Privacy Policy

Who we are

Wishd is operated by Bilzo Labs. References to "we", "us" and "Wishd" mean Bilzo Labs. You can reach us at [email protected] for any privacy question or request.

What we collect

• Account details. Your phone number, name, and avatar. Phone number is required to log in. Name and avatar are shown on events you host or attend.
• Event content. Events you create, items on your wishlist, cash pool details, and the payment handle you choose to share with claimers.
• Guest activity. When you claim an item or contribute to a pool, we record the amount, the item, and the time. Guests on an event can see each other's display name and what they claimed.
• Messages. Thank-you notes and invite links sent through Wishd, including photos you attach.
• Device and log data. IP address, device type, browser, and basic usage events. We use this to keep the service running and to spot abuse.

We do not collect payment card numbers, bank details, or UPI credentials. Wishd does not process money. Contributions happen directly between host and guest.

Why we use it

• To let you sign in, host events, and claim or contribute to events you are invited to.
• To deliver invite links and thank-you notes over WhatsApp.
• To prevent abuse, fraud and spam.
• To improve the product based on aggregated usage.

We do not sell your data and we do not use it for third-party advertising.

Who sees what

• Public event pages. A Wishd event link can be opened by anyone who has the link. Treat it like an unlisted page. Only the host's chosen content is visible there.
• Within an event. The host sees who claimed what. Guests on the same event see each other's display name, profile photo and what they claimed. Guests do not see other guests' phone numbers.
• Payment handles. The host's payment handle is shown to a guest only after the guest claims an item or signals intent to contribute.

Service providers

We share data with vendors that operate parts of the service for us, under contracts that restrict use to providing the service:

• MongoDB Atlas for our database.
• Amazon Web Services for hosting and S3 file storage (avatars, screenshots, photos).
• Interakt (Meta WhatsApp Business) for invite links and thank-you messages over WhatsApp.
• An SMS provider for one-time login codes.
• Google for "Sign in with Google" when you choose that option.

How long we keep it

We keep your account and event data for as long as your account exists. When you delete your account, we remove your personal profile and your events within 30 days. We may retain limited records (for example, that an account existed at a phone number) for fraud prevention and to comply with legal obligations.

Your choices

• Access and correction. You can update your name, avatar and contact details from your profile.
• Deletion. Email [email protected] from the phone number on file, or use in-app account deletion, and we will close the account.
• Opt out of messages. Reply STOP to a WhatsApp or SMS to stop receiving transactional messages on that channel. You can still use the app.
• Cookies. We use a small number of first-party cookies to keep you signed in. We do not use third-party advertising cookies.

International transfers

Wishd is a global product. Your data may be processed in countries other than where you live, including the United States and India, depending on which vendor region serves your account. We use standard contractual protections where required.

Children

Wishd is not intended for children under 13, and under 16 in jurisdictions where that is the applicable minimum age. Do not use Wishd if you are below the minimum age in your country.

Changes to this policy

We will update the date at the top of this page when this policy changes. For material changes, we will surface a notice in the app before they take effect.

Contact

Privacy questions, requests and complaints: [email protected].