Privacy Policy

Last updated: August 5, 2026.

Wishmundo ("we", "us") is operated by NorthVue Technologies Inc. Wishmundo lets people send a short spoken birthday wish to someone chosen at random, and receive spoken wishes from people around the world on their own birthday. This policy explains what we collect and why.

What we collect

• Account: when you sign in with Google or Facebook, we receive your email address and a stable account identifier from our authentication provider, Supabase. We do not receive your Google or Facebook password, and we never store your password ourselves. Authentication is handled entirely by Supabase.
• Date of birth: collected once, privately, to confirm you're 18+ and to know your birthday. Your date of birth (including birth year) and exact age are never shown to any other user, and never leave this private check.
• Voice recordings: the 15-second wishes you record, stored so they can be delivered and played back. Recordings are transcribed and translated by OpenAI as part of moderation (see below).
• Profile basics: a display name, country, and timezone, used to route wishes and show "from [country]" on a wish (never a name, photo, or exact location).
• Push notification token: a device token used to deliver your daily reminder, your birthday notice, and alerts when a new wish arrives for you. You can disable any of these individually in Settings.
• Reports: if you report or block another user's wish, we record the report, the reason, and which wish/account it concerns, so we can review it.
• Device/technical data: standard request logs (IP address, app version) for security and debugging.

What we don't collect

No photos, no browsing of other users, no contact lists, no location tracking beyond the country you tell us, no social graph. Wishes are one-directional audio, not a chat. Beyond what's listed above, we do not store additional identifying information about you.

How we use it

• To assign, deliver, and play back wishes.
• To moderate content before it's ever heard by a recipient (see below).
• To enforce the 18+ age requirement and daily sending limits.
• To review reports and blocks, and act on them (e.g. removing content, banning an account).
• To operate and secure the service.

Moderation

Every recorded wish is transcribed and translated by OpenAI, then reviewed (automatically, and by a human reviewer when flagged) before delivery, to catch disallowed content and attempts to share contact information. This is why voice (not text messaging) is the only way to interact.

How we protect your data

• All data sent between the app and our servers is encrypted in transit (TLS).
• Login is handled by Supabase. We never store your password, and it isn't held locally on your device.
• Database access is encrypted, with access keys rotated regularly.

Sharing

We don't sell your data. We use infrastructure and service providers strictly to run the service, under contracts that limit their use of your data to providing that service to us: Supabase (authentication), OpenAI (voice transcription, translation, and moderation), and our cloud hosting and storage providers. If you subscribe to Wishmundo+, your purchase is processed by the Apple App Store or Google Play and by RevenueCat, our subscription management provider. They receive the payment and subscription-status information needed to process and verify your purchase.

Retention

Delivered wishes are kept so they can remain in your keepsakes. You can request deletion of your account and associated data by contacting us below.

Your rights

You can request a copy of your data or its deletion at any time by contacting us.

Deleting your account

To request complete deletion of your account, email [email protected] from the same email address you used to sign up for Wishmundo. Once verified, all of your data (including your voice recordings) will be deleted, and we'll send a confirmation to that email address within 10 business days.

Children

Wishmundo is restricted to users 18 and older. We do not knowingly collect data from anyone under 18.

Contact

NorthVue Technologies Inc. Questions about this policy: [email protected]