WishfilledPrivacy Policy
Last updated 29 August 2026
Wishfilled is a personal manifestation app. To write affirmations and visualisation stories that sound like your life, it asks you personal questions — and the answers are the most sensitive thing we hold. This page explains exactly what we collect, where it goes, and how to get rid of it.
The short version. You use Wishfilled without an email address or a password. We never sell your data and we run no advertising or tracking SDKs. Your onboarding answers are sent to our AI providers so they can write your content, and your text is sent to our voice provider when you play something aloud. Everything is tied to an anonymous account that lives on your device — so if you delete the app without asking us to delete your data first, we cannot find your records for you afterwards.
This policy applies to the Wishfilled mobile application (com.felt.affirmations.app) and this website. Wishfilled is operated by ROZ TECH LLC (“Wishfilled”, “we”, “us”). Questions go to contact@wishfilled.com.
1. Your account has no name attached
Wishfilled does not ask you to register. When you first open the app it creates an anonymous account — a random identifier stored on your device by our authentication provider. We do not collect an email address, a phone number or a password, and we have no way to look you up as a person.
Two consequences are worth understanding before you rely on the app:
- Your content does not follow you. If you switch phones, delete the app, or reset it, the anonymous identifier is gone and a fresh, empty account is created. Your stories and affirmations are not recoverable.
- We cannot identify your records from your email alone. If you want your data deleted, see section 11 — you will need to send us the identifier the app can show you.
2. What we collect
Everything below is information you give us, or that the app produces from what you gave us. Nothing here is bought from a data broker or scraped from elsewhere.
What you tell us during onboarding
- Your first name and age
- Your gender and sexuality
- Your location, as text you type — a city or country, not GPS
- Your relationship status, whether you have children, and your work and how you feel about it
- What you want to change, your biggest obstacle, and why it matters to you
- Your dream location, the kind of home you picture, and the partner you describe
- Free-text reflections — how you describe yourself, what has shaped you, and who you are manifesting for
- A referral code, if you entered one
What you tell us about the people in your life
- Important people: their names, their relationship to you, and any note you add
- Children: their names, ages, and any note you add
Your profile and preferences
- Display name, your stated goal and obstacle, and lifestyle tags
- Your “never include” list — words and subjects you have asked us to keep out of your content
- The desires you add or edit over time
- A profile photo, if you set one, from your camera or photo library
- Voice, music and ambient sound preferences
Content the app creates for you
- Your generated affirmations and visualisation stories, with their titles, categories, moods and cover images
- The prompt you typed when you asked for a specific story
- Audio we generate when you play a piece aloud, together with its word-level timings for on-screen captions
- What you have saved to your favourites
How you use the app
- Play history: what you played, how far through you got, and whether you finished
- Streaks: your current and longest run of active days, and the date you were last active
- Usage counters for voice generation — the number of characters converted to speech, so we can stay within our provider's limits
Voice recordings, only if you make one
If you choose to create a narration voice of your own, we record the sample you speak, store it, send it to our voice provider to build the voice, and record the time you gave consent. This feature is entirely optional and the app works fully without it.
Subscriptions
- Whether your subscription is active, which product you bought, which store it came from, whether you are in a trial, and when the period ends
- The identifier our subscription provider uses for you
Apple processes the payment itself. We never see your card details.
3. Sensitive information, and information about other people
Wishfilled asks for your sexuality. Under European and UK law this is a special category of personal data, and several US states treat it as sensitive too. We collect it only to write content that reflects your life accurately, we process it on the basis of your explicit consent given when you answer the question, and you may skip it. It is never used for advertising or profiling, and it is never sold.
Wishfilled also collects information about people who are not you — including the names and ages of your children. Those people have not agreed to this policy, so please share only what you are comfortable putting into a story, and only where you are entitled to share it. You can remove any person from your profile at any time.
4. What we do not collect
- No email address or password.
- No payment card details — those go to Apple, never to us.
- No GPS or precise location. Location is only ever the text you type.
- No contacts, calendar, or photo library scanning. We receive only the single image you pick.
- No advertising identifiers, no ad networks, no third-party analytics or tracking SDKs. Wishfilled shows no advertising and does no cross-app tracking, so there is nothing to opt out of.
- We do not sell or share your personal information as those terms are defined under US state privacy laws, and we never have.
5. How we use it
| What we do | Why |
|---|---|
| Generate your affirmations and stories | To deliver the service you asked for — this is the whole product |
| Read back your “never include” list before every generation | To keep out the subjects you told us to avoid |
| Turn text into audio when you press play | To deliver narration, and only on first play — we do not pre-render |
| Track streaks and play position | To resume where you stopped and show your progress |
| Check subscription status | To unlock the features you paid for |
| Count voice characters generated | To stay within provider limits and prevent abuse |
| Fix crashes and investigate faults | Our legitimate interest in a working app |
Legal bases (UK/EU). We rely on performance of a contract for generating and delivering your content and managing your subscription; explicit consent for your sexuality, your voice recording and your photo; and ourlegitimate interests in keeping the service secure, working and free from abuse. Where we rely on consent, you can withdraw it at any time — see section 11.
6. How your words reach our AI providers
This deserves its own section, because it is the part people most want to understand.
When Wishfilled writes for you, it assembles a description of you from your onboarding answers and profile — your name, age, gender, location, relationship status, work, the people you named, your goals, and your “never include” list — and sends it, along with any prompt you typed, to a third-party AI model which returns the text of your story or affirmations. When you play a piece aloud, the text is sent to a third-party voice provider, which returns audio.
What this means in practice:
- Your personal details leave our systems to reach these providers. They are bound by their own terms and by our agreements with them.
- We do not use your content to train AI models, and we do not permit our providers to train their models on it under our commercial terms.
- Do not type anything you would not want processed by a third party. The free-text prompt is yours to control — treat it accordingly.
7. Who we share it with
We share personal information only with the service providers below, only so far as they need it to do their job, and never for their own marketing.
| Provider | What it does for Wishfilled | What it receives |
|---|---|---|
| Supabase | Database, anonymous accounts, file storage, server functions | Everything described in section 2 — this is where your data lives |
| BytePlus (Ark) | The AI model that writes your stories and affirmations | Your profile description and any prompt you typed |
| ElevenLabs | Turns text into spoken audio; builds your custom voice if you make one | The text being narrated, and your voice sample if you recorded one |
| RevenueCat | Manages subscriptions and entitlements | Your anonymous account identifier and purchase status |
| Apple | App distribution and payment processing | Payment and billing details, handled entirely by Apple under its own privacy policy |
| Expo | Builds the app and delivers updates | Technical build and update data; no content of yours |
We may also disclose information where the law requires it, to enforce our Terms of Use, to protect someone's safety, or as part of a merger or acquisition — in which case we will say so here before your data changes hands.
8. Where your data goes in the world
Wishfilled is operated from the United States and our providers are international. Your information is processed in the United States and in Singapore, among other places, including our AI provider's servers in the Asia-Pacific region.
If you are in the UK, the EEA or Switzerland, this means your data leaves your country. We rely on the European Commission's Standard Contractual Clauses, or an adequacy decision where one applies, to protect it in transit and at rest.
9. Device permissions
| Permission | When we ask | What happens if you decline |
|---|---|---|
| Photo library | When you set a profile picture | You keep the default avatar; nothing else changes |
| Camera | When you take a profile picture | You can still choose an existing photo, or neither |
| Microphone | Only when you record a sample for your own narration voice | You use one of our voices instead; the app is otherwise unaffected |
| Notifications | At the end of onboarding, for practice reminders | You get no reminders; everything else works |
Every one of these is optional and can be changed at any time in your device's Settings. Reminders are scheduled on your device — we do not collect a push token or send messages to you from our servers.
10. How long we keep it
- Your profile and onboarding answers — for as long as your account exists, because every new piece of content is written from them.
- Your stories, affirmations and audio — until you delete them or ask us to delete your account.
- Voice samples — until you delete the voice or your account.
- Subscription records — for as long as needed to honour your purchase and to meet tax and accounting obligations, typically seven years.
- Usage counters — kept in aggregate for capacity planning after the link to your account is removed.
Because accounts are anonymous, we cannot automatically tell that you have stopped using Wishfilled. If you want your data gone, ask us — see below.
11. Your rights and how to use them
Depending on where you live, you have some or all of these rights: to access the data we hold, to correct it, to delete it, to a portable copy, to object to or restrict processing, and to withdraw consent at any time.
Much of this you can do yourself, immediately, inside the app: edit your profile, remove people and children, change your “never include” list, delete individual stories and affirmations, and delete your account from Settings.
To ask us instead, email contact@wishfilled.com and include your account identifier, which you will find in the app under Profile → Settings. We cannot act on a request without it, because an anonymous account has nothing else to match you on. We respond within 30 days, and we do not charge for this or treat you differently for asking.
If you are in the UK or EEA and you think we have got this wrong, you may complain to your national data protection authority. We would rather you told us first.
12. US state privacy rights
If you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana or another state with a comprehensive privacy law, you have the rights described in section 11, plus the right not to be discriminated against for exercising them.
We do not sell your personal information and we do not share it for cross-context behavioural advertising, so there is no opt-out to offer. California residents may also designate an authorised agent to make a request on their behalf. If we deny a request, you may appeal by replying to our decision; we will answer within 45 days.
13. Children
Wishfilled is not intended for children. You must be at least 13 years old to use it, and if you are under 18 you should have a parent or guardian's permission. We do not knowingly collect personal information from children under 13. If you believe a child has given us their information, email us and we will delete it promptly.
Note that Wishfilled does let adults record information about their own children — names and ages, entered by the parent. That data is treated as sensitive and is covered by everything in this policy.
14. Security
Your data is encrypted in transit and at rest. Every table is protected by row-level security, so one account cannot read another's rows even if the app were compromised. Profile photos and voice samples live in private storage reachable only through short-lived signed links. API keys for our AI and voice providers are held server-side and never shipped inside the app.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach ever affects your data, we will notify you and the relevant regulator as the law requires.
15. Changes to this policy
We will update this page when our practices change, and revise the date at the top. If a change is significant — a new category of data, or a new provider receiving your content — we will tell you in the app before it takes effect.
16. Contact us
ROZ TECH LLC
Wyoming, United States
contact@wishfilled.com
Ask us anything about this policy. A plain question by email is always enough — you do not need to use legal language to exercise a legal right.