Privacy Policy

1. Introduction & Controller

Mohammedhusen Malek, trading as MyWishBook ("we", "our", "us"), is the data controller for personal data processed through the MyWishBook website and mobile application (the "Service"). This Privacy Policy explains how we collect, use, store, share and protect your personal information.

2. Information We Collect

• Account information: email address, name and profile photo (if provided) when you create an account.
• Event and reminder data: birthdays, anniversaries, events, holidays, wishlists and gift ideas you save in the app.
• Family sharing data: family group names and member relationships you choose to set up.
• Device / push token: push notification tokens if you opt in to reminders.
• Usage data: anonymised analytics such as feature usage and crash reports to improve the app.
• Payment data: if you upgrade to Pro, our Merchant of Record (Paddle) collects and processes payment details. We do not store your full payment card number.

3. Purposes & Legal Basis

We process personal data on the following legal bases:

• Contract performance — to provide and maintain the Service's core features (account, reminders, wishlists, calendar) and to process Pro subscription payments and manage billing.
• Legitimate interests — to improve app performance and fix bugs via anonymised analytics, prevent fraud and abuse, and secure our systems.
• Consent — to send optional push notifications and marketing communications. You can withdraw consent at any time.
• Legal obligation — to comply with tax, accounting and other legal duties (for example, retaining payment records).

4. Data Sharing

We do not sell your personal data. We share data with the following categories of recipients:

• Cloud infrastructure providers (hosting, database) who process data solely on our behalf under strict confidentiality agreements.
• Paddle.com Market Limited — our reseller and Merchant of Record for all paid subscriptions. Paddle handles checkout, payment processing, subscription management, sales tax compliance, invoicing, refunds and customer-billing support. See the Paddle Privacy Notice.
• Analytics services in anonymised, aggregated form only.
• Professional advisers (legal, accounting) and authorities where required by law.

5. Data Storage & Security

Your data is stored on encrypted cloud servers. We use industry-standard TLS/SSL encryption for data in transit and AES-256 encryption at rest. Access is restricted to authorised personnel only.

6. Data Retention

• Active account data is retained for as long as your account exists.
• If you delete your account, personal data is removed promptly (see our Account Deletion page).
• Anonymised logs are kept up to 30 days; payment records up to 7 years where required by tax and accounting law.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (see Account Deletion).
• Restrict or object to certain processing activities.
• Receive your data in a portable format.
• Withdraw consent for optional features (e.g. push notifications).
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@mywishbook.app. We aim to respond within 30 days.

8. International Transfers

Where personal data is transferred outside your jurisdiction, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

9. Children's Privacy

MyWishBook is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such data, contact us and we will delete it promptly.

10. Cookies

We use essential cookies required for the Service to function (such as login sessions) and limited analytics cookies in anonymised form. You can manage cookie preferences in your browser.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or an in-app notice. Continued use after changes constitutes acceptance.

12. Contact Us

Questions about this Privacy Policy or our data practices? Email support@mywishbook.app.