Privacy Policy

Whisper collects only what is necessary to deliver a personalised experience:

• Onboarding data — the name, preferences, and interest categories you choose during setup. This is stored locally on your device.
• Liked & saved quotes — stored locally via AsyncStorage so your favourites persist across sessions.
• Premium status — a flag indicating whether you have unlocked Premium, stored locally.
• Anonymous exchange content — if you use Whisper's anonymous letter exchange, the short notes you write, the mood you check in with, and (optionally) the general themes and gender you selected during onboarding are sent to our backend so a note can be delivered to and from other people. This content is linked only to an anonymous device identifier — never to your name, email, or any personal profile. Notes are automatically deleted after roughly 24 hours.
• Anonymous device identifier — to route exchange notes without requiring any login, Whisper creates an anonymous identifier for your device (via Supabase Anonymous Authentication). It contains no personal information.
• Push notification token — if you turn on message notifications, we store your device's push token so we can alert you when someone responds to, or likes, your note.
• Anonymous analytics data — to improve the app experience, we collect anonymous usage data including screen views, feature usage, and onboarding progress. No personally identifiable information is collected.
• Advertising identifier (IDFA) — if you grant permission via the App Tracking Transparency prompt, we collect your device's advertising identifier to measure the performance of advertising campaigns. You can decline this prompt and the app will function normally without it.
• Attribution data — we collect anonymous install and in-app event data (e.g. subscription events) to understand which advertising campaigns bring users to Whisper. This data is processed by AppsFlyer and shared with advertising partners such as TikTok.

Personal data you provide during onboarding is used solely to customise which quotes appear in your feed. We do not use it for advertising or profiling. Advertising identifiers and attribution data, when collected, are used only to measure advertising campaign performance and optimise ad delivery through our advertising partners.

By default, Whisper stores your personal data — your name, preferences, interests, liked quotes, and premium status — locally on your device using local storage (AsyncStorage). This information is never transmitted to our servers.

The one exception is the anonymous letter exchange (described below): to deliver a note between two people, the note itself must pass through our backend. It is stored anonymously and deleted automatically after roughly 24 hours.

Whisper includes an optional feature that lets you exchange short, anonymous notes of encouragement with other users. We designed it to be private and anonymous by default:

• No identity. Notes are tied to an anonymous device identifier only. There are no names, no profiles, and no way for another user to see who you are.
• Ephemeral. Every note (and any report record) is automatically deleted from our backend after approximately 24 hours.
• Screened for safety. Before a note is delivered, its text is checked by an automated moderation service (OpenAI's Moderation API) to filter harmful content. This check is used only for safety — never for advertising, profiling, or model training. Notes that indicate a crisis are shown supportive resources instead of being delivered to another person.
• You are in control. You can report or block any note or sender at any time, and you can turn message notifications on or off in Settings.

The backend that stores and routes these notes is provided by Supabase. We do not sell exchange content, and we do not use it for advertising.

When you first open Whisper, you will be shown Apple's App Tracking Transparency (ATT) prompt asking for permission to track your activity across other companies' apps and websites. If you consent, your device's advertising identifier (IDFA) will be shared with AppsFlyer and our advertising partners (such as TikTok) to measure ad campaign performance. If you decline, the app will still function normally — only anonymous, aggregated data will be used for attribution via Apple's SKAdNetwork framework.

This website (the landing page) may use basic analytics provided by our hosting provider (Vercel) to understand traffic patterns. No personal identifiers are collected or shared via the website.

We use the following third-party services:

• Supabase — provides the backend for the anonymous letter exchange: it stores and routes the notes, the anonymous device identifier, and your push notification token. Exchange notes are deleted automatically after roughly 24 hours. See their privacy policy at supabase.com/privacy.
• OpenAI — the text of exchange notes is sent to OpenAI's Moderation API to screen for harmful content before delivery. This is used solely for safety and is not used to train models or for advertising. See their privacy policy at openai.com/policies/privacy-policy.
• Expo — delivers push notifications for the exchange (e.g. when someone responds to your note). Your anonymous push token is processed to route the notification to your device. See their privacy policy at expo.dev/privacy.
• PostHog — to collect and process anonymous analytics data (screen views, feature usage, onboarding progress) to improve the app experience. No personally identifiable information is collected. See their privacy policy at posthog.com/privacy.
• RevenueCat — to process in-app purchases. RevenueCat collects purchase history and anonymous device identifiers. Subscription events are forwarded to AppsFlyer for attribution purposes. See their privacy policy at revenuecat.com/privacy.
• AppsFlyer — to measure advertising campaign performance and attribute app installs and in-app events (such as subscriptions) to their originating ad campaigns. AppsFlyer may collect your IDFA (with your consent), anonymous device identifiers, and in-app event data. This data is shared with our advertising partners (such as TikTok) to optimise ad delivery. See their privacy policy at appsflyer.com/privacy.
• TikTok Ads — receives attribution and conversion data from AppsFlyer to measure and optimise advertising campaigns that direct users to Whisper. See their privacy policy at tiktok.com/privacy.
• Google Fonts — to load premium typefaces. Google may log font requests; see their privacy policy at google.com/privacy.
• Vercel — to host this landing page. See their privacy policy at vercel.com/legal/privacy-policy.
• Apple App Store — distribution platform governed by its own privacy policy.

Data stored locally on your device persists until you delete the app or manually clear app data. We do not retain copies of this local data on any server.

Anonymous letter-exchange content (notes, replies, and report records) is automatically deleted from our backend approximately 24 hours after it is created. Your anonymous device identifier and push token persist only so the feature can function, and are removed when you turn off message notifications or stop using the exchange.

You can delete all locally stored data at any time by uninstalling the app. If you have questions about specific data rights under your jurisdiction (e.g. GDPR, CCPA), please contact us at the address below.

Whisper is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. Continued use of the app after a change constitutes acceptance.

If you have questions or concerns about your privacy, reach out via the Contact link in the footer of this site.