We are committed to protecting your privacy. This policy explains how WishPause collects, uses, and safeguards your personal data in accordance with Thailand's Personal Data Protection Act (PDPA).

1. Information We Collect

1.1 Information You Provide Directly

• Name and email (when signing up via Supabase Auth)
• Wishlist entries: item name, price, creation date, expiry date (created_at + 48 hours), and decision (bought / skipped)
• Comments and feedback (when contacting us)

1.2 Automatically Collected Information

• Usage data: Features used, time spent, number of items added
• Device data: Operating system, device model

1.3 Data We Do Not Collect

WishPause does not collect health data, location, microphone, camera, or any biometric information.

2. How We Use Your Information

We use your data to:

• Run the Wishlist Countdown feature and send 48-hour reminder notifications
• Display savings statistics and Streak tracking (Premium users)
• Communicate about your account and app updates
• Analyze and improve the product

3. Local Notifications

The app uses on-device Local Notifications to remind you when a countdown reaches 48 hours. Notifications are processed entirely on your device and do not transmit data to external servers.

4. Sharing Data with Third Parties

We do not sell your personal data. We use the following services:

• Supabase — Backend and Authentication (stores account and wishlist data)
• Google Play / Apple App Store — In-App Purchase data is managed by the respective app stores under their own policies

5. Data Retention

We retain your personal data for as long as your account is active or as required by law. When you delete your account, all data will be removed within 30 days.

6. Your Rights Under PDPA

Under Thailand's Personal Data Protection Act, you have the right to:

• Access: Request to view your personal data
• Rectify: Request correction of inaccurate data
• Erase: Request deletion of your data
• Object: Object to data processing
• Withdraw consent: Withdraw consent at any time
• Data portability: Request a copy of your data in a readable format

7. Data Security

We use appropriate security measures including HTTPS encryption and Supabase Row Level Security (RLS) to prevent unauthorized access, modification, or disclosure of your data.

8. Policy Changes

We may update this policy from time to time. Changes take effect immediately upon publication on this page.