Younger LLC, 1309 Coffeen Avenue STE 19707, Sheridan, Wyoming 82801, USA is responsible for the personal information described here. Contact: piqpair@gmail.com, subject “HeyWisho privacy”. This policy explains the current preview and the connected features when they are enabled; US operation does not exclude privacy rights that apply elsewhere.
1. Information involved
Greetings can contain sender and recipient names, relationship, occasion, optional age, personal details, message text, pronunciation hints and language or design choices. If you enter them, recipient email, delivery time and timezone are also personal information. Account use involves your email, account identifiers and authentication information. Orders involve the approved greeting version, payment references, status and production or delivery records. The optional photo feature also involves the uploaded image and records of your permission and consent confirmation. Guest checkout also involves a private guest identifier, your contact email and order records. An optional Google sign-in shares basic identity information, such as your email, name, profile image and Google identifier, with Supabase for authentication. We do not request access to your Gmail messages, contacts or Google Drive.
We also receive information you send to support and technical request information such as IP address, browser information and timestamps for operation and security. Provide only information necessary for the greeting, including when it concerns someone else.
2. What stays on your device and what is sent
Drafts, workflow progress, local envelope previews and theme preferences are kept in your browser. Saving a wish, uploading a photo, using live writing assistance or checking out can establish a private guest session and send the relevant information to our server. Guest access is tied to this browser; sign-in can preserve access across devices. Other people using the same browser may see local drafts. Downloaded previews are saved on your device.
Using the writing companion sends the conversation and current greeting draft to the HeyWisho server, including in demo mode. Connected account features can save drafts, approved versions, orders and media in cloud storage so they can be retrieved and delivered. Photo uploads are sent to our server, which strips embedded EXIF metadata before saving a private copy in S3-compatible storage on our VPS; related database records are held in Supabase. An approved, immutable order identifies its selected photo. Within HeyWisho, only the account owner and authorized administrators can access that private reference.
3. Purposes and legal bases
We process information to create and save requested greetings, provide writing assistance, authenticate users, handle orders, make approved gifts available, support users, prevent abuse and comply with legal obligations.
Where a legal basis is required, we rely on contract performance for your requested services, legal obligations for required records, and legitimate interests for proportionate security, support and delivery of a greeting to its intended recipient, balanced against affected people's rights. We seek consent where legally required and allow its withdrawal for future processing. The sender must have a lawful basis for supplying another person's information.
4. Service providers and AI
When configured, Supabase supports authentication, database records and private media storage. Stripe handles enabled checkout and payment information; we keep payment references and status rather than full card details. Hosting and operational providers process the information needed to run the service.
Live writing assistance sends the conversation and relevant draft text to Anthropic to generate a Claude response. Structured recipient-email and scheduling fields are excluded, but personal information included in free text is not automatically anonymized. Provider processing and retention are subject to the applicable terms and arrangements; we do not promise that no security records are retained.
For an approved order using manual video production, authorized staff may submit the approved greeting and, if selected, its photo reference to Higgsfield to make the requested result. This is a staff-operated workflow, not automatic generation by the app. Voice cloning remains unavailable. Demo and test transactions do not charge real money; completing production does not itself send recipient email. Before material changes to this processing, we will describe them and obtain any required consent. We do not use private greetings or uploaded photos to train our own AI models.
6. Cookies and browser storage
Browser storage remembers your greeting draft, workflow step, draft identifiers, local gift preview and chosen theme. A language cookie can remember your locale for the session. When sign-in is enabled, Supabase authentication and verification cookies maintain the session. Their expiry also depends on authentication settings; they are not all session-only cookies. Stripe may use its own technologies on checkout pages. Private guest-session cookies support guest access. A separate, HttpOnly guest-claim cookie lasts up to seven days and can securely associate existing guest work with an account after verified sign-in; it is removed after a successful claim.
The current app contains no advertising pixels or third-party analytics tools; fonts are served locally. You can clear site data in your browser, which may remove drafts and sign you out. The local draft-delete control removes the draft on this device, not all server records. Optional tracking, if introduced, will be explained and subject to consent or opt-out requirements that apply.
7. Retention and deletion
Local drafts and preferences have no automatic expiry and remain until you remove them or clear site data. Cloud drafts, approved versions, order records and media may need to remain available to fulfill the service, operate gift access, address disputes and satisfy legal recordkeeping requirements. Retention depends on those purposes and the information involved; a gift link's expiry does not itself delete its underlying records. The photo upload record has a 30-day expiry for eligibility at order approval; that expiry does not delete the photo. Automated photo cleanup is not implemented. Photo retention otherwise follows the purposes and deletion-request process described here.
You may request deletion through the contact above. We assess what can be removed and what must be retained for a legal obligation or another lawful reason. The app does not currently provide complete self-service account deletion or automatic deletion of every stored copy. Deleting a local draft or signing out is not a request to erase all cloud data.
8. US operation and international processing
Younger LLC operates from the United States. Information may be processed in the United States and in other countries where enabled providers operate; US operation does not mean every database is located in the United States. Where international-transfer rules apply, an appropriate lawful mechanism, such as applicable standard contractual clauses or another recognized safeguard, is required. We do not claim that a particular hosting region or Data Privacy Framework certification has been verified for this preview.
You can contact us for information about the providers and transfer safeguards applicable to your use. We will not treat acceptance of this policy as a blanket waiver of international-transfer protections.
9. Your privacy rights
Depending on the law applicable to you and us, you may request access, correction, deletion, portability or restriction, object to certain processing, withdraw consent or complain to a competent supervisory authority. Residents of US states may also have applicable appeal and opt-out rights. We do not assume every state law applies to every business or user.
Send requests to piqpair@gmail.com with the subject “HeyWisho privacy”. We may verify your identity and an authorized representative's authority in a proportionate way. We respond within applicable legal deadlines and explain any lawful refusal or appeal route. Exercising a protected right does not result in unlawful discrimination. Recipients may also contact us about information in a greeting.
10. Sale, sharing and targeted advertising
In the current service we do not sell personal information, share it for cross-context behavioral advertising, or use targeted advertising. Operational disclosures to providers and recipients are described above. We do not use sensitive personal information to infer personal characteristics. If relevant activities change, we will update this policy and implement required choices, including applicable opt-out preference signals, before that processing starts.
11. Children and security
The creation service is intended for adults and is not offered as a service for children to create accounts or purchase greetings. We do not knowingly collect account information directly from children under 13. An adult's greeting may mention a child only where lawful and appropriately authorized; avoid unnecessary identifying or sensitive details. Contact us if a child has submitted personal information so that we can assess and address it.
We use access controls and private media access for connected features, but no online service can guarantee absolute security. Greetings are not end-to-end encrypted. Protect your account, shared device and gift links, and do not submit information that the greeting does not need.
12. Changes and contact
We update this policy when the service or relevant processing changes, display the revised date and provide additional notice or request consent where required. For privacy, provider, retention or transfer questions, contact Younger LLC at the address above or piqpair@gmail.com with the subject “HeyWisho privacy”.