Privacy Policy

1. Introduction

whisp is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ephemeral messaging service. We are a privacy-first platform, and we have designed our service to minimize data collection and maximize user privacy.

2. Information We Collect

2.1 Discord Authentication Data

When you sign in to whisp using Discord, we collect the following information from your Discord account:

• Discord username
• Discord user ID
• Email address (if provided by Discord)
• Profile picture (if provided by Discord)

2.2 Usage Data and Analytics

We collect information about how you use whisp, including:

• Feature usage patterns (which features you use and how often)
• Session duration and frequency
• Friend connections and interactions
• Error logs and crash reports

2.3 Device Information

We automatically collect certain information about your device, including:

• Device type and model
• Operating system and version
• Unique device identifiers
• Mobile network information
• IP address

2.4 Content Data

When you send photos or videos through whisp, we temporarily store this content on our servers only for the purpose of delivering it to the intended recipient. This content is permanently and automatically deleted from our servers immediately after the recipient views it. We do not analyze, scan, or use this content for any other purpose.

Safety reports and blocks

When you report an account, we store your account ID, the reported account ID, the reason, any explanation you provide, and the time and outcome of review. Reports are available to authorized whisp operators for abuse prevention and moderation. They are not shown to the reported account. Reporting does not copy or preserve any photos or videos from your messages.

We store the accounts you block to enforce your contact preferences, records of conduct-policy acceptance, and any sharing suspension. Reports are stored separately from disappearing messages and are not deleted when a message is viewed. Report explanations are erased on resolution. Reports are scheduled for deletion 30 days after submission and removed by daily cleanup. Deleting either involved account removes the report immediately. For questions or a request about report data, contact augie@luebbers.email.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the whisp service
• Authenticate your identity and manage your account
• Deliver messages and media to your intended recipients
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats
• Enforce our Terms of Service and protect against prohibited conduct
• Communicate with you about service updates and important notices

4. Data Storage and Deletion

whisp is built with privacy as a core principle. Here's how we handle your data:

4.1 Ephemeral Content

All photos and videos sent through whisp are automatically and permanently deleted from our servers immediately after they are viewed by the recipient. Once deleted, this content cannot be recovered by anyone, including whisp. We do not maintain backups of ephemeral content.

4.2 Account Data

Your account information (Discord username, user ID, email, and profile picture) is stored for as long as your account is active. You can delete your account at any time through the app settings. Deletion removes your Discord ID, credentials, profile, sessions, notification tokens, friendships, blocks, reports involving you, sent messages, and groups you created. Cloud files are queued for deletion, with daily retries if storage deletion fails. This does not delete your Discord account or other people's messages outside groups you created.

For confirmed serious abuse, a human reviewer may find that a limited suspension must continue after deletion to prevent further serious harm. In those cases we may retain a keyed hash of your Discord ID, a decision reference, the reason and necessity finding, policy revision, decision date, and expiry. This is protected personal data, not anonymous data. We do not retain your raw Discord ID, profile, report text, or media in that record. This processing is subject to an approved legitimate-interests assessment and individual necessity review, including age and privacy interests. Reports alone do not justify it.

The reviewer chooses the shortest justified suspension period. Deletion and signing in again never extend it. Enforcement ends at expiry, and daily cleanup removes the record. Contact augie@luebbers.email to learn the reason and expiry, appeal, request erasure, or object to retention without recreating your account. We assess such requests individually and explain the outcome.

4.3 Deleting Your Account

You can delete your whisp account and its data in either of two ways:

• In the app, open Profile, tap Delete Account, and confirm. Deletion happens immediately and signs you out.
• Without the app, email augie@luebbers.email with the subject "Delete my whisp account" and your Discord username. We will confirm that the account is yours, for example by asking you to message us from that Discord account, then delete it within 30 days and reply when it is done.

Either way, deletion removes the data described in section 4.2. Cloud files are deleted by a daily job, with retries if storage deletion fails. The only data that may remain is the limited suspension record described in section 4.2, and only after a human review of confirmed serious abuse.

4.4 Analytics and Usage Data

Usage data and analytics are retained for a reasonable period to help us improve the service. This data is aggregated and anonymized where possible.

5. Third-Party Services

whisp uses Discord for authentication. When you sign in with Discord, you are subject to Discord's Privacy Policy and Terms of Service. We encourage you to review Discord's privacy practices. We do not share your information with any other third parties except as necessary to provide the service or as required by law.

6. Children's Privacy

whisp is intended for users who are at least 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a user is under 13, we will terminate their account and delete their information. If you believe a child under 13 has provided us with personal information, please contact us through our Discord server.

7. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access the personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your personal information
• The right to object to or restrict certain processing of your information
• The right to opt out of certain data collection practices

You can exercise your right to deletion at any time, with or without the app. See section 4.3 for how. For other requests, email augie@luebbers.email or contact us through our Discord server. We will respond to your request within a reasonable timeframe.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using whisp, you consent to the transfer of your information to these countries.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of whisp after such changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through our Discord server.