Your dates and optional birthday wishlists
Whenkind has no advertising, tracking SDKs or developer-operated user accounts. Your saved dates, notes and photos stay on your device and, when enabled, sync through your personal Apple iCloud using CloudKit. The developer cannot read your private iCloud records.
The data controller for information you choose to send is Stepan Manzurov, Tbilisi, Georgia, acting as an individual. Contact: contact@manzurovstepan.com.
Birthday wishlists you choose to share
Creating an online wishlist is optional and separate from saving a date. Before creating an invitation, the app shows the display name and celebration date that will be sent. It sends that name, the celebration date and the event timezone. It does not send the birth year, age, date notes, photos, your Contacts list or your other saved dates.
The invited person can accept in a browser, choose their display name and enter gift names, descriptions, optional store links and budgets. This information is stored by the wishlist service. The organizer can see published gifts and coordinate promises. Guests opening a guest link can see the published gifts and whether each has been chosen. The personal wishlist page does not show reservations. Someone who deliberately opens a guest link can see availability, including the person receiving the gifts.
A gift promise keeps a copy of the gift details and celebration context as they were when chosen, together with later confirmations, purchase or release status. Changes are shown to the holder when they return. There are no payments, store purchases, messages, email notifications or collection of gift-giver names in the wishlist feature. Store links are entered by users; opening one is a separate, explicit visit to that store under its own terms.
Personal links and browser access
A personal link is a credential. Anyone who has it can use the access it grants. Keep personal links private. You can create replacement links, revoke selected links or replace all links for your own access. Revoking guest links does not cancel existing gift promises or the holders' separate personal access.
The website uses an essential Secure, HttpOnly, SameSite browser cookie to keep access in that browser for up to 90 days. It also uses short-lived request tokens and safe pending-operation identifiers to prevent duplicate actions. These do not contain gift text or secret links in browser storage. Your language preference is stored locally. There are no advertising or third-party analytics cookies.
Choose End access in this browser on a shared device. This revokes that browser session. It does not revoke independently saved personal links. After service recovery, saved browser sessions are ended; a saved personal link is needed to open access again.
In the iOS app, saved access and pending-request proofs are stored in Keychain with access restricted to this device. They do not sync through iCloud and are not included in the app's date exports or backups. Removing a local date does not delete an online wishlist. Forgetting a link on the device only removes that saved local access.
Retention and deletion
- Invitations expire after 14 days. Unaccepted wishlists expire after 30 days.
- Accepted ideas are retained for up to 24 months after the recipient last maintains the wishlist. Organizer or guest activity does not extend that period.
- Gift coordination details and promise snapshots are removed within the cleanup cycle after 90 days from closing or disabling the birthday round. A guest link stops working at the event deadline; the holder's personal access has its own limited lifetime.
- You can delete the online wishlist through personal recipient or organizer access. The service removes its content and saved secret responses after the deletion is confirmed. Deleting data does not erase copies someone saved outside Whenkind.
- Encrypted operation results are available for up to 24 hours after an action finishes. Minimal operation metadata remains until list deletion, followed by a 30-day replay-prevention period.
- Encrypted database backups are retained for up to 30 days. Minimal encrypted deletion/revocation records are retained for 60 days to stop older backups from restoring deleted access. Publication and recovery guards can remain for up to 500 days; they contain opaque IDs and event windows, not gift text, names or secret links.
- Technical audit events are retained for 30 days and first-party feature events for 90 days. Events use a fixed list of action names and resource IDs; no gift text or secret links are included. Rate limits use short-lived keyed IP hashes, retained for at most 48 hours. Application request logging is disabled; infrastructure access logs, where enabled, must be sanitized and limited to seven days.
Hetzner Online GmbH hosts the wishlist servers and object storage in the European Union. Journal records and backups are encrypted by the application before being placed in object storage. The separate safety index contains opaque record metadata and hashes. Neither advertising services nor an external analytics SDK receive wishlist data.
Other optional features
Contacts import reads selected names and dates on your device. These are not uploaded by importing them. If you later choose to create a wishlist for an imported birthday, only the display name and celebration date shown in its preview are sent as described above.
Date reminders are scheduled locally. Photos stay with your records unless you explicitly attach one to feedback. Apple processes purchases and operates iCloud under its own Privacy Policy; the developer does not receive your card details. Wishlists do not require an Unlimited purchase.
Feedback you submit includes your message, category, optional contact address and attachments, and technical details such as app version, build, OS, device model and locale. It is stored by the developer on Hetzner for up to 24 months, with a copy delivered through Discord. Feedback attachments are removed from the application server after the delivery attempt; Discord's retention applies to its copy. Optional tip reports include the selected tier, locale and time, without your name, Apple Account, transaction identifier or device identifier.
Questions and requests
For access, correction or deletion requests, contact contact@manzurovstepan.com. Keep your access link private; do not send it in a public support message. We may need a private proof of access to identify a wishlist because there is no user account. The date above identifies this revision.