Privacy Policy

Closed beta

Effective 14 July 2026

This policy explains what data Wishcraft collects while it’s in private beta, and what we do with it. Wishcraft is operated by CISTO KO SUZA d.o.o., based in Zagreb, Croatia, which is the data controller for your personal data. It should be read alongside our Beta Terms of Use.

1. What we collect

To run the beta we collect and store:

  • Account details — your email address and a securely hashed password.
  • The prompts you write — the descriptions you type to create or change your app.
  • Build and app data — the apps generated for you, their build history and status, and any feedback you submit.
  • Basic technical data — logs and diagnostics needed to operate the service and keep it secure.

We don’t ask for more than we need to run the beta, and we don’t collect special categories of personal data.

2. How we use it

We use this data to:

  • create your account and let you log in;
  • generate, build, sign, and deliver your apps;
  • debug problems, keep the service secure, and improve how Wishcraft works;
  • contact you about the beta when needed.

Our legal bases are performing our agreement with you (providing the beta) and our legitimate interests in operating, securing, and improving the service. We do not sell your personal data or use it for advertising.

3. AI processing of your prompts

To build your app, the prompts you write are sent to our AI provider, Anthropic, whose models generate the app’s code. This processing is necessary to provide the service. Please avoid putting sensitive personal information into your prompts.

4. Where your data is stored

Wishcraft runs on cloud infrastructure (Amazon Web Services) located in the United States. This means your data is transferred to and processed outside the European Economic Area. Where required, such transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

5. Keeping and deleting data

We keep your data for as long as your beta account is active. Because this is a test environment, we may reset, rebuild, or delete apps, builds, and associated data at any time during the beta. When the beta ends or your account is closed, we will delete or anonymise your personal data, except where we need to keep something to comply with the law.

6. Your rights

Under the GDPR you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these, or to ask us to delete your account and data, contact us at the address below. You also have the right to complain to your local data protection authority — in Croatia, the Personal Data Protection Agency (AZOP).

7. Cookies

We use a single essential cookie to keep you logged in. We don’t use advertising or third-party tracking cookies.

8. Security

We take reasonable technical measures to protect your data — for example, passwords are stored hashed, not in plain text. No system is perfectly secure, and as pre-release software the beta may have flaws, so please don’t store anything sensitive in a Wishcraft app.

9. Children

The beta is intended for people aged 18 and over, and is not directed at children. We don’t knowingly collect personal data from children.

10. Changes to this policy

We may update this policy as the beta evolves. If we make material changes, we’ll update the effective date above and, where practical, let you know.

11. Contact

For any privacy question or request, contact CISTO KO SUZA d.o.o. at support@wishcraft.app.