WISH LIST APP
Privacy policy
Updated November 11, 2026. This page describes how Wish List App handles household data. Questions go to vigil@agewellgeriatrics.net.
Who the app is for
Wish List App is for adults planning gifts for a household. A parent can keep a list for a child. Children do not create accounts, choose a password, or join a household. A parent marks the list as parent-managed and shares a link. The child does not sign up.
What the server stores
A household has a name, a join code, and member names. Each phone that joins gets its own session. The server stores a hash of that session, not the session itself.
For each person, the household can store a name, an optional email, an optional phone number, an optional relationship, and occasion dates such as a birthday. Wishes can include a title, description, notes, a link, a store name, and a photo the household attaches. Budgets and recorded chip-in amounts stay with the household.
When someone in the household marks a gift bought, the server stores the buyer’s member name, the date, an optional cost, and optional notes about wrapping, a thank-you, or delivery. Those purchase records are for the buyers. They are not shown on the recipient’s link, in the recipient’s own list when that phone is tied to that person, or on the home-screen widget built from that recipient’s view.
The owner can type a contact that a recipient sees only if a link fails. The app does not copy a login email or the phone’s number into that field.
What the server does not do
There are no ads. The app does not sell data. It does not include a third-party advertising, analytics, or crash-reporting SDK. It does not use an advertising identifier.
The server does not send email or text messages. If you share a list, the phone’s own share sheet, mail app, or messages app opens. Saving a phone number is not permission to text.
A wish can offer “Search Amazon for this item.” That opens an Amazon search for the wish’s words. There is no affiliate code, and Wish List App does not receive an Amazon account or a purchase confirmation.
Photos
A photo is stored only when someone attaches one to a wish. It is shown on that wish. The app asks for the photo library for that purpose. It does not ask for the camera.
Security
The app talks to its server over HTTPS. The household password is stored as a salted hash. This is ordinary hosting, not end-to-end encryption. Anyone with a list link can open that one list until the household rotates or deletes the link.
How long data stays
Household data stays until the account is deleted, or until a deletion request is completed. A recipient link stops working when that list or account is deleted.
Deletion
In the app, open Settings and choose Delete account. Type DELETE ACCOUNT. That removes the household, its people, lists, wishes, photos, purchase records, members, and the password, and signs the phones out.
If you cannot open the app, use the delete-account page or email vigil@agewellgeriatrics.net. A web request does not delete a household by itself. The form cannot prove who owns the household, so a person has to confirm it.