Privacy Policy
Crave – Wishlist App, by Codemint (Romania). Last updated: November 1, 2026.
This policy explains what Crave collects, why, and the choices you have. We do not sell your data and we do not track you across other apps or websites.
What we collect
- Account: email address, display name, account ID, and an optional profile photo. If you sign in with Apple (iPhone) or Google (Android), we receive your name and email from that service.
- Your wishlists: list names and categories, and the items you add: names, prices, links, notes and photos.
- Sharing: the people you invite as collaborators, and which items friends reserve on lists you share.
- Support messages: what you send us through Contact Us.
- Device: a push-notification token if you allow notifications.
How we use it
- To run your account, sync your wishlists across devices and show them to the people you share them with.
- To fill in product details when you paste or share a link (we read the public product page).
- To send notifications you have allowed, and to answer support messages.
- To keep the service secure and prevent abuse.
Legal basis (GDPR): performing our contract with you, your consent for notifications, and our legitimate interest in security.
Who can see your data
- Private lists are visible only to you and the collaborators you add.
- Shared lists are visible to anyone with the link. Your email is never shown to other users; collaborators see your display name and photo.
- Service providers: Google Firebase (authentication, database, file storage, hosting and backend functions, servers in the USA) and Resend (delivering support email). They process data only on our behalf.
Affiliate links
When you open some product links (for example Amazon), Crave may add an affiliate tag. It does not change the price you pay and no personal data is sent with it.
How long we keep it
As long as your account exists. When you delete your account, your data is deleted immediately from our database (backups expire within 30 days). See how to delete your account.
Your rights
You can access, correct, export or delete your data, withdraw consent and object to processing. Most of this is in the app (Settings). For anything else email contact@codemint.ro; we reply within 30 days. You can also complain to your data protection authority (in Romania: ANSPDCP).
Children
Crave is not intended for children under 13 and we do not knowingly collect their data.
Security
Data is encrypted in transit and at rest, access is protected by Firebase security rules, and backend calls require sign-in and are rate limited.
Changes and contact
We will post changes on this page and update the date above. Controller: Codemint, contact@codemint.ro. See also your privacy choices.