Privacy policy
What we collect and why
We collect account and contact details, preferred language, membership and key-cycle records, contribution status, support communications, and essential device, access, fraud-prevention and security logs. We use them to create and secure accounts, provide the service, administer purchases and refunds, communicate with you, prevent misuse, keep required business records and comply with law. If required information is not provided, the related account or feature may be unavailable.
Protected Box features require identity information such as legal name, mobile number, residential address and a government-issued identity document. A Box submission includes the complete bill, amount, purpose, biller and payment details, private story and review record. A helper provides reservation records, declared payment information and a private remittance. We also hold thank-you notes and content reports.
Identity documents and government identifiers
Identity material is used only where reasonably necessary to confirm age and identity, detect a duplicate or misleading account, investigate suspected unlawful activity or serious misconduct, and protect users and the service. It is not used as your public or everyday account identifier. A reviewed document reference may be transformed with a secret key into a non-readable duplicate-check value; the typed reference is not retained in that field. We do not sell identity information or use it for advertising.
Who sees Box information
Authorised reviewers may inspect identity material, original bills and remittances. During an active 15-minute reservation, a helper sees only the biller, payment method, destination or code, reference and exact amount needed for that direct bill payment. The helper does not receive the Box owner’s identity document, contact details, residential address or complete bill and must not copy, publish or reuse the payment details.
Providers and overseas processing
Stripe processes eligible web purchases and Apple processes eligible iOS purchases under their own terms and privacy policies. Hosting, storage, security, communications, professional advisers and support providers may process only the information needed for their work. Some providers may process data in Australia, the United States and other countries disclosed by that provider. We may disclose information where required or authorised by law, including to regulators, courts and law-enforcement bodies.
Storage, security and retention
Restricted uploads are stored outside the public web directory and access is limited by role. We use access controls, private file storage, transport security and audit records, but no system is completely secure. We retain information only for the period reasonably required for identity and bill review, active Boxes, purchases, refunds, disputes, fraud prevention, accounting, legal obligations and service integrity. When those purposes end, we delete or de-identify the information where reasonably practicable. A deletion request does not require us to erase records that law requires us to retain or records reasonably needed to establish, exercise or defend legal claims; retained records are isolated from ordinary product use.
Your choices and account deletion
You may request access to or correction of your personal information, withdraw an optional consent, complain, or request deletion through the in-app account control or by emailing privacy@wishlyforward.com. Account deletion removes or de-identifies the account and associated user content except for information we must lawfully retain. Deleting an account does not itself cancel an Apple or Stripe subscription; cancel the subscription with the billing provider first. We aim to respond to privacy requests and complaints within 30 days.
Our privacy standard
We intend to handle personal information consistently with the Australian Privacy Principles whether or not a small-business exemption applies to us at a particular time. This is a statement of our handling standard, not a representation that every provision of the Privacy Act applies in every circumstance.
Terms & conditions
Agreement and eligibility
By creating an account or using the service, you agree to these Terms and acknowledge the Privacy Policy. You must be at least 18, able to enter a binding agreement, reside in an Australian location where the relevant feature is available, provide accurate information and use one account only. We may require further verification. You are responsible for your login credentials and must tell us promptly about suspected unauthorised access.
What Wishly Forward is
Wishly Forward is a commercial technology, review and matching service. It is not a charity, deductible gift recipient, bank, lender, credit provider, financial adviser, trustee, escrow service, remittance provider or crowdfunding investment platform. A Box is a personal request made by its owner on their own behalf for an optional, unconditional gift. It is not a loan and creates no repayment, ownership, profit, reward or tax-deduction right.
A helper sends no gift money to Wishly Forward. The helper uses their own bank or payment service to pay a verified biller directly. Wishly Forward takes no commission or percentage from that payment; 100% of its economic benefit reduces the Box owner’s bill. Membership, keys and review fees pay only for Wishly Forward services and are separate from any optional gift.
Regulatory availability
Fundraising and personal-support rules differ between Australian States and Territories. A feature may be unavailable or paused in a location until we are satisfied that it can lawfully operate there, including where a regulator requires an authority, sanction, registration or licensed partner. Users must not use Wishly Forward to conduct an appeal for a charity, organisation, public fund, political purpose or another person, or to evade a local fundraising rule. A description in these Terms does not override the legal character of the actual activity.
Memberships, automatic renewal and keys
Explore is A$19 per monthly cycle for 10 keys and 1 active Box; Together is A$49 for 50 keys and 2 active Boxes; Horizon is A$99 for 299 keys and 3 active Boxes. The purchase screen shows the current GST-inclusive total price before you subscribe. Plans automatically renew each month until cancelled. Web subscriptions are billed and managed through Stripe; iOS subscriptions are billed and managed through Apple In-App Purchase. The billing provider’s purchase and refund rules also apply.
You can stop the next renewal at any time in the Stripe customer portal for a web subscription or Apple’s subscription settings for an iOS subscription. Cancellation normally takes effect at the end of the paid cycle. Deleting the app or account does not cancel third-party billing. Keys are limited, non-transferable digital access rights for one subscription cycle. They expire at cycle end, do not roll over and have no cash, stored-value or payment value. Consumer rights that cannot be excluded remain unaffected.
Verified new-account Box
A person whose identity is verified may submit one complimentary Box, up to A$600, within seven days of account registration. This is available without a membership and without a review-service payment. It is a one-time new-account benefit: submitting it uses the benefit even if the Box is later rejected, closed or receives no help, and no refund is payable because no review-service price was paid. The complimentary Box does not count toward a membership’s active-Box capacity and remains visible while open even if the owner has no membership or a membership later ends. It remains subject to private review, all Box rules and our right to reject or remove it.
Contribution identity and Box limits
Contribution identity comes only from direct bill payments that have been privately verified and remain eligible to count; it cannot be purchased. Spark permits a Box up to A$600, Beacon up to A$2,000 and Guardian up to A$10,000. A higher identity may require an eligibility period before activation and may be recalculated if a payment is duplicated, fabricated, reversed in our records, connected with coordinated accounts or otherwise ineligible. An identity or membership never promises approval, visibility or help.
Submitting content and a Box
A Box owner must submit a genuine complete bill, matching direct-payment details and a truthful story, must be the person responsible for or directly benefiting from the bill, and must have authority to provide every document and item of personal information. Do not submit another person’s request, medical records, unlawful or defamatory material, intellectual property you cannot use, identifying public content, threats, sexual content, discrimination, manipulation or misleading claims.
You retain ownership of your content. You give us a non-exclusive, worldwide, royalty-free licence for the life of the account and any necessary record-retention period to host, secure, review, redact, format, translate where separately disclosed, display within the service and otherwise use that content only to operate, protect and evidence the service. Every Box is reviewed before display. We may edit public copy to protect privacy, reject or remove material, investigate a report, hide a Box or suspend an account. Users can report concerning content to support@wishlyforward.com.
Review service, price and 90-day offer
The current Box review service price is shown as one prominent total before purchase, inclusive of GST and any unavoidable payment cost. A breakdown may also be shown. The review covers administrative checks of the submitted material and privacy redaction; it is not legal, financial or identity advice and is not a guarantee that a user, document, debt, biller or payment outcome is genuine or error-free.
The advertised 90-day refund is an additional contractual offer for a Box that paid the review-service price. The 90 days start when the Box is first published. If no valid help has been recorded when that period ends, the A$50 review-fee component is eligible for return to the original payment method after any pending remittance is decided. Closing early does not accelerate the date. If any valid help is recorded, the offer does not apply. A complimentary new-account Box has no paid review-service price and no refund. If a Box is rejected after the review service is supplied, there is no automatic change-of-mind refund. None of this limits remedies available under the Australian Consumer Law or the applicable billing provider’s rules.
Opening, direct payment and remittance
Opening a Box uses one key and reserves one available share for 15 minutes. The key remains used if the helper does not proceed. “Not this time” releases the share immediately and expiry releases it automatically. The reservation does not guarantee a banking transaction, biller acceptance or remittance approval.
A helper must independently check the biller name, amount, reference and destination in their own banking channel before authorising payment. Once sent to the external biller, Wishly Forward cannot stop, reverse, redirect or refund it. The helper must upload a remittance. Help counts only after an authorised reviewer matches the available remittance, biller and amount. A rejected remittance releases the share. Internal contribution status may later be corrected without reversing the external payment.
Closing Boxes, thank-you notes and conduct
An owner may close an untouched published Box or stop a partially helped Box only when there is no active reservation or pending remittance. Verified help remains recorded. Inactive membership removes open Boxes from discovery but does not cancel existing reservations, reviews, records or obligations. After completion or stopping following verified help, the owner must provide a respectful, non-identifying thank-you note within 14 days; another Box may be restricted while it is overdue.
Do not create associated or duplicate accounts, coordinate circular payments, fabricate or reuse documents, scrape payment details, harass a user, manipulate identity status or use the service for money laundering, sanctions evasion, unlawful fundraising or any unlawful purpose. We may proportionately request evidence, restrict a feature, preserve evidence, suspend or terminate an account and correct contribution records. Where practicable we will give notice and a reasonable opportunity to respond, except where urgent action is needed for safety, security, fraud or law.
Consumer guarantees, liability and disputes
Our services come with guarantees that cannot be excluded under the Australian Consumer Law. For a major failure, you may cancel the service contract and receive a refund for the unused portion or compensation for reduced value. You may also be entitled to compensation for other reasonably foreseeable loss. For a non-major failure, you may require us to fix the problem within a reasonable time and, if we do not, cancel and receive a refund of the unused portion.
Subject to those rights, we do not guarantee that a Box will be approved, viewed, helped, completed or accepted by a biller. To the extent permitted by law, neither party is liable to the other for indirect or consequential loss that was not reasonably foreseeable when the agreement was made. Nothing limits liability that cannot lawfully be limited.
Changes, termination and governing law
We may change these Terms prospectively for legal, security or product reasons. We will show the new date and give reasonable notice of a material change before it applies; if the change materially disadvantages an existing paid cycle, you may stop renewal and any non-excludable rights remain available. Queensland law governs these Terms and the courts with jurisdiction in Queensland may hear disputes, without excluding any right to bring a claim in another forum available under consumer law.