Legal

Privacy Policy

Last updated: October 16, 2026

Your inner life is private. We treat it that way.

1. What we collect

When you use Whisp, we may collect:

  • Account information: email address and display name when you create an account.
  • Journal content: sign logs, dreams, symbols, notes, and entries you create in the app. This data is stored in your private account and is not shared with other users.
  • Photos: images you choose to attach to a sign log or journal entry from your camera or photo library.
  • Voice recordings: audio captured only when you use voice-to-text, used solely to transcribe your entry and not stored as audio afterward.
  • Location (Places): if you allow Whisp to use your location, Whisp remembers where each new moment happened, to about 10 metres, so you can see your places later. You can turn this off at any time, remove a place from any entry, hide a place, or remove places from all your entries in the app (Places → privacy, or Settings → Privacy → Places & location). Location access is optional and only used when you grant permission. Where your moments happened is visible only to you: it is never part of a share, never shared with third parties or used for advertising, and the AI only ever receives a place's name (like "the gym"), never coordinates.
  • Beliefs and preferences: the cosmological frameworks you select (astrology, numerology, etc.) to personalize AI responses.
  • Usage data: basic analytics like app opens and feature usage, collected in aggregate, not linked to your journal content.
  • Device information: device type, OS version, and app version for debugging and support.
  • Website lead-magnet requests: if you request a free reflection at getwhisp.app/free-reflection, getwhisp.app/discover, or getwhisp.app/patterns, we collect your name and email address, plus whatever else you choose to share to generate that reflection — a sign, a dream, your birth date (used only to calculate your sun sign and Life Path number, never stored or shared beyond that), what's going on in your life, how you tend to interpret things (astrology, dreams, faith, etc.), and — on the Pattern Map page specifically — a short list of things you recall noticing over time (a repeating number, an animal, a dream, etc.) along with roughly when each one happened and which area of your life you said it felt most connected to. We use this to send you the reflection and occasional follow-up emails about Whisp — you can unsubscribe at any time. If you later create a Whisp account with the same, verified email address, these remembered items are added to your account as entries you can see and manage like any other.

2. How we use your data

We use your data to:

  • Provide and improve the Whisp service
  • Generate personalized AI reflections and pattern insights
  • Send transactional emails (account confirmations, subscription receipts)
  • Send the free reflection you requested from our website, plus occasional marketing emails you can unsubscribe from at any time
  • Respond to support requests

We do not sell your data. We do not share your journal content with third parties for advertising or marketing purposes.

3. AI and third-party services

Whisp uses Claude (Anthropic) to generate personalized reflections. When you request an AI insight, relevant portions of your journal data are sent to Anthropic's API to generate a response. Anthropic's use of this data is governed by their privacy policy. We use API access, which means your data is not used to train Anthropic's models.

We also use:

  • Firebase (Google): for authentication, database, and storage.
  • PostHog: for first-party usage analytics, in both the app (app opens, feature usage) and on this website (page views, which campaign or link brought you here, and whether you started or completed a purchase). PostHog does not have access to your journal content, and we do not use advertising identifiers.
  • HeyCatch: for product analytics in the app — which screens you open. This is linked to your Whisp account ID, email address and display name so we can understand how Whisp is used per account. Like most analytics services it also receives device and app information (such as device model, OS and app version) and may process your IP address. HeyCatch does not receive your journal content, symbols, beliefs or prayers, and we do not use advertising identifiers.
  • Adapty: for subscription management.
  • Stripe: for payment processing. We do not store payment card details.
  • Resend: to deliver the reflection and any follow-up emails from getwhisp.app/free-reflection.
  • Map data for Places: to name places and draw your map, the app downloads open map data for a broad area — roughly 20–30 km across for place names, and a similar block for the faint street map — and looks things up on your phone. When you zoom in close around home, the app may also download neighbourhood street detail for the few kilometres in view. Our servers learn which area was requested, not your exact location, and never store that area alongside your account. Street maps are served from our storage on Google Cloud (Firebase) and Amazon CloudFront.
  • Apple / Google location lookup: when you tap the location button on an entry to fill in a town name, or type in the location field to search for a place, your phone's own map service (Apple Maps on iPhone, Google on Android) looks it up, as it would for any app. Only what you type (or, for the button, where you are) goes to that service, and only when you use it. The place you pick is then kept in Whisp like any other place, visible only to you.
  • Cloudflare Turnstile: to verify the /free-reflection form is submitted by a person, not a bot. Turnstile may process your IP address and browser signals for this purpose; it does not see your name, email, or reflection content.

4. Data retention

Your journal data is retained as long as your account is active. You may delete your account and all associated data at any time from the app settings. Deletion is permanent and irreversible.

5. Security

All data is encrypted in transit and at rest. We use Firebase's security infrastructure and follow industry best practices. No system is perfectly secure; we will notify you promptly in the event of any breach affecting your data.

6. Your rights

You have the right to:

  • Access the data we hold about you
  • Export your journal data, including your places and where each moment happened
  • Turn off location for Places, remove a place from any entry, or remove places from all your entries
  • Delete your account and all data
  • Correct inaccurate account information
  • Unsubscribe from marketing emails, including ones from getwhisp.app/free-reflection, via the link in any such email

To exercise these rights, contact us at hello@eyeswidewellness.com.

7. Children

Whisp is not intended for users under 13 years of age. We do not knowingly collect data from children under 13.

8. Changes to this policy

We may update this policy periodically. Material changes will be communicated via email or in-app notification. Continued use of Whisp after changes constitutes acceptance.

9. Map data credits

Places uses open map data. Town and region names, and the street map, are © OpenStreetMap contributors, available under the Open Database License (ODbL 1.0); the map data Whisp derives from it is available under the same licence. Place names and categories come from the Overture Maps Foundation (CDLA-Permissive 2.0, Apache 2.0 or CC0, depending on the source), and the street map is built with the Protomaps basemap.

10. Contact

Questions about this policy? Reach us at: hello@eyeswidewellness.com