Privacy

Privacy Policy

Last updated: October 17, 2026

Wish & Give is a parent-operated wish list. This policy covers the app and this website. We use family data to run the list. We do not sell it, and we do not use it for advertising.

Who we are

Wish & Give is operated by AI Eval Corporation, 8121 Rondelay Ln, Fairfax Station, VA 22039. It is a sibling of Channel Lantern. Questions about this policy go to privacy@wishandgive.com.

Direct notice to parents

This is the direct notice for a parent before we collect information about a child. Read it with this privacy policy.

• We ask for your email address so we can request your consent and operate the family account. We do not collect a child profile, an occasion, or a wish until you confirm.
• Consent uses the email-plus method. We email you a one-time confirmation link. It expires 48 hours after it is issued. The subject is "Please confirm Wish & Give for your family". The body says:

  Someone (we hope you!) set up Wish & Give for a child in your family. We keep only a nickname, an icon, an optional age band, and their wishes, never a photo, last name, or birthdate. Tap below to confirm you're the parent or guardian and agree to our Privacy Policy. If this wasn't you, ignore this email and nothing will be saved.

  After you confirm, we send this message:

  You're all set. You can review, export, or delete your family's data anytime in Settings or at wishandgive.com/delete-account.

• If you confirm, we collect, for each child, only a nickname, an icon, an optional age band, and their wishes. The icon is a Twemoji glyph and one color from a fixed set. The age band, if you set one, is 3-5, 6-8, 9-12, or 13+. A wish is a title of up to 60 characters and an optional icon. We never collect a photo, last name, or birthdate. An occasion can store a celebration date. That date is not a birthdate, and no birth year is stored or derived from it.
• We use that information to show your family the list, let you approve wishes, and share approved wishes with a giver through a private link.
• You can refuse by not confirming. If consent is not confirmed within 7 days, we delete the parent's email and any child data. Revoking consent later deletes that family's child data immediately, including occasions, wishes, share links, and claims.
• The full policy is this page: https://wishandgive.com/privacy.

For each child, we keep only a nickname, an icon, an optional age band, and their wishes. Never a photo, last name, or birthdate.

The parent account

• Your account email. You can sign in with Apple, with Google, or with email (a magic link or a password).
• A parent PIN, stored only as a one-way hash, with the time it was set and a lockout counter.
• A family name, the owner, and any co-parents. A co-parent invite is an email address and a hashed token. The invite expires 7 days after it is created. Co-parent access is for the family plan. Co-parents can approve wishes and can delete a child profile. They cannot delete the family.
• Plan status: free or family. The family plan is an optional Family subscription, recorded as the RevenueCat entitlement wg_family. It is billed through the App Store or Google Play and auto-renews monthly or yearly until you cancel it. A free trial may be offered on the annual plan. The trial converts to a paid subscription unless you cancel at least 24 hours before it ends. Refunds follow Apple's or Google's policies. The free plan stays free.
• Parent push tokens for Apple (APNs) or Google (FCM). A token is tied to the parent, not to a child.

Kid mode

Kid mode is a separate session for one child. A parent starts it with the PIN. The session expires within 12 hours, and leaving kid mode revokes it. In that session a child can add one pending wish and can see the status of wishes they added. They cannot see parent-added wishes, adult notes, or purchase links. Kid mode has no third-party analytics, ads, outbound links, or purchases.

Givers

A giver opens a revocable link. They do not need an account. We may store a giver name, an optional email for an undo link, and a hash of the device. Parents do not see giver emails. A giver name is visible to the parent only when that claim was made while reveal was on. Giver name, email, and device hash are cleared 60 days after the celebration date. If the occasion has no date, they are cleared 60 days after the latest claim activity on that occasion. The wish and the claim row can remain after the contact fields are cleared.

Other family records

We also store occasion titles, gift types (want, need, wear, read, experience), gift limits, budget ranges in whole dollars, parent notes, give-back labels and optional https links, and the time a thank-you was marked done. Share-link tokens are stored only as a SHA-256 hash.

Waitlist on this site

The form on wishandgive.com is a waitlist. Joining reserves founding-family pricing. It does not start a subscription, and nobody is charged. It does not create a child profile. When you submit it, we store:

• Email address, saved in lowercase
• How many kids you selected (1, 2, 3, or 4 or more)
• Who buys gifts, from the options you pick
• Which headline you were shown (1 or 2) and which price arm (A or B)
• The time you joined
• The referring page, if the browser sent one
• UTM source, medium, campaign, term, and content, when the link includes them
• A SHA-256 hash of the browser user agent, not the raw string

We also keep a short-lived, hashed network address so one visitor cannot submit the form over and over. We do not sell this list. We do not run ads. The only analytics tag on this website is Cloudflare Web Analytics. The account-deletion form on this site is a separate list. It stores the email you submit and a hash of the user agent. It does not remove a waitlist signup.

Where data lives

This website runs on Cloudflare. App data is processed by a Supabase project in us-east-1 (US). Apple and Google deliver parent push notifications and process store purchases. RevenueCat reports the family-plan entitlement. Those services are also covered by their own privacy policies.

Deletion and retention

Deleting the family in the app, or deleting the sign-in user, removes that family's data immediately and revokes every share link. A deletion request on this website is completed within 30 days, and we aim to finish it within 7 days. Revoking consent deletes the child data immediately. If parental consent is not confirmed within 7 days, we delete the parent's email and any child data. Backups roll off within 30 days. Giver contact is purged on the 60-day schedule above. To ask without the app, use Account and data deletion.

Icons

Child icons use Twemoji graphics by Twitter, Inc., under CC BY 4.0.

Contact

AI Eval Corporation, 8121 Rondelay Ln, Fairfax Station, VA 22039. Email privacy@wishandgive.com.