Privacy policy

In short

• No ads. We don't use advertising, analytics or tracking tools.
• We don't sell your data or use it for advertising. We use it only to run the service.
• You can use Wishglobe as a guest without an account. We get your name and email only if you link a Google or Apple account.
• No one can see sealed notes before the opening time, and the app doesn't show them.
• You can delete your account at any time; your data is deleted right away.

What we collect

• Guest account: When you first open the app or hang an ornament from the website, a random ID and a session key are created. The server keeps only a hash of the session key.
• Linked account (optional): If you link a Google or Apple account, the name, email address and permanent ID of that account. Your password never reaches us; sign-in happens through Google or Apple.
• Globes: The celebration type, title, opening time and look of the globe you set up, and the name you want shown in it.
• Ornaments and notes: The shape, color and position of the ornament you hang; the note you write, the photo you add and the name shown in the globe.
• Membership: Which globes you joined, your role there (owner, manager, member), when you joined and when you did the opening.
• Reports: If you report a note or ornament, the reason and which content it was.
• Purchases: If you buy something in the app, the purchase token, order number, product and status provided by Google Play. Your payment details (card etc.) never reach us; Google Play takes the payment.
• Technical data: Your IP address is processed briefly to prevent abuse (such as too many requests).

What stays on your phone

• Your session key is kept in the phone's secure storage and your preferences in the app's own storage.
• Photos: The gallery is accessed only when you pick a photo; only the photo you pick is uploaded.
• Motion sensor: Used to detect shaking the phone at the opening; motion data is not recorded or sent to the server.
• Notifications and widget: Opening reminders are scheduled on your phone. The home screen widget shows the countdown and one of your opened notes; this information stays on your phone.

Who can see what?

• Anyone with the globe's link can see its title, the owner's name, the opening time and what the ornaments look like. Notes, photos and the names of the people who hung ornaments are not part of this preview.
• Members of the globe see each other's names in the globe and who hung which ornament.
• Notes and photos are sealed until the opening time: the server doesn't send them to anyone, not even the globe's owner. You can always see your own note.
• After the opening time, all members of the globe see all its notes and photos.

Why we use your data (legal bases)

• To provide the service you asked for (contract): your account, globes, ornaments, notes, photos, memberships and purchases.
• Legitimate interests: keeping the service secure, preventing abuse and handling reports.
• Legal obligations: keeping purchase records where the law requires it, and responding to lawful requests from authorities.

Where it's stored and who it's shared with

Data is stored on a server we operate, rented from a hosting provider in Turkey, and every connection between the app and the server is encrypted (HTTPS). If you use Wishglobe from outside Turkey, your data is transferred to and processed in Turkey. We don't sell your data or use it for advertising. We contact these services only as far as the service needs:

• Google and Apple: to verify your identity when you link an account.
• Google Play: to verify purchases and learn about refunds.
• Hosting provider: runs the server our data is stored on; it does not use the data for its own purposes.

If the law requires it (for example a court order), data may be shared with the competent authorities.

How long it's kept and how to delete it

• Data is kept as long as your account exists. You can remove your own ornament and note at any time before the opening.
• If a globe's owner or manager removes someone from the globe, that person's ornaments, notes and photos in that globe are deleted.
• Deleting your account: In the app, tap the person icon at the top right and choose "Delete account", or use the wishglobe.kmylabs.com/delete-account page. The globes you set up, the ornaments you hung, your notes, photos, memberships and linked account details are deleted right away.
• Deleted data stays in daily database backups for at most 14 days, then it's gone automatically.
• A purchase record is kept so the same purchase can't be used twice; its link to your account is removed.

Children

Wishglobe is not directed at children under 13 (or the minimum age for consent in your country) and does not knowingly collect their data. If you notice such an account, write to us and we'll delete it.

Your rights

Depending on where you live (for example under the EU/UK GDPR, Turkey's personal data protection law KVKK, or US state laws such as the CCPA), you can ask to access your data, get a copy of it, correct it, delete it, restrict or object to its processing. Account deletion above is enough to delete your data; for other requests, write to us. You also have the right to complain to your local data protection authority.

Changes and contact

If this policy changes, the current version is published on this page with its new date.

For questions, requests or complaints: the developer contact address on the app's Google Play and App Store pages.