wishtide

Privacy Policy

Draft for testing (2026-11-11-draft-15). Pending review by our lawyer and an independent security engineer before Wishtide launches.

Who we are

Wishtide LLC ("we"), a California limited liability company, runs the Wishtide app and wishtide.app. Questions about privacy: wishtide.app@gmail.com.

What we collect

Your email address (to send sign-in codes and, unless you turn it off in My dreams, one email when a dream you gave to comes true). What you choose to share: your dream, its story, cost, items, location, and optionally your first name and age. For new dreams, your location is your US ZIP code: it stays private (only you, Wishtide's admins and our servers can see it, and we use it to find providers near you), and your dream shows only the city and state that match it. In México and Colombia (beta) you type your city and state or departamento instead, and your dream shows that place and the country. Pictures or documents you attach to your dream (for example a price quote, a photo of what you need, or a letter) are private: only you, Wishtide's admins and our AI reviewer (Claude, by Anthropic) see them, they are used only to review your dream, and they are deleted when you delete your account. Please never upload an ID card. Your activity: gifts (amount, optional message, and whether they are anonymous), votes, taps on the shoulder, reports, whether you tapped "I'm interested" in the Wishmaker Club, and when you accepted the Terms. Pass the Tide: what your dream meant to you (only if you choose to show it), notes of encouragement you write (and the first name you sign them with, if any), and whether you have passed the tide. Your ID-check result (verified, pending or failed). Money records (test mode for now): your one-time dreamer verification (and the partner code, if you used one), your Wishmaker Club membership, the company giving program you joined (with a company code or the domain of your sign-in email; your company's managers see how many people joined and the dreams its credits helped, never your own gifts), and Wishtide's income lines linked to your gifts (tips and fees), which we keep for 5 years like other gift records. For group dreams (3 or more people): the provider quote you add, and the email address of the second adult or staff member you name, plus the invite code or confirmation link we send them and whether they confirmed. If you join the website waiting list: your email, and a scrambled (hashed) version of your internet address used only to stop spam. If you are a dreamer, before your first payout: your phone number and whether you confirmed it with a code. It is private (only you and Wishtide's admins can see it) and used only to confirm payouts; we keep it while you have an account. Your language choice (English or Spanish), saved on your account when you're signed in so the app and our emails use it; we never guess it from your email address or location. If someone from the Wishtide team invites you to "claim your dream": the first name, the draft of the dream they wrote from what you told them, a group label (for example "Family") and whether the invitation was opened or used. Only you (through your private link) and Wishtide's admins see the draft; its text is erased 30 days after the invitation is used, cancelled or expires. If you give to a dream, we keep a simple in-app notice for you when that dream's proof of joy is shared (which dream and when), until you mark it as seen or delete your account. For dreams over the vouch amount (now $750): the emergency contact you give (name and phone) and, for trips, your full legal name as on your ID, for the tickets and bookings. Only you and Wishtide's admins see them, and they are deleted when you delete your account. If you vouch for a dreamer: that you vouched and how you know them (the dreamer and Wishtide's admins see it; the public sees only how many ID-verified people vouched). For trips: the dates you confirm and when you confirmed them. When Wishtide buys a ticket or booking for a dream: who it is for (the name on the booking), the provider, the booking reference, the amount and the dates, in a log that can't be changed and that only Wishtide's admins can read.

What we do not collect

We never see or store your ID card or selfie: our verification partner, Stripe, handles those and tells us only the result. We do not use advertising trackers, and we do not sell or rent your personal information.

What others can see

A live dream is public: the dream, its story, location, cost, progress, and the first name and age you chose to show. Gifts show the giver's name unless they give anonymously. The Wishmaker Wall shows wishmakers' names and how many dreams they helped. Your email is never shown. A live dream also shows whether it is a heartfelt dream or an Open Wish, what the dream meant to the dreamer if they chose to show it, and how many people whose own dream came true helped it (no names). A note of encouragement is seen only by its writer, the dreamer it was sent to (after our check) and Wishtide's admins. The Wishmaker Wall and My dreams can show a "Passed the tide" badge. Group-check details (quote, emails, codes) are never public: only the organizer and Wishtide's admins see them. Each dream shows how many times it was viewed: we count visits without recording who viewed it.

How we use your information

To run Wishtide: sign you in, show and review dreams, record gifts and votes, keep the community safe, and send service emails. For group dreams, we use the email address you give us only to send that person one invite code (family) or one confirmation link (organization), and at most 3 times. Dream text is checked by an AI reviewer (Claude, by Anthropic) against Wishtide's rules; it may approve a dream, send it to a person, or decline it. If you think a decision is wrong, email us and a person will look again. Our team also uses a daily report to spot fraud (for example, copied stories). We also check giving patterns (for example, many gifts in a short time, or two people funding each other's dreams) to prevent fraud and money laundering; a person at Wishtide reviews anything flagged. If you ask the in-app help assistant a question, we keep the question (not your account details) for 90 days to improve our answers. Provider options: after you share a dream, an AI assistant (Claude, by Anthropic) searches public websites for up to 3 well-known providers or stores and an estimated price. It uses your dream's text and the city and state you shared; it never contacts providers. Only you and Wishtide's admins see the options.

Beta activity log

While Wishtide is in beta, when you're signed in the app records which screens you open and which main buttons you tap (for example "Give", "Share a dream" or "Share this dream"), with the time and a few simple details such as the kind of gift or how many form fields were filled. We never record what you type, your email or your location. Only Wishtide's admins can see this log, we use it only to improve the app, and each entry is deleted automatically after 180 days (or when you delete your account).

Companies that help us

Supabase (database and sign-in, USA), Stripe (identity checks, and payments later), Resend (emails), Anthropic (AI review of dream text, and web search for provider options), Expo (app updates), Cloudflare (stops bots on the sign-in screen), GitHub (hosts the website), and later Twilio (sends phone codes by text message). They process data only to provide their service to us.

Where your information is stored

In the United States. Our database, files and sign-in run on Supabase, which uses Amazon Web Services data centers in Northern California. Stripe, Resend, Anthropic, Cloudflare and our other providers also work from the United States. If you use Wishtide from Mexico, Colombia or another country, your information is sent to and kept in the United States.

How we keep it safe

Every connection is encrypted (HTTPS). Our database, files and backups are encrypted where they are stored. Database rules let each person see only their own private details, and every admin action is logged. Before Wishtide moves real money, an independent security engineer will review and test the app.

If there is a security problem

If we learn that someone got into personal information without permission, we will stop it, change our keys, find out what happened, and tell the people affected and the authorities as the law requires, including California's data breach law. We will tell you what happened, what information was involved and what you can do.

How long we keep it

We keep your information while you have an account. When you delete your account, we close your open dreams, remove your name and age from past dreams, delete your profile, votes, taps, reports and group-check details (quotes, emails and codes), notes of encouragement you wrote or received, and what your dream meant to you, and ask Stripe to erase your ID-check data. We keep a record of past gifts without your name, because stores and wishmakers rely on it. For safety and the law, we keep a record of gifts, refunds, payouts and account decisions (amounts, dates and account ids, never your messages) for 5 years, even after you delete your account. Emergency contacts, legal names and trip dates are deleted with your account; the bookings log is a money record and is kept for 5 years like the others. Backups are cleared on their normal schedule.

Your choices and rights

You can delete your account at any time in the app: My dreams, then "Delete my account". You can also email us to see, correct or delete your information. California residents have these rights under California law, and we will not treat you differently for using them. If you live in Mexico, you can ask to access, correct or delete your information, or object to how we use it (your ARCO rights). If you live in Colombia, you can know, update and correct your information, withdraw your permission, and complain to the Superintendencia de Industria y Comercio. Write to wishtide.app@gmail.com for any of these; we answer within the time your country's law requires.

Children

Wishtide is for people 18 and older. We do not knowingly collect information from children.

Changes

If we change this policy in an important way, we will tell you in the app before the change applies.

Questions: wishtide.app@gmail.com