross-context behavioral advertising, and we don’t use sensitive personal information to infer anything about you. You have the right to know, delete and correct personal information, and not to be treated differently for using those rights. Email us to make a request; we may need to ask a question or two to find the right records.

If you’re in Canada

The person in charge of protecting personal information for WishNap is Wissam Elmasry, Privacy Officer, reachable at support@wishnap.com. The personal information described above can be stored and handled outside Quebec and Canada: in the United States by RevenueCat (subscription records) and by Vercel (this website’s server logs), and, if you email us, by Namecheap, which forwards mail sent to support@wishnap.com, and Google, which provides our Gmail mailbox. You can ask to see it, correct it or have it deleted by writing to that address, and we’ll answer within 30 days. If you’re not satisfied with our answer, you can complain to the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

Children

WishNap isn’t directed at children under 13, and we don’t knowingly collect personal information from them. The app doesn’t ask anyone’s age. If you think a child has sent us personal information, for example by email, write to us and we’ll delete it.

This website

This website sets no cookies, runs no analytics, and loads nothing from any other company: its fonts, images and videos are all served from this site.

It’s hosted by Vercel Inc., a US company. Like any web host, Vercel receives your IP address, the page you ask for and your browser’s details, and may keep them in server logs to run and protect the site. See Vercel’s privacy notice.

If you email us, we get your email address and whatever you write, and use them only to reply. Mail to support@wishnap.com is forwarded by Namecheap, where our domain is registered, to our Gmail mailbox at Google.

Neither WishNap nor this website tracks you across other companies’ apps or sites, and we don’t sell or share personal information, so a Do Not Track or Global Privacy Control signal from your browser has nothing to switch off. We treat every visitor as if one were on.

Changes to this policy

If WishNap starts handling data differently, we’ll update this page before the change reaches you and change the date at the top. The current version always lives here.

Contact