Privacy Policy

1. Who We Are

WishLeaf is operated by DreamRove LLC, a company established in the United States.

If you have questions, requests, or complaints regarding this Privacy Policy or our handling of personal information, you may contact us using the information above.

2. Information We Collect

We process personal information only to the extent reasonably necessary to provide, maintain, secure, and operate WishLeaf.

2.1 Account and Profile Information

When you create or use a WishLeaf account, we may process:

• your email address;
• your unique account identifier;
• the name or nickname you provide;
• pronouns;
• time zone;
• language, theme, and other app preferences;
• registration, login, and account status information.

If you choose to sign in with Apple or Google, we may receive account identifiers and limited profile information provided by those services based on your authorization, such as your email address or name.

Account authentication is handled through our authentication service provider. WishLeaf does not store your password in plain text.

2.2 Content You Create or Save

To provide WishLeaf’s core features, we may store content that you create, save, or generate while using the service, including:

• tasks, subtasks, and task completion records;
• wishes, wish paths, and milestones;
• notes and records associated with your wishes;
• AI conversations and related chat history;
• text you submit to AI-powered features;
• Daily Reflection content, notes, observations, and next-day messages;
• weekly reports and related content;
• focus activity records;
• plant growth, watering, and garden records;
• your selections, acceptance, or adjustments of AI-generated suggestions;
• feedback and issue descriptions you submit to customer support.

This content may contain personal information that you choose to provide.

2.3 Usage and Service Data

To operate WishLeaf, manage feature usage limits, maintain service reliability, and prevent abuse, we may process:

• feature usage information;
• AI feature usage frequency and volume;
• task completion activity;
• wish and milestone progress;
• focus activity and duration;
• the type of AI feature used and related technical records;
• request timestamps, error states, and service logs;
• app settings and feature states;
• usage of free and paid feature allowances;
• subscription status and related entitlements.

This information is used to provide, secure, and maintain WishLeaf. We do not use it to build profiles for third-party targeted advertising.

2.4 Device and Notification Information

If you enable push notifications, we may process information needed to deliver those notifications, including:

• push notification device tokens;
• notification preference status;
• device platform and locale where needed for delivery;
• technical information related to notification delivery.

You can disable WishLeaf notifications at any time through your device settings.

WishLeaf’s core features do not currently require access to your contacts, text messages, photo library, or precise location.

2.5 Security and Abuse-Prevention Information

To protect WishLeaf, prevent fraud and account abuse, and detect attempts to improperly obtain or bypass free usage allowances, we may process necessary account and technical signals and generate hashed or similar identifiers used to identify repeated or abnormal usage patterns.

We use this information only for purposes such as:

• account and service security;
• free and paid usage-limit management;
• fraud and abuse prevention;
• investigation of abnormal activity.

We do not use these identifiers for advertising or third-party advertising profiles.

2.6 Payment and Subscription Information

In-app purchases and subscriptions for WishLeaf are processed through the Apple App Store, Google Play, or another applicable app marketplace.

WishLeaf does not directly collect or store your full payment card number, bank account number, or payment card security code.

To verify and manage subscriptions, we may receive information from app marketplaces or subscription-management providers, including:

• whether you have made a purchase or subscribed;
• the type of subscription or product;
• current subscription status;
• subscription expiration or renewal information;
• receipts, transaction identifiers, or other purchase-status information necessary for subscription verification.

3. Sensitive Information and Free-Form Content

WishLeaf does not require you to provide government identification numbers, bank account information, medical records, or similar highly sensitive information in order to use its core features.

However, WishLeaf allows you to freely enter text in features such as tasks, wishes, notes, Daily Reflection, and AI conversations.

Information you voluntarily provide may therefore relate to:

• physical health;
• mental or emotional well-being;
• personal habits;
• relationships;
• work or education;
• other private aspects of your life.

Please provide only information that you are comfortable having processed for the relevant WishLeaf feature.

In particular, when using AI-powered features, please avoid submitting information that is not necessary for your request, such as:

• government identification numbers;
• bank account or payment card information;
• passwords or authentication credentials;
• complete medical records;
• other unnecessary highly sensitive personal information.

4. How We Use Your Information

4.1 Providing WishLeaf’s Core Features

We use necessary information to:

• create and manage your account;
• create and manage tasks;
• create, display, and progress wishes and milestones;
• save daily records and reflections;
• record focus activity;
• provide plant-growth and garden features;
• save and synchronize account data;
• restore your content and settings across supported devices;
• display relevant activity and history.

4.2 Providing AI-Powered Features

WishLeaf includes AI-powered features such as:

• AI conversations;
• task suggestions;
• task breakdowns;
• plan adjustments after setbacks;
• wish planning;
• wish path and milestone generation;
• daily planning;
• Daily Reflection;
• weekly reports;
• other features clearly identified as AI-powered.

When you actively use an AI-powered feature, we may send to the relevant AI service provider:

• the content you submit for that request; and
• contextual information reasonably necessary to perform the requested feature.

Depending on the feature, this context may include:

• related tasks;
• wishes and wish descriptions;
• current or relevant milestones;
• recent activity;
• daily records or notes;
• relevant conversation history;
• other WishLeaf content reasonably necessary to generate the requested result.

We do not automatically send all content in your WishLeaf account to an AI service provider simply because you use one AI-powered feature.

We provide disclosures and obtain consent where required by applicable law or platform requirements.

4.3 Managing Free and Paid Usage Limits

We may process necessary AI and feature usage information to:

• determine whether a feature is currently available to your account;
• manage free and paid usage allowances;
• prevent repeated claims or circumvention of free allowances;
• prevent malicious or automated abuse;
• maintain stable and fair operation of WishLeaf.

4.4 Sending Notifications

If you enable relevant notifications, we may send you:

• task reminders;
• Daily Reflection-related notifications;
• plant growth or harvest notifications;
• weekly review notifications;
• notifications related to features you have enabled;
• necessary account or service communications.

You can manage optional notifications through WishLeaf or your device settings.

4.5 Protecting Security and Service Reliability

We may use necessary information to:

• diagnose errors;
• monitor service reliability;
• detect abnormal requests;
• prevent fraud and abuse;
• protect accounts and systems;
• investigate violations of our Terms of Service;
• comply with applicable legal obligations.

4.6 Improving WishLeaf

We may use aggregated, statistical, or appropriately de-identified information to understand:

• overall feature usage;
• whether product flows are operating correctly;
• which features may need improvement;
• service performance and reliability.

We do not build cross-service advertising profiles for third-party advertising purposes.

4.7 Legal Bases Where Required

Where applicable law requires us to identify a legal basis for processing personal information, we generally rely on one or more of the following:

• processing necessary to provide WishLeaf or a feature you request;
• your consent, where we ask for it;
• our legitimate interests in operating, securing, maintaining, and improving WishLeaf, where permitted by law;
• compliance with applicable legal obligations.

The applicable basis may depend on the information involved, the feature you use, and the law that applies to you.

5. Who We Share Information With

We do not sell or rent your personal information.

We do not disclose your personal information to third parties for cross-context behavioral or third-party targeted advertising.

To operate WishLeaf, we may share information that is reasonably necessary with service providers such as:

We provide service providers only with information reasonably necessary for the relevant service.

We take reasonable steps to select service providers that maintain appropriate privacy and security protections, and we use applicable contractual terms and other safeguards designed to require personal information shared with them to be handled consistently with this Privacy Policy and applicable law.

Service providers may maintain their own privacy policies governing information they independently receive from you, such as information provided directly to Apple or Google in connection with an app-store account or payment.

We may also disclose personal information where reasonably necessary to:

• comply with applicable law, legal process, or an enforceable government request;
• protect the rights, safety, and security of WishLeaf, our users, or others;
• investigate fraud, abuse, or security incidents;
• establish, exercise, or defend legal claims;
• complete a merger, acquisition, financing, reorganization, sale, or transfer of all or part of our business, subject to applicable legal requirements.

If WishLeaf later adds a significant service provider that processes personal information, we may update this Privacy Policy and related disclosures as appropriate.

6. Additional Information About AI Services

Certain WishLeaf features rely on third-party artificial intelligence services.

WishLeaf sends information to an AI service provider only when reasonably necessary to perform the AI-powered feature you are using.

For example, if you ask WishLeaf to create a daily action plan based on one of your wishes, the request may include:

• the relevant wish;
• your current milestone;
• existing related tasks;
• recent activity relevant to the requested plan.

Information sent to an AI provider may therefore include more than the final sentence or prompt you entered when additional context is needed to perform the feature.

WishLeaf does not automatically send all of your tasks, all chat history, or your entire account history to an AI provider simply because you use one AI-powered feature.

The specific AI provider used may vary depending on the feature, technical requirements, model availability, reliability, or service configuration.

7. International Data Processing and Transfers

WishLeaf is operated by DreamRove LLC, a United States company.

We and our service providers may store or process personal information in the United States and other countries or regions where we or those providers operate.

As a result, your personal information may be processed outside the country or region where you live, and the privacy or data-protection laws in those locations may differ from those in your jurisdiction.

Where required by applicable law, we take reasonable steps designed to protect personal information transferred across borders, including through appropriate contractual, organizational, or technical safeguards where applicable.

We may update this Privacy Policy if our data-processing arrangements materially change.

8. Information Security

We use reasonable technical and organizational safeguards designed to protect personal information, including:

• HTTPS/TLS and similar technologies for network transmission;
• professional authentication and cloud infrastructure services;
• appropriate handling of authentication credentials;
• access-control and permission measures;
• reasonable restrictions on access to personal information;
• technical logging and monitoring used to detect abnormal activity, security issues, and service errors.

However, no internet transmission, electronic storage system, or information system can be guaranteed to be completely secure.

If a personal-information security incident occurs and applicable law requires notification, we will take appropriate steps and notify affected users and relevant authorities where required.

9. Data Retention and Account Deletion

9.1 Data Retention

We retain personal information only for as long as reasonably necessary to:

• provide WishLeaf;
• maintain your account;
• preserve content you choose to keep;
• protect security and prevent fraud or abuse;
• manage subscriptions, transactions, and disputes;
• establish or defend legal claims;
• comply with applicable legal obligations.

Generally, while your account remains active, we retain content you choose to save, such as tasks, wishes, chat history, Daily Reflection content, plant-growth data, and related account information.

9.2 Account Deletion

You may request deletion of your WishLeaf account through the account-deletion feature in the app.

WishLeaf currently provides a 7-day deletion grace period.

During this grace period, logging back into your account may cancel the deletion request.

After the grace period ends, we will begin deleting or de-identifying account-related personal information and user content that we no longer need to retain, including associated:

• wishes;
• milestones;
• tasks;
• daily records;
• chat content;
• plant and growth data;
• other related historical content.

Certain limited information may be retained where reasonably necessary for:

• fraud prevention and service security;
• legal or regulatory obligations;
• financial, transaction, or dispute handling;
• prevention or investigation of serious abuse;
• normal backup and disaster-recovery rotation;
• records independently retained by Apple, Google, RevenueCat, or other service providers under their own legal obligations.

Information remaining temporarily in backup systems will not be used to restore a deleted account for ordinary continued use and will be deleted or overwritten through normal backup rotation.

9.3 Account Deletion Does Not Cancel Store Subscriptions

Deleting your WishLeaf account does not automatically cancel a subscription purchased through the Apple App Store or Google Play.

If you have an active auto-renewing subscription, you should manage or cancel it through the applicable app marketplace.

10. Your Privacy Rights

Depending on where you live and the laws that apply to WishLeaf’s processing of your information, you may have some or all of the following rights:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of certain personal information;
• request a copy of certain personal information;
• withdraw consent where processing is based on your consent;
• request restriction of or object to certain processing where applicable law provides such a right;
• manage optional features and notification settings;
• submit a complaint regarding our handling of personal information;
• contact a privacy or data-protection authority with jurisdiction over you, where applicable.

These rights are not absolute and may vary depending on your location, the information involved, how the information is processed, and applicable law.

Some account information and preferences can be changed directly within WishLeaf.

10.1 Privacy Requests and Copies of Your Data

If you would like to:

• access personal information we hold about you;
• obtain a copy of relevant personal information;
• correct information that cannot be changed directly in WishLeaf;
• make another privacy request available to you under applicable law;

please contact:

To protect your account and personal information, we may reasonably verify your identity before completing certain requests.

We will respond to verified requests within the period required by applicable law.

Nothing in this Privacy Policy is intended to limit any privacy right or protection that cannot lawfully be limited or waived.

11. Children and Minors

WishLeaf is a general productivity, planning, and personal-growth application and is not designed specifically for children.

WishLeaf is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13.

If the law where you live requires a higher age or parental or guardian authorization before you may independently consent to certain processing of personal information, those requirements apply.

If we learn that we collected personal information from a child in circumstances where we were not legally permitted to process it, we will take reasonable steps to delete the information.

If you are a parent or guardian and believe that a child has provided personal information to WishLeaf without appropriate authorization, please contact:

12. What We Do Not Do

To make WishLeaf’s data practices clearer:

• We do not sell your personal information.
• We do not rent your personal information.
• We do not disclose your personal information for third-party targeted or cross-context behavioral advertising.
• We do not directly obtain or store your full bank-account or payment-card information.
• We do not require access to your contacts, text messages, photo library, or precise location to provide WishLeaf’s core features.
• We do not automatically send all of your WishLeaf data to an AI provider simply because you use one AI-powered feature.

If WishLeaf’s data practices materially change, we will update the relevant disclosures and obtain permission or consent where required by applicable law or platform rules.

13. Changes to This Privacy Policy

We may update this Privacy Policy as WishLeaf’s features, service providers, infrastructure, or legal obligations change.

When we do, we will update the Last Updated date at the top of this Policy.

If a change materially affects how personal information is processed, we may provide notice through:

• an in-app notice;
• email;
• a prominent notice within WishLeaf or our website;
• another reasonable method.

Where applicable law or platform rules require consent or another form of authorization for a new type of processing, we will obtain the required authorization before beginning that processing.

14. Contact Us

If you:

• have questions about this Privacy Policy;
• want to access, correct, or delete personal information;
• want a copy of relevant personal information;
• want to make a privacy complaint;
• believe personal information has been handled improperly;
• believe a child may have provided personal information to WishLeaf without appropriate authorization;

please contact:

We will respond as soon as reasonably practicable and within any period required by applicable law.