Effective October 25, 2026
Privacy Policy
This policy explains what Santa Wishlist collects, why, and the choices you have. Santa Wishlist is operated by Enzak LLC. We wrote it to be read by a tired parent, not a lawyer.
The short version
- Santa Wishlist is parent-operated. You are the account holder, you hold the phone, and children do not create accounts.
- Santa's replies are AI-generated.
- Photos are stored privately and are deleted when you delete your account.
- We do not sell your data, and we do not share it for advertising.
- We do not use your messages or photos to train AI models.
- A child's name and age are optional. If you add them, we store them only to personalize Santa's replies.
- You can delete your account at any time.
Who we are
Santa Wishlist is operated by Enzak LLC, based in Orange County, California. In this policy, "we" and "us" mean Enzak LLC. You can reach us at [email protected].
Parents and children
Santa Wishlist is for adults. You must be 18 or older to create an account, and you confirm that you are a parent or guardian when you sign up. You hold the phone and you decide what to enter. Children do not create accounts, and we do not knowingly collect personal information directly from children.
Information about a child, such as a first name or nickname, an age and an avatar, is optional and is provided by you. We store it only to make Santa's replies feel personal. If you believe a child has given us personal information on their own, email [email protected] and we will delete it.
What we collect
| What | Details | Why |
|---|---|---|
| Account | Email address and a sign-in method (password, Apple or Google) | To create and secure your account |
| Parent PIN | Stored only as a one-way hash. We cannot read it. | To lock the gift list |
| Kid profile (optional) | First name or nickname, age, avatar | To personalize Santa's replies |
| Messages and photos | Text you type, photos you take, Santa's replies, and the gift items pulled from them | To run the chat and build your list |
| Purchases | Which product you bought and when. We never see your card number. | To add Candy Canes or the Season Pass |
| App usage and errors | App version, device type, crash reports and basic events such as a message sent | To fix bugs and improve the app |
| Website visits | Pages viewed and general location from our analytics tools | To see which pages help parents |
| Email list (optional) | The email address you give us on this website | To tell you when the app launches and about next season |
AI-generated content
Santa's replies are generated by AI and reviewed by automated safety filters. To produce a reply, we send your message, your photo if you attach one, and the optional name and age you entered to an AI service provider that works for us. Providers process this content to return a reply and run safety checks.
We do not use your messages or photos to train AI models.
Photos
Photos are stored in private storage. They are shown to you only through short-lived links, and they are deleted when you delete your account. Remove a kid from the app and their chat and list go with them.
Keeping and deleting data
We keep your account data while your account is open. Your gift lists, photos and chats stay even if you run out of Candy Canes.
To delete everything, open Settings in the app and choose Delete account, or read how to delete your account. Deleting removes your kid profiles, chats, photos, gift lists and PIN hash. We may keep a purchase record for as long as tax and accounting law requires. Copies in backups are removed as the backups expire.
Security
We use encryption in transit, access controls, a hashed PIN, short-lived photo links and a gift list that locks itself after two minutes. No system is perfectly secure, so please use a PIN you do not share and keep your phone up to date.
Your choices and rights
You can see, correct or delete your information in the app, or by emailing [email protected]. If you are a California resident, you have the right to know what personal information we collect, to ask us to delete or correct it, and to be free from discrimination for using these rights. We do not sell or share personal information as those terms are defined under California law, so there is nothing to opt out of.
To stop emails from the launch list, use the unsubscribe link in any email or write to us.
This website
This website uses analytics tools to count visits and see which pages are useful. It does not show ads. We use the email address you give us only for the launch and next-season emails you asked for.
Where data is processed
Santa Wishlist is operated from the United States, and your information is processed and stored in the United States and in the locations of our service providers.
Changes to this policy
If we make a meaningful change, we will update the date at the top and, for big changes, tell you in the app or by email before it takes effect.
Contact
Questions about this policy? Email [email protected]. Enzak LLC, Orange County, California.