a thousand wishes

Privacy

Short version: we do not collect your name or email from the watch. Soft-unlock builds may register a device ID so a face you already paid for keeps working. Health data stays on your watch.

Effective October 16, 2026. Data submitted through our apps or this site is submitted to a thousand wishes, not to Garmin.

Who we are

a thousand wishes publishes Garmin Connect IQ watch faces and watch apps (and related pages on a1000wishes.com). Contact for privacy requests: support@springflows.dev. Put “a1000wishes privacy” in the subject line.

What we collect

From soft-unlock / license enroll (watch → our server)

Some store builds POST a one-time (then occasional retry) enroll to a1000wishes.com so we can treat that install as already paid during the move off Garmin Merchant checkout. That request includes:

  • Connect IQ application id (which face or app)
  • Garmin uniqueIdentifier — a stable per-device, per-app id Garmin provides (not your serial number, name, or Garmin account email)
  • Technical metadata: part number, firmware and Monkey C versions, screen size, app version, client timestamp, enroll attempt count
  • Reason code such as soft_unlock_v1

It does not include steps, heart rate, GPS, contacts, or your Garmin login. Garmin’s API docs say any use of uniqueIdentifier for tracking must follow applicable privacy law; we treat that id as personal data under GDPR when it identifies your watch.

From purchases on this site (later / Polar)

If you buy through Polar (or another checkout we embed), the payment provider may share your email and order details with us so we can attach a paid entitlement to a device. Polar (or that provider) is also a controller for payment data under their own privacy notice.

From this website

Routine server logs (IP address, time, URL, user agent, errors) for security and reliability. No advertising cookies or third-party ad trackers on the catalog pages.

What stays on the watch / with Garmin

Fitness and health readings used to draw the face stay on the device and in Garmin Connect under Garmin’s policies. We do not receive that stream for soft-unlock enroll.

Why we process it (lawful basis)

Soft-unlock enroll: legitimate interests — keeping customers who already paid through Garmin unlocked, preventing duplicate charges, and operating the catalog responsibly during the checkout migration. Purchase email: contract / payment processing. Logs: legitimate interests in securing the service. Where consent is required for a specific feature, we will ask then.

How long we keep it

Device enroll records are kept while we need them for license continuity (typically for the life of the product line, or until you ask us to erase them). Purchase entitlements are kept as long as needed for support, tax, and fraud prevention. Server logs are rotated on a short operational schedule.

Your rights and how to delete data

Depending on where you live, you may have rights to access, correct, erase, restrict, or object to certain processing, and to lodge a complaint with a supervisory authority.

Soft-unlock rows are keyed by Device ID (uniqueIdentifier), not by your name. We cannot look up “Jane on a Fenix” without that id. That is by design (data minimisation). Deletion still works if you send us the id:

  1. Email support@springflows.dev with subject “a1000wishes privacy”.
  2. Name the face or app (for example T-Rex Evolution or Spring Flows).
  3. Include your Device ID. Ask us for current copy steps if the app settings do not yet show “Device ID (privacy)” — we will reply with how to read it from that build, or accept another strong match (see below).

If you bought through Polar (or similar) and we have your purchase email on file, email us from that same address and we will erase matching entitlement records and any device rows we can reasonably link. A Garmin store receipt helps when we manually granted a paid license.

Under GDPR Article 11, if we cannot identify which record is yours after a reasonable request for the Device ID or purchase email, we will say so and explain what we need. We will not demand a passport photo for a device-ID erase when the ID itself is the key.

We aim to respond within one month.

Sharing

Hosting and database providers process data only to run a1000wishes.com. Payment providers process checkout data under their terms. We do not sell personal information or use it for cross-app advertising. We may disclose information if required by law.

Children

These products are not directed at children under 13. We do not knowingly collect personal information from children under 13.

Connect IQ store listings

Garmin requires a privacy policy when an application collects user data. This page is that policy for a thousand wishes Connect IQ products that enroll with a1000wishes.com. Point each store listing’s privacy URL here: https://a1000wishes.com/privacy.

Changes

We may update this notice as the products change. The effective date at the top will move when we do. Questions: support@springflows.dev.