Privacy Policy

Last updated: September 27, 2026.

Wishmundo ("we", "us") is operated by NorthVue Technologies Inc. Wishmundo lets people send a short spoken wish to someone chosen at random who is celebrating something, like a birthday, an anniversary, or a new job, and receive spoken wishes from people around the world on their own celebrations. This policy explains what we collect and why.

What we collect

• Account: when you sign in with Google or Apple, we receive your email address and a stable account identifier from our authentication provider, Supabase. We do not receive your Google or Apple password, and we never store your password ourselves. Authentication is handled entirely by Supabase.
• Date of birth: collected once, privately, to confirm you're 18+ and to add your birthday as your first celebration (you can remove it at any time). Your date of birth (including birth year) and exact age are never shown to any other user, and never leave this private check.
• Celebrations: the occasions you choose to add (such as a birthday, wedding anniversary, graduation, or new job), each picked from a fixed list, with its date. We store no year for yearly occasions like anniversaries, and a year only for one-time occasions. We use this to route wishes to you on those days. The person assigned to wish you sees the type of occasion and its date.
• Voice recordings: the 15-second wishes you record, stored so they can be delivered and played back. Recordings are transcribed and translated by OpenAI as part of moderation (see below).
• Profile basics: a display name, country, and timezone, used to route wishes and show "from [country]" on a wish (never a name, photo, or exact location).
• Push notification token: a device token used to deliver your daily reminder, notices when one of your celebrations begins, and alerts when a new wish arrives for you. You can disable any of these individually in Settings.
• Reports: if you report or block another user's wish, we record the report, the reason, and which wish/account it concerns, so we can review it.
• Device/technical data: standard request logs (IP address, app version) for security and debugging.

What we don't collect

No photos, no browsing of other users, no contact lists, no location tracking beyond the country you tell us, no social graph. Wishes are one-directional audio, not a chat. Beyond what's listed above, we do not store additional identifying information about you.

How we use it

• To assign, deliver, and play back wishes.
• To moderate content before it's ever heard by a recipient (see below).
• To enforce the 18+ age requirement and daily sending limits.
• To review reports and blocks, and act on them (e.g. removing content, banning an account).
• To operate and secure the service.

Moderation

Every recorded wish is transcribed and translated by OpenAI, then reviewed (automatically, and by a human reviewer when flagged) before delivery, to catch disallowed content and attempts to share contact information. This is why voice (not text messaging) is the only way to interact.

How we protect your data

• All data sent between the app and our servers is encrypted in transit (TLS).
• Login is handled by Supabase. We never store your password, and it isn't held locally on your device.
• Database access is encrypted, with access keys rotated regularly.

Sharing

We don't sell your data. We use infrastructure and service providers strictly to run the service, under contracts that limit their use of your data to providing that service to us: Supabase (authentication), OpenAI (voice transcription, translation, and moderation), and our cloud hosting and storage providers. If you subscribe to Wishmundo+, your purchase is processed by the Apple App Store or Google Play and by RevenueCat, our subscription management provider. They receive the payment and subscription-status information needed to process and verify your purchase.

Retention

Delivered wishes are kept so they can remain in your keepsakes. You can delete your account and associated data at any time from the app (Settings > Delete Account) or by contacting us below.

Your rights

You can request a copy of your data at any time by contacting us. You can delete your data at any time from the app (Settings > Delete Account) or by contacting us.

Deleting your account

You can permanently delete your account and all of your data, including sent and received wishes, directly from the app by going to Settings > Delete Account.

Alternatively, to request complete deletion of your account, email [email protected] from the same email address you used to sign up for Wishmundo. Once verified, all of your data (including your voice recordings) will be deleted, and we'll send a confirmation to that email address within 10 business days.

Age restrictions

Wishmundo is restricted to users 18 and older. Anyone who is not 18 or older is not allowed to proceed past sign-up or use the app.

Contact

NorthVue Technologies Inc. Questions about this policy: [email protected]