Last updated: October 12, 2026
Wishlist is a gift list app made by one person. This policy explains what the app collects, why, and who else touches it. It covers the iPhone app, the Mac app, and getwishlist.app.
The app asks for access to your contacts only so you can pick a person instead of typing their details. Your address book is not uploaded. On iPhone, no contact is read until you open the picker and choose someone. On Mac, searching in the picker looks through the contacts on that Mac as you type; nothing it reads leaves the Mac until you choose someone.
When you pick a contact, the app reads that one person's name, email address and birthday where you have them saved. It never reads or stores a phone number or postal address. Their contact photo is shown in the picker on your own device and is never sent anywhere.
What is saved to your account is only the person's name. Nothing is saved until you make that choice.
So, concretely: when you pick a contact to name a person or to name who gave you a gift, that name is sent to our servers and stored with that person or that gift, on your account.
You can decline contacts access and use every part of the app normally by typing the same details yourself.
Your information is not sold. These providers handle parts of it so the app can work:
Information may also be disclosed if the law requires it.
A list is private until you share it. You choose whether a list is visible only to you, visible to friends, or open to anyone with its link. Reservations on your own list are hidden from you until the list's date has passed or you choose to reveal it. A list with no date can be revealed at any time, after a warning that it ends the surprise. When you reveal a list you see who reserved each gift, so you know whom to thank, and a gift reserved anonymously shows as Someone. Other people viewing the list see only that a gift is spoken for. The person who reserved a gift can always see their own reservation.
Lists that anyone with the link can open are unlisted: we ask search engines not to index them. If you change a list away from "Anyone with the link", the old link stops working. If you make it shareable again, you get a new link. If you remove a friend, they lose access to your friends-only lists straight away, including any address they saved.
Anyone signed in to Wishlist can find you by your name, your username or your exact email address. They see your first name (or your username) and your photo, and the lists you've made visible to friends. They never see your email address. If you haven't set a name or a username, you show as “Someone”.
Your information is kept while your account exists. You can delete your account from inside the app on any platform, without asking anybody. The app shows you exactly what will be destroyed before it happens, and deletion cannot be undone.
Images you uploaded are erased from storage too, unless another list still uses the same image. Two things outlive your account, and it would be dishonest not to say so. Usage events and error records are kept apart from your account and are not reached by deleting it. Neither carries your name or email address, though an event recorded while you were signed in can carry your account id. Feedback you sent stays on the usage page too, with the link to your account removed rather than the feedback itself. Write to us and both are cleared by hand.
Data is encrypted in transit, and access to the production database is limited. No system is perfect, and this policy does not promise one is.
Wishlist is not directed at children under 13, and accounts are not knowingly created for them. If you believe a child has an account, write to us and it will be removed.
This policy will change as the app does. The date at the top always says when it last did.
Questions about this policy, or about your data, go to support@getwishlist.app. For anything else, see Support.