LoopWish

Privacy Policy

Effective 2 September 2026 · Terms of Service

LoopWish ("we") is a shared wishlist app for families and friend groups, available for iOS and as a web app at loopwish.app. This policy explains what data we handle, why, and the choices you have. Contact: hei@loopwish.app.

What we collect

  • Account. When you sign in with Google or Apple we receive your name, email address and a user ID. We never see your password.
  • Content you create. Profiles (name, optional birthday and avatar), wishlists, wishes (titles, links, prices, notes, photos), groups, friendships, and gift reservations ("claims"). Claims are hidden from the wish's owner by design.
  • AI search. When you use AI-powered gift search, your query and the optional context you have set (such as a profile's age range or a budget) are sent to our server, which uses Google Gemini and the Adtraction product feed to find products. Queries are used to answer your search and for short-lived, anonymised result caching (keyed by the query text, not by you). We store a daily usage counter on your account.
  • Devices and notifications. If you enable push notifications we store a push token for each device.
  • Anonymous counters. Our own analytics consist of event counters (for example "a wish was created") that contain no identifier of any kind. We use no third-party analytics or advertising SDKs, and we do not track you across other apps or websites.
  • App integrity. To protect the service from abuse, requests are attested with Apple App Attest (iOS) or Google reCAPTCHA Enterprise (web).

How we use it

Only to run LoopWish: syncing your lists between devices, sharing them with the people you choose, sending the notifications you asked for, answering AI searches, and keeping the service secure. We do not sell your data and we do not show ads.

Where it is processed

Data is stored in Google Firebase (Cloud Firestore and Cloud Storage). Our processors are Google (Firebase, Gemini, reCAPTCHA Enterprise) and Adtraction (product search; receives search terms only, never your identity). Data may be processed in the EU and the United States under the EU–US Data Privacy Framework and standard contractual clauses.

Sharing

Your lists are visible only to you and the people you explicitly share with. If you create a public share link, anyone with that link can see that list until you revoke the link. Some product links are affiliate links: the retailer's network (Adtraction) registers the click, and we may earn a commission — described in the app under "How we earn".

Retention and deletion

We keep your data for as long as you have an account. You can permanently delete your account — including profiles, wishlists, wishes, photos, friendships and share links — directly in the iOS app (Settings → Delete Account) or in the web app (Profile → Danger zone). Deletion is immediate and cannot be undone.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your data, ask for a copy in a portable format, and object to processing. Write to hei@loopwish.app. You can also complain to your data protection authority (in Norway: Datatilsynet).

Children

Family profiles for children are created and managed by the account owner (a parent or guardian). Children do not have their own accounts.

Changes

If we change this policy we will update this page and the effective date above.