The wish itself

Your wish and Guardian wording are processed to perform the current ritual. Completed rituals remain only on your device by default. WILLOW stores a completed record with your account only when you choose Keep with WILLOW and sign in.

Records we may retain

  • Account identifiers and authentication metadata managed by Supabase.
  • Entitlement state and a privacy-safe completion timestamp.
  • A privacy-safe Guardian request identifier, UTC date, and daily usage count used to enforce the 20-request free limit or 100-request paid limit. These quota records do not contain wish text or Guardian output and are ordinarily deleted after 35 days.
  • App Store and RevenueCat transaction, refund, and reconciliation records required for commerce, fraud prevention, tax, and accounting.
  • Gift fulfillment state and hash-only gift credentials.
  • A local, on-device Wish Archive containing wording from completed rituals, the selected wording mode, and the release date.
  • Completed Wish Archive records that you explicitly choose to upload to your account.

Service providers

Authentication and database services use Supabase. App Store purchases use Apple and may be normalized through RevenueCat. These providers receive only the information required to provide authentication, payment, fulfillment, and fraud-prevention services.

Deletion and retention

You may sign out or initiate account deletion inside WILLOW. Active account, entitlement, and completion data are removed. Financial records that must be retained are separated from the deleted account where possible and remain access-restricted.

Optional anonymous display

Anonymous public display is off by default and is separate from private cloud storage. If you choose Share anonymously, only the final released wording may enter review for public display. Your name, email, account identifier, original wording, and Guardian analysis are not displayed.

You may stop sharing without deleting the private cloud copy. Deleting a wish removes it from this device, its private cloud record, public review, and public display. Deleting all wishes performs the same removal for every wish in the signed-in account.

Financial records are retained only as required for tax, accounting, fraud prevention, refunds, or disputes and ordinarily for no longer than seven years.

Your choices

You may request access, correction, or deletion where applicable. This policy and the in-app deletion flow do not limit rights provided by applicable law.

Contact

For privacy requests or support, email csstudiomcn@outlook.com.