1. Introduction

Welcome to WishWell ("we," "us," or "our"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website wishwell.help and use our services.

By using WishWell, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, display name, profile picture, and password when you create an account.
• Profile Information: Optional information such as biography, location, and avatar.
• Wish Content: Wishes you create, including text, category selection, and any associated metadata.
• Support Messages: Messages you send to support other users' wishes.
• Charitable Suggestions: Information about charities you suggest, including charity name, website, and description.
• Communications: Messages you send to us via email or contact forms.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the platform, and interaction patterns.
• Device Information: Browser type, operating system, device type, and screen resolution.
• IP Address: Your IP address for security and fraud prevention purposes.
• Cookies: We use cookies to enhance your experience, remember preferences, and analyze usage patterns.

2.3 Information from Third Parties

• Authentication Services: If you sign in using a third-party service (Google, etc.), we receive basic profile information.
• Payment Processors: We do not collect payment information directly; all transactions are processed through secure third-party services.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Create and manage your account
• Display your wishes and support messages to the community
• Calculate and distribute charitable contributions
• Send you service-related notifications (wish updates, support received, etc.)
• Respond to your inquiries and provide customer support
• Detect, prevent, and address fraud, security issues, or technical problems
• Monitor and analyze usage patterns to improve user experience
• Comply with legal obligations and enforce our Terms of Service
• Award badges and track user achievements

4. How We Share Your Information

4.1 Public Information

The following information is publicly visible to all users:

• Your display name and avatar
• Wishes you create (including content, category, and date)
• Support messages you send (including your name and message)
• Your badge collection and achievements
• Your profile biography and location (if you choose to provide them)

4.2 Service Providers

We share information with trusted third-party service providers:

• Firebase (Google): Authentication, database, and hosting services
• SendGrid: Email delivery services
• Analytics Providers: To understand how our services are used (if implemented)

4.3 Charitable Partners

We share aggregated, non-personally identifiable information about contributions with our monthly charity partners. Individual donor information is never shared.

4.4 Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights, property, or safety of WishWell, our users, or others.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (HTTPS/SSL)
• Secure password storage using industry-standard hashing
• Regular security audits and updates
• Access controls limiting who can view your personal information
• Firestore security rules preventing unauthorized data access

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

You have the following rights regarding your information:

6.1 Access and Update

You can access and update your profile information at any time through your account settings.

6.2 Delete Your Account

You can request deletion of your account by contacting us at privacy@wishwell.help. We will delete your personal information within 30 days, except where retention is required by law.

6.3 Opt-Out of Emails

You can unsubscribe from promotional emails by clicking the "Unsubscribe" link in any email we send. You cannot opt out of service-related emails (password resets, security alerts, etc.).

6.4 Cookie Preferences

You can control cookie preferences through your browser settings. However, disabling cookies may limit functionality.

6.5 Data Portability (GDPR)

EU users have the right to request a copy of their data in a machine-readable format. Contact us at privacy@wishwell.help to request your data export.

7. Children's Privacy (COPPA Compliance)

WishWell is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@wishwell.help, and we will delete such information.

8. International Users (GDPR)

If you are accessing WishWell from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our services, you consent to this transfer.

For EU users, we comply with GDPR requirements, including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object.

9. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for authentication and basic functionality
• Preference Cookies: Remember your settings (dark mode, language, etc.)
• Analytics Cookies: Help us understand how you use our services (if implemented)

You can control cookies through your browser settings. See www.allaboutcookies.org for instructions.

10. Third-Party Links

Our platform may contain links to third-party websites (such as charity websites). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. Significant changes will be communicated via email or a prominent notice on our platform.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.