That's the whole design. Here's everything behind it, in plain language.
Everything you put into FirstWish lives in the app's private storage on your device: the people you add, their phone numbers and birthdays, your relationship/tone/language choices, any personal notes, generated messages, and your settings. FirstWish has no accounts and no server-side database of users, so this information is never uploaded, backed up to our servers, or visible to us.
When you import from your contacts, FirstWish reads your contact list on the device only, shows it to you, and saves just the people you tick. The rest of your contact list is not stored, transmitted, or looked at again.
The one moment FirstWish uses the internet for your data is when it writes a birthday message. To do that, the app sends our server:
The reply — the birthday message — is shown to you and cached on your device. Our server does not keep the request or the message. The only thing stored server-side is a daily counter per install ID, and those counters are automatically deleted after 30 days.
One exception, and it's in your hands: if you tap Report on a message you think the AI got wrong, that message text and its settings (occasion, tone, language, relationship — never the person's name or number) are sent to us and kept until we've reviewed it, at most 90 days — it's the only content we ever store, and only because you chose to send it.
Two service providers help deliver this feature: Supabase hosts the small function that receives the request, and Anthropic provides the AI model that writes the message. Both act as processors for us; neither receives phone numbers or your contact list. Per Anthropic's API terms, data sent to its API is not used to train its models.
Upgrades are one-time purchases made through Google Play or the Apple App Store. The stores process the payment and tell the app only that the purchase succeeded. We never receive your card number, billing address, or store account details.
FirstWish contains no advertising, no ad SDKs, and no third-party analytics or tracking libraries. We do not sell, rent, or share personal information with anyone for marketing. We do not build profiles of you or the people you add.
Your data stays on your device for as long as you keep the app. Deleting a person removes them immediately; uninstalling the app removes everything. Server-side, the anonymous daily counters are deleted automatically after 30 days, and reported messages are deleted once reviewed (or on request). If you'd like us to confirm deletion of anything on our side, email us and we'll respond within 30 days.
FirstWish is not directed at children under 13, and we do not knowingly collect personal information from them.
Because your information lives on your device, you're already in full control of it: view, edit or delete anything inside the app at any time. Depending on where you live (for example under South Africa's POPIA, India's DPDP Act, or US state privacy laws) you may also have rights to access or delete personal data held by us — email us and we'll help, though in almost every case the honest answer will be that we hold nothing about you beyond an anonymous counter.
If we change how FirstWish handles data, we'll update this page and the effective date below, and for meaningful changes we'll say so in the app's release notes before the change applies.
FirstWish is made by AEK Solutions, South Africa.
Questions or requests: support@firstwish.co