What danzi keeps, and who sees it.

danzi is operated by [operator legal name], [registered address] (“danzi”, “we”). We are the controller of the personal data described here. Questions and requests: [contact email].

• Account — your email address, your name, whether you've confirmed the email, and your password as a salted hash (never readable, not even to us).
• Profile — the country you want things delivered to, your city if you give one, currency, the notes and traits you give your guardian, and a profile picture if you upload one.
• Wishes — what you wish for, budgets and target prices, your answers to the guardian's questions, the shortlists and offers you receive, and what you do with them (accept, reject and why, snooze, close).
• Guardian chat — the messages between you and your guardian.
• Notifications — if you turn them on, each device's push subscription: an address at your browser's push service plus its encryption keys.
• Technical — your login session, and server error reports (the page or API route and the error message) so we can fix bugs. Your IP address is held briefly in memory for rate limiting; it isn't stored.
• Wallet — accounts carry a demo wallet address and balance. No real money moves through danzi.

Merchants and their AI agents — including danzi's own house merchant, iznaD — answer wishes from an anonymised brief: the wish text, category and tags, the budget and target price, your answers to the guardian's questions, the reasons you gave for turning down earlier offers, and your delivery country. Never your name, email, city or chat. The wish text goes out as you wrote it, so leave personal details out of it.

When you accept an offer, the merchant whose offer you accepted sees your name and city for that wish — no other merchant does, and nobody sees your email.

When you follow an offer to a store you are on the store's own site, and its privacy policy covers what you do there.

• Vercel hosts the app and runs its servers.
• Supabase hosts the database, in the EU.
• Anthropic (Claude) reads wish text, your answers, guardian chat and incoming offers to understand wishes, check that offers fit and search stores. Under Anthropic's commercial terms this data isn't used to train their models.
• danzi's house agent (iznaD) runs on a server we operate at [hosting provider] and uses [AI model provider] for guardian chat, matching and sourcing. It gets anonymised briefs, and chat messages under an opaque session id rather than your account.
• Resend sends account emails: password resets and email confirmation.
• Your browser's push service (Google, Apple or Mozilla, depending on the browser) delivers notifications, so their text passes through it.
• Keepa supplies product price history. We send it product identifiers only, nothing about you.

Some of these companies are based in the US. Where data leaves the EU, the transfer relies on the safeguards in their data processing terms, such as the EU Standard Contractual Clauses.

• To provide the service you signed up for (contract): your account, wishes, briefs, offers, guardian chat and emails about your account.
• Our legitimate interest in keeping danzi secure and working: rate limits, error reports, preventing abuse.
• Your consent for push notifications — turn them off any time on the You page or in your browser.

• As long as your account exists, so your wishlist keeps working.
• Delete your account and your profile, wishes, the offers on them, guardian chat, push subscriptions and sessions are erased straight away. Database backups roll over within [backup retention period].
• Password reset links expire after an hour, email confirmation links after 7 days, login sessions after 30 days.
• Error reports are kept for 30 days.
• Product price history is shared across danzi and not tied to you, so it stays after you leave. It can show that someone once wished for an item — never who.

Under the GDPR you can:

• see your data and take it with you — You → Download my data;
• correct it — You → Edit profile;
• delete it — You → Delete my account;
• object to or restrict how we use it, and withdraw consent (notifications) at any time.

For anything else, email [contact email] — we answer within one month. You can also complain to your local data protection authority.

danzi sets one cookie, danzi_session, which keeps you logged in. It is strictly necessary, can't be read by scripts, and expires after 30 days or when you log out. There are no analytics, advertising or tracking cookies. The app also remembers small things in your browser's local storage — like having dismissed the install banner — which never leave your device.

Stores you visit from danzi set their own cookies under their own policies — at Amazon, that includes the Associates cookie that credits a referral.

danzi isn't meant for anyone under 16.

If we change this notice in a way that matters, we'll say so in the app before the change takes effect. See also the Terms.

As an Amazon Associate, danzi earns from qualifying purchases.

Some store links in offers carry an affiliate tag belonging to the merchant that sent the offer — including danzi's own house merchant, iznaD. If you buy through such a link, the store may pay that merchant a commission. It never changes the price you pay, and it plays no part in which offers your guardian lets through.