Privacy Policy for Min ønskeliste
Last updated: 2026-08-13
Min ønskeliste ("My Wishlist") is an app for creating and sharing wishlists, developed by Favo AS. This policy explains what personal data the app collects, why, and what rights you have. Prefer Norwegian? Read the Norwegian version here.
Data controller: Favo AS (org. no. 934 039 459)
Contact: legal@favo.no
What data do we collect?
When you create an account: name, email address, and password. The password is stored by Firebase Authentication, not by us directly.
When you use the app:
- Wishlists you create: title, date, a chosen icon (one of the app's built-in icons, not a photo you upload), and a sharing code.
- Wishes you add: title, description, link, and whether someone has reserved it.
- Shared lists: who subscribes to (has access to) a shared list.
The app does not request access to your camera, photos, or contacts.
Why do we collect this?
Solely to provide the service itself: creating wishlists, sharing them with others, and letting recipients reserve wishes without the list owner seeing who reserved what. The legal basis is the agreement you enter into with us by creating an account.
Who do we share data with?
We use Firebase (Google) as our technical provider:
- Firebase Authentication – sign-in and account management.
- Cloud Firestore – storage of lists and wishes.
- Firebase Analytics (Google App Measurement) is included in the app's technical foundation and may collect general, non-identifying usage statistics (e.g. app opens). We do not actively use this ourselves, but the SDK is present in the app.
We never sell your data, and we don't share it with anyone beyond what's necessary for the operation described above.
Read Google's/Firebase's own privacy terms: firebase.google.com/support/privacy
How long do we keep your data?
For as long as you have an account. If you delete your account, your wishlists and account data are deleted at the same time (see below).
Your rights
You can at any time:
- Delete your account yourself in the app: Settings → Delete account. This deletes your wishlists, your user data, and your Firebase account itself.
- Request access to, correction of, or deletion of data we hold about you by contacting us (see above).
- Complain to your national data protection authority (in Norway: Datatilsynet) if you believe we're processing your data in violation of data protection law.
If you're unable to delete your account yourself, contact us at the address above.
Children
The app is not specifically directed at children, and we do not ask for age at registration.
Security
We work to protect your data, but no method of storage or transmission over the internet is 100% secure.
Changes
We may update this policy from time to time. Material changes will be announced in the app or on this page.
