Privacy Policy

Wish Angel ("we", "us") is a greeting-card service that remembers your important dates, designs AI-generated cards, and delivers them by text message and email. Privacy contact: mehdi.amir.app@gmail.com.

Your account: email address and a password (stored as a secure hash by our authentication provider), your plan, preferences (send time, timezone, tone, sign-off), and yearly usage counts.

Contacts you add: names, phone numbers, email addresses, event dates (such as birthdays), and any personal notes you write about them. You provide this data so Wish Angel can create and deliver cards on your behalf.

Cards: the headlines, messages, and images Wish Angel generates, plus delivery logs (whether a text or email was sent successfully).

Purchases: if you subscribe in our mobile app, the purchase is processed by Apple or Google and managed through RevenueCat. We receive your subscription status — never your card number or payment details.

We do not collect precise location, advertising IDs, or contact lists from your device — you type in only the people you choose.

Only to run Wish Angel: generating card text and artwork, sending cards at the time you chose, showing you your history, enforcing plan limits, and notifying you about deliveries. We do not sell personal data, use it for advertising, or share it with anyone except the service providers below.

We share the minimum data required with:

• Supabase — database, authentication, and image storage.
• OpenAI (and optionally Ideogram) — recipient first name, occasion, and your notes are used to generate the card message and artwork.
• Twilio — recipient phone number and the card, to deliver text messages.
• Resend — recipient email address and the card, to deliver emails.
• RevenueCat / Apple / Google — subscription status for in-app purchases.

When you add someone to Wish Angel you confirm you know them personally and have their permission (or a reasonable basis) to send them greetings. Recipients can contact us at mehdi.amir.app@gmail.com to have their information removed.

Your data is kept while your account is active. You can delete your account at any time in Settings → Delete account inside the app — this permanently removes your profile, contacts, cards, images, and notifications. You can also email us to request deletion. Backups and delivery records held by our providers are purged on their standard schedules.

You can download a copy of your data anytime from Settings → Download my data.

Data is encrypted in transit (HTTPS) and at rest by our providers. Sessions use secure, httpOnly cookies. Access to production data is limited to the operator of the service.

Wish Angel is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Depending on where you live (e.g. GDPR, CCPA, PIPEDA), you may have the right to access, correct, export, or delete your personal data. The in-app tools above cover all of these; for anything else, email us and we will respond within 30 days.

If we change this policy we will update the date above and, for material changes, notify you in the app.