--- title: "Santa Wishlist Privacy Policy" description: "How Santa Wishlist handles your data in plain English: parent-operated, AI-generated replies, private photos deleted with your account, no data sold, no AI training." url: "https://santawishlist.app/privacy" updated: "2026-10-25" --- # Privacy Policy This policy explains what Santa Wishlist collects, why, and the choices you have. Santa Wishlist is operated by Enzak LLC. It is written to be read by a tired parent, not a lawyer. ## The short version - Santa Wishlist is parent-operated. You are the account holder, you hold the phone, and children do not create accounts. - Santa's replies are AI-generated. - Photos are stored privately and are deleted when you delete your account. - We do not sell your data, and we do not share it for advertising. - We do not use your messages or photos to train AI models. - A child's name and age are optional. If you add them, we store them only to personalize Santa's replies. - You can delete your account at any time. ## Who we are Santa Wishlist is operated by Enzak LLC, based in Orange County, California. In this policy, "we" and "us" mean Enzak LLC. You can reach us at support@santawishlist.app. ## Parents and children Santa Wishlist is for adults. You must be 18 or older to create an account, and you confirm that you are a parent or guardian when you sign up. You hold the phone and you decide what to enter. Children do not create accounts, and we do not knowingly collect personal information directly from children. Information about a child, such as a first name or nickname, an age and an avatar, is optional and is provided by you. We store it only to make Santa's replies feel personal. If you believe a child has given us personal information on their own, email support@santawishlist.app and we will delete it. ## Family members - The account owner can invite family members, up to three more people, with a link or a code. - People the owner invites can see the kids, their chats with Santa and the wish list. They can also send messages to Santa. - Each person signs in with their own login and their own PIN. The kids, chats, wish list and candy canes are shared. - Anyone can leave a family at any time, and the owner can remove anyone. ## What we collect | What | Details | Why | | --- | --- | --- | | Account | Email address and a sign-in method (password, Apple or Google) | To create and secure your account | | Parent PIN | Stored only as a one-way hash. We cannot read it. | To lock the gift list | | Kid profile (optional) | First name or nickname, age, avatar | To personalize Santa's replies | | Messages and photos | Text you type, photos you take, Santa's replies, and the gift items pulled from them | To run the chat and build your list | | Purchases | Which product you bought and when. We never see your card number. | To add Candy Canes or the Season Pass | | App usage and errors | App version, device type, crash reports and basic events such as a message sent | To fix bugs and improve the app | | Website visits | Pages viewed and general location from our analytics tools | To see which pages help parents | | Email list (optional) | The email address you give us on this website | To tell you when the app launches and about next season | ## AI-generated content Santa's replies are generated by AI and reviewed by automated safety filters. To produce a reply, we send your message, your photo if you attach one, and the optional name and age you entered to an AI service provider that works for us. Providers process this content to return a reply and run safety checks. We do not use your messages or photos to train AI models. ## Photos Photos are stored in private storage. They are shown to you only through short-lived links, and they are deleted when you delete your account. Remove a kid from the app and their chat and list go with them. ## Who we share data with We do not sell your personal information and we do not share it for advertising. We share data only with service providers that help us run Santa Wishlist, and only what they need: - Hosting, database and file storage (Supabase) - AI providers that generate and check replies - Purchase handling (RevenueCat, plus Apple or Google for payment) - Error reporting (Sentry) and product and website analytics (PostHog, Google Analytics) - Email delivery for the launch list (Resend) We may also disclose information if the law requires it, to protect someone's safety, or as part of a sale or transfer of the business. If that ever happens we will tell you. ## Keeping and deleting data We keep your account data while your account is open. Your gift lists, photos and chats stay even if you run out of Candy Canes. To delete everything, open Settings in the app and choose Delete account, or read [how to delete your account](/delete-account). Deleting removes your kid profiles, chats, photos, gift lists and PIN hash. We may keep a purchase record for as long as tax and accounting law requires. Copies in backups are removed as the backups expire. ## Security We use encryption in transit, access controls, a hashed PIN, short-lived photo links and a gift list that locks itself after two minutes. No system is perfectly secure, so please use a PIN you do not share and keep your phone up to date. ## Your choices and rights You can see, correct or delete your information in the app, or by emailing support@santawishlist.app. If you are a California resident, you have the right to know what personal information we collect, to ask us to delete or correct it, and to be free from discrimination for using these rights. We do not sell or share personal information as those terms are defined under California law, so there is nothing to opt out of. To stop emails from the launch list, use the unsubscribe link in any email or write to us. ## This website This website uses analytics tools to count visits and see which pages are useful. It does not show ads. We use the email address you give us only for the launch and next-season emails you asked for. ## Where data is processed Santa Wishlist is operated from the United States, and your information is processed and stored in the United States and in the locations of our service providers. ## Changes to this policy If we make a meaningful change, we will update the date at the top and, for big changes, tell you in the app or by email before it takes effect. ## Contact Questions about this policy? Email support@santawishlist.app. Enzak LLC, Orange County, California.