The data you share,
and the care we take.

This policy applies to information we collect:

• Through the apps and the website;
• Through communications with you, such as email and support requests;
• From partners you authorize, for example when you verify your identity or link a funding source.

It does not apply to merchants’ websites you open from wnted or to other third-party services; their own privacy policies govern those.

The app asks for three device permissions. Each is optional, the app works without it, and you can revoke it at any time in your device settings.

• To run the Services: create and secure your account, sync your wishlists and goals across devices, and show you what you saved.
• To personalize Discover using your taste profile.
• To provide the optional money features: funding-source linking, scheduled payments toward goals, gift-card value, refunds, and gift-card redemption.
• To connect you with friends you choose, deliver invites you send, and attribute referrals.
• To run the referral program: record which invite a friend joined from, track their qualifying steps, and issue gift-card credit.
• To send transactional notifications and, only if you opt in, reminders and marketing. You can opt out of marketing at any time.
• To respond to support, refund, and withdrawal requests.
• To keep the Services safe: prevent fraud and abuse, enforce our Terms, and meet legal obligations, including those that apply to our payment partners.
• To measure and improve the app, using analytics you have consented to.

We do not use financial information for advertising. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We share personal information only:

• With service providers that process it on our behalf — hosting, authentication, push delivery, email, product data, analytics, and customer support. They may use it only to provide services to us and must protect it to at least the standard described in this policy.
• With financial partners you have chosen to use, listed in Section 6, to the extent needed for identity verification, funding, payments, and gift-card fulfillment.
• With people you choose. A list you make public is visible to anyone with its link; a list you share is visible to the people you share it with; your friends can see the goals you make public and the progress you choose to show.
• With merchants, only as a visitor. When you open a product you leave wnted for the merchant’s site, and its privacy policy applies. Links may carry an affiliate code that tells the merchant a visit came from wnted; it does not identify you.
• When required by law, to protect rights and safety, to prevent fraud, or in connection with a merger, acquisition, financing, or sale of assets, under the same confidentiality protections.

Every company below is one our systems actually send data to. If we add or change a partner that receives personal data, we will update this list.

Supabase

Sign-in, accounts, and database hosting — account details and app data.

Google Firebase Authentication

Phone-number verification by SMS code — your phone number.

Google Play Integrity API

Device-integrity checks during phone verification on Android — device integrity signals.

Apple, Google

Sign in with Apple / Google — sign-in identifiers.

Google Cloud

App and API hosting — app data and server logs.

Sentry

Crash and error reporting — device model, OS and app version, the error and where it happened; no personal data.

Channel3

Product catalog and merchant links — product identifiers only, no personal data.

Voyage AI

Product search and recommendations — product titles and images only, no personal data.

logo.dev

Brand logos — merchant domain names only.

SuprSend

Notification delivery (push and email) — user ID, name, email address, push token, notification content and preferences.

Apple Push Notification service, Google Firebase Cloud Messaging

Push delivery — push token and notification content.

Email delivery provider

Transactional email — your email address and the message.

AptPay

Identity verification, bank linking, payments, and gift-card value — identity information, funding-source tokens, transactions.

Very Good Security (VGS)

Debit-card tokenization — card details, tokenized before they reach wnted.

Giftbit; PerfectGift

Gift-card fulfillment — redemption amount, brand, and delivery email.

Branch Metrics

Invite and referral links — when you open a wnted invite or referral link, and when the app first opens after it is installed: the link, device type, operating system and app version, IP address, and a link copied to your clipboard by wnted’s invite page, so a referral can be credited. Branch receives no name, email or contacts, and is not used for advertising or to track you across other companies’ apps.

In the app, analytics run only after you turn them on in Settings → Privacy, and you can turn them off at any time. On the website we use only the cookies needed for the site to work and, where you consent, aggregate analytics. We do not use advertising cookies or pixels. Some browsers send “Do Not Track” signals; there is no industry standard for them, but because we do not track you across sites, the outcome is the same either way.

• Account and wishlist data is kept while your account is active.
• Delete your account in the app: Settings → Account → Delete account. This removes your profile, wishlists, goals, friends, Discover history, and taste profile, and signs you out everywhere. Deletion is permanent and cannot be undone.
• Delete your account from the web: request deletion at wnted.com/delete-account without installing the app, or email support@wnted.com. We verify the request against the account’s registered email or phone number before acting on it.
• Retention of financial records. We keep records of your transactions, account activity and identity verification for as long as financial-services and anti-money-laundering law requires — at least five years after your account is closed — even if you delete your account. Our payment and banking partners keep their own records under the laws that apply to them. Retained records are used only for legal and regulatory compliance, resolving disputes, and preventing fraud.
• Contact hashes used for matching are never stored; the hash of a contact you invite is kept with that invite so the referral can be credited. Support requests are kept for up to two years. Analytics are pseudonymous and kept for up to 24 months. Server logs are kept for up to 30 days.

You can also email support@wnted.com to request deletion, a copy of your data, or a correction.

• Analytics: on or off at any time in Settings → Privacy.
• Notifications: per-type switches in Settings → Notifications, and in your device settings.
• Contacts and biometrics: grant or revoke in your device settings; the app keeps working without them.
• Public and shared lists: make any list private again from the list itself.
• Funding sources: unlink a bank or card from Settings → Payment methods, or from the goal it funds.
• Marketing email: unsubscribe link in every message.

We use administrative, technical, and physical safeguards, including encryption in transit, encrypted on-device storage of session credentials, salted password hashing, card tokenization, and access controls. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as the law requires.

The Services are not directed to anyone under 18, and money features require you to be at least 18. We do not knowingly collect personal information from children; if you believe we have, contact us and we will delete it.

Depending on where you live, you may have the right to know what personal information we collect, to access, delete, or correct it, to opt out of “sales” or “sharing” (we do neither), and not to be discriminated against for exercising these rights. For California residents, the categories we collect are identifiers, account and profile information, commercial information (products saved and goals), internet activity (usage), device information, and — only if you enable money features — financial and identity-verification information. Exercise your rights in the app or by emailing legal@wnted.com; we may need to verify your identity first, and you may use an authorized agent where the law allows.

The Services are operated from the United States and intended for U.S. residents. If you use them from elsewhere, your information will be processed in the United States.

We will post changes here and update the dates above. If a change is material, we will tell you in the app or by email before it takes effect.

For privacy questions or to exercise your rights, contact us. We respond within 30 days.