Wishboard app icon

Privacy Policy

Last updated: 21 October 2026

This policy explains what Wishboard for iPhone and iPad, and its gift pages at wishboard.gift, do with your data. Wishboard is made by Serhii Surzhykov (“we”). It is free, with an optional Premium subscription or one-time purchase.

In short

  • There is no account to create. Your boards live on your devices and in your own iCloud.
  • A board leaves your device only when you share it, and then only to the people you share it with.
  • A few services receive only what they need for one job: gift pages and co-owner news, exchange rates, crash reports, anonymous usage statistics and purchases. Each is listed below.
  • No advertising, no tracking across apps or websites, no data sold.

What you create, and where it lives

Wishes, photos, prices, links, notes, dates and reminders are stored on your device. If iCloud is on, they sync through Apple iCloud (CloudKit private database) to your devices. That copy is in your Apple Account; we cannot read it.

Your profile name and picture are kept in your iCloud and are visible to co-owners of boards you share. Cutting a product out of its photo happens on your device. The share extension and the widgets read your boards on the device, through a container shared with the app.

Permissions

  • Photos — you pick photos with the system picker. Saving a board picture asks only for permission to add to your library.
  • Notifications — for the daily reminder, scheduled on your device, and for news from co-owners and friends described below.
  • Clipboard — when you open Wishboard, it looks for a link you copied and offers to add it. To show that offer with a name and picture, it already reads the linked page, as described under Shops you link to. Nothing is saved unless you tap Add.

Wishboard does not use your location, contacts, microphone, calendar or health data.

What leaves your device, and to whom

Co-owners (Apple iCloud)

When you invite someone to edit a board, Apple iCloud shares it with them (CloudKit sharing). Apple handles the invitation; we see neither the invitation nor the board. You can stop sharing at any time.

Co-owner news (our server)

So co-owners hear at once when a wish is added or comes true, each device on a shared board gives our server on Cloudflare Workers its Apple push notification address, with the shared boards’ iCloud identifiers and its iCloud user identifier; the server stores only one-way hashes of those identifiers. When something happens on the board, the app sends the board’s identifier, its name, the wish’s name and your name to the server, which passes them to Apple to show on the other co-owners’ devices and does not keep them. A device that is no longer on any shared board is removed.

Gift pages (wishboard.gift)

If you create a gift link, the app publishes a copy of that one board to our server on Cloudflare Workers so friends can open it in a browser: the board’s name, its wishes (titles, notes, prices, links, due dates, photos), its look including a backdrop photo if you chose one, and your name and picture if you added them. The first time you share without a name, the app asks what friends should call you; clearing the name removes it from the page. How much you have saved, when wishes were added and who added what stay in the app. The page is not listed or indexed; anyone who has the link can see it.

Friends who reserve a gift may leave a name or stay anonymous. A name they leave is shown on the page to everyone who has the link, so other guests know the gift is taken. In the app, you choose whether you see what is reserved. If you do, your device gives the server its Apple push notification address so it can tell you, through Apple, when a friend picks a gift: only that something was picked from the board, not which gift or by whom. Hiding reservations again removes it.

To let a friend change their mind later, the page remembers the name they typed and their reservation in that friend’s own browser (local storage). The page sets no cookies and has no analytics or ads. To play a small confetti animation, it loads one script from the jsDelivr network, which sees the visitor’s IP address under its own privacy policy.

To limit abuse, the server keeps a one-way hash of the IP address that creates a page, with the day, and clears old days as new pages are made. Cloudflare processes IP addresses for security under its own privacy policy.

Turning the link off, or deleting the board, deletes the page, its photos, its reservations and these notification addresses from the server. Only the retired link itself is kept, so it can answer “turned off” instead of “not found”.

When you paste, copy or share a shop link, your device opens that page directly (Pinterest pins included) to read the product’s name, photo and price, and downloads the product photo from the shop, without going through our server. The shop sees an ordinary visit. Short map links, such as Google’s or Apple’s, are opened to find the place, then looked up with Apple Maps.

Yahoo Finance — exchange rates

To convert prices, the app downloads public exchange rates. Only the currency pair is requested; as with any internet request, Yahoo sees your IP address. See Yahoo’s privacy policy.

TelemetryDeck — anonymous usage statistics

To see which features are used, Wishboard, its widgets and share extension send anonymous signals, such as which screen was opened, that a wish was added or that a purchase was completed (with the product, storefront and currency), and Apple’s daily MetricKit performance summaries. They never contain the content of your wishes. See TelemetryDeck’s privacy policy.

Sentry — crash reports

Sentry receives crash and freeze reports and, for a sample of sessions, performance data, plus Apple’s MetricKit crash and performance reports. Screenshots, the view hierarchy, screen text, network addresses and personal data are switched off; a random per-install identifier groups reports from one device. Sentry processes them in the European Union. See Sentry’s privacy policy.

RevenueCat — purchases

See Purchases below.

Purchases

Purchases are processed by Apple; we never receive your payment details. RevenueCat manages Premium and receives your purchase receipt and an anonymous identifier, not your name or payment details. See RevenueCat’s privacy policy and Apple’s.

What we never do

  • We do not sell or rent your data.
  • We do not show advertising or build profiles.
  • We do not track you across other apps or websites.
  • We do not require an account, an e-mail address or a phone number.

How long data is kept

Your boards stay on your devices and in your iCloud for as long as you keep them. A gift page stays on our server until you turn its link off or delete the board. Co-owner news is passed on and not kept. Anonymous statistics and crash reports are kept by their providers for a limited period and then deleted.

Your choices and rights

  • Delete a wish, a board or the app to delete that data on your device.
  • Manage the iCloud copy in Settings › [your name] › iCloud › Manage Storage.
  • Turn off a gift link to delete its page.
  • Stop sharing a board, or leave one, from its Share menu.
  • Turn off notifications or photo access in Settings.

If you are in the European Economic Area, the United Kingdom or a place with similar law, you have the right to access, correct, export and erase your data and to object to its processing. Your boards are held on your device and in your own iCloud, so you exercise most of those rights in the app. For anything else, including a gift page, write to the address below and you will get an answer within 30 days.

Legal bases under the GDPR: the performance of a contract for gift pages, co-owner news and purchases; your consent for notifications and photo access; and our legitimate interest in a stable app for crash reports and anonymous statistics.

Security

Your data is protected by your device passcode, Apple’s encryption of device and iCloud data, and your Apple Account security. Gift pages are served over HTTPS and are reachable only through their unguessable link. Every network request uses an encrypted HTTPS connection.

Children

Wishboard is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, write to us and it will be deleted.

Changes

This policy may change as the app changes. Each new version is published on this page with a new date.

Contact

Questions about privacy, or a request about your data: sandoya1101@gmail.com.