Privacy Policy

Wisper ("Wisper", "we", "us") is operated by [TODO: Company legal name], which is responsible for the personal data described in this policy. You can reach us through the support page.

• Account details. When you sign in with Apple or Google, we receive your user ID, name, and email address. If you use Apple's Hide My Email, we receive a relay address instead.
• Profile and preferences you give us. Your answers during onboarding (what you'll use Wisper for and the languages you speak), plus your language, locale, and time zone.
• Your content. Transcripts (including timestamped segments), notes and their versions, titles, summaries, tags, tasks and due dates, folders, and custom style instructions. When you use AI features, we also receive the text you send, such as a question you ask about your notes.
• Audio. Recordings are stored on your device. Audio reaches our server only when Cloud HD is used, and we don't keep it after processing (see section 3).
• Subscription status. Your plan, the product you bought, its expiry date, and whether it renews. We never receive your card or bank details.
• Device and usage data. A device identifier (see section 7), the app version, the platform (iOS or Android), your IP address (needed to deliver requests and limit abuse), and counts of how many AI notes, questions, and Cloud HD minutes you've used.
• Support messages. If you contact us, we receive your message, plus your email address, app version, and platform if you include them.

On-device (the default)

Wisper uses the speech recognition built into your phone's operating system (Apple's speech recognition on iPhone, Google's on Android) and asks it to run on the device whenever the device supports that. The audio recording is saved on your phone so you can play it back. It is not uploaded to Wisper.

On some devices, or for some languages, the system can't recognize speech offline. In that case Apple or Google may process the audio on their own servers under their privacy policies. On Android, you can download your language's offline model from Wisper's transcription settings so recognition stays on the device.

Cloud HD (optional)

Cloud HD gives higher accuracy, handles mixed-language speech, and transcribes long imported files. Audio is uploaded only when Cloud HD is used: when you choose it as your transcription engine, or when you import a file, or speak a language, that your phone can't transcribe on its own.

When Cloud HD is used, the audio file is sent over an encrypted connection to our server, which sends it to Groq for transcription with the Whisper speech model. Our server measures the audio's length (to count your Cloud HD minutes), returns the transcript to your app, and does not store the audio after processing. Groq processes the audio to produce the transcript under its own terms.

You can turn on You → Privacy → On-device only to switch off cloud features, including Cloud HD.

Turning a transcript into a note, summary, task list, email, or other style, rewriting text (shorter, more formal, translated, and so on), and asking questions about your notes (Ask Wisper) all use a large language model. For these features:

• Your app sends text to our server: the transcript or note text, the style you picked, any custom style instruction, and your output language. For Ask Wisper, it sends your question, excerpts from the most relevant notes (picked on your device), and the recent conversation.
• Our server adds its own instructions and sends the request through the Vercel AI Gateway to the AI model provider we have chosen. The provider returns the result (for example a title, note, summary, tags, tasks, and events), and we pass it back to your app.
• We use the text only to produce your result. The result becomes part of your notes and syncs like any other note (section 5). Our server logs never contain transcript or note text.
• Wisper doesn't use your content to train AI models. Vercel and the AI provider process requests under their own terms.

AI features run only when you use them, for example when you finish a recording with a capture style or tap a style or rewrite option. Turning on On-device only switches them off.

Wisper is local-first: your notes live in a database on your phone, and every screen works offline. To back up your notes and keep them in step across your devices, the app syncs the following to our server:

• Notes: title, transcript and its timestamps, summary, tags, folder, style, language, transcription engine, length, word count, and pinned status
• Note versions (each AI result you've created)
• Tasks and their due dates
• Folders
• Custom styles you've written

Audio files are never synced. They stay on the device where you recorded or imported them. App settings also stay on your device.

Our server runs on infrastructure from OVHcloud and stores synced data in a PostgreSQL database that isn't reachable from the internet. We make a database backup every night and keep backups for 14 days.

Sign-in. You sign in with Apple or Google through Firebase Authentication (a Google service). Firebase verifies your sign-in and gives us your user ID, name, and email. Wisper never sees your Apple or Google password.

Subscriptions. Wisper Pro is sold through the Apple App Store and Google Play, which handle payment. We use RevenueCat to manage subscription status. RevenueCat receives your purchase details from the store and your Wisper user ID, so Pro works on every device you sign in to. Our server keeps your plan, product, expiry date, and renewal status.

The app sends an identifier for your device or app installation with each request. It is not an advertising identifier, and we don't use it to track you across other apps or websites. We use it to:

• Enforce Free plan limits per device, so creating new accounts on the same phone doesn't reset the free allowance
• Prevent abuse, for example by limiting free AI features on a device that many accounts have used recently
• Rate-limit requests to keep the service reliable

Wisper asks for each permission only when you first use the feature that needs it, and uses it only when you take an action. You can change these at any time in your phone's settings.

• Microphone and speech recognition: to record and transcribe when you tap record.
• Calendar and Reminders: only when you choose to add a task or event. Wisper opens the system editor so you can review and save it yourself.
• Notifications: for reminders you set on tasks, and an optional daily prompt that is off by default. Reminders are scheduled on your device.
• Face ID, Touch ID, or fingerprint: only if you turn on App lock. Your phone handles the check, and Wisper never receives biometric data.
• Files: only the audio file you pick when importing.

When you open a note in Mail or share it, your phone's Mail or share sheet handles it. Wisper doesn't send email or messages for you.

We share data only with the service providers that run Wisper, and only what each needs for its job:

• OVHcloud: hosts our server and database.
• Groq: transcribes audio when Cloud HD is used.
• Vercel (AI Gateway) and the AI model provider it routes to: generate notes and answers from your text.
• Google Firebase: signs you in.
• Apple and Google: sign-in, app distribution, payments, and the speech recognition built into your phone.
• RevenueCat: manages subscription status.
• Vercel: hosts this website.

Each provider handles data under its own terms and privacy policy. We may also disclose information if the law requires it, to protect the safety or rights of users or others, or as part of a merger or sale of the business, in which case this policy will continue to apply to your data.

• We don't sell your personal data.
• We don't show ads, and the app contains no advertising or tracking SDKs.
• We don't share your data for targeted advertising or track you across other companies' apps and websites.
• We don't use your content to train AI models.

• Account and synced data: kept while your account exists, and deleted when you delete your account.
• Audio on your device: kept until you delete the note or the app. You can choose not to keep audio in You → Notes.
• Cloud HD audio: not stored on our server after transcription.
• Text sent for AI features: used to produce your result and not written to our logs. Only the resulting notes are kept, as part of your synced data.
• Backups: kept for 14 days, so deleted data is gone from backups within 14 days.
• Usage counts and device records: kept only as long as needed for daily and monthly limits and abuse prevention (device activity is checked over a 30-day window). They contain no notes, transcripts, or audio.
• Support messages: kept as long as needed to help you, and deleted when you delete your account or ask us to.
• Server logs: rotated automatically. They never contain transcript text.

Apple, Google, and RevenueCat keep purchase records under their own policies, for example for receipts, refunds, and tax.

• A note: open it and choose Delete from the menu. The deletion syncs to your other devices.
• All notes: You → Data → Delete all notes.
• Your account: You → Account → Delete account. This permanently deletes your data from our server (notes, transcripts, versions, tasks, folders, custom styles, profile, and support messages) and deletes your sign-in account. The app also erases its local data, including audio, from that device.

Minimal usage counts linked to the device identifier, which contain no content, may be kept for about a month so Free limits can't be reset by deleting and re-creating an account. Deleted data leaves our backups within 14 days.

Deleting your account doesn't cancel a subscription. Cancel it in your App Store or Google Play settings. If you've uninstalled the app, you can still ask us to delete your account. See Account deletion for details.

Depending on where you live (for example in the EU, UK, or California), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain uses, and to withdraw consent. Most of this you can do in the app:

• Edit or delete notes at any time.
• Export your notes in You → Data (some formats require Pro), or ask us for a copy of your data.
• Keep everything on your phone with You → Privacy → On-device only.
• Turn off permissions in your phone's settings.
• Delete your account in the app.

For anything else, contact us. We won't treat you differently for exercising your rights. You can also complain to your local data protection authority.

Where the GDPR or similar laws apply, we process your data to provide the service you asked for (sign-in, sync, transcription, and AI features), for our legitimate interests in keeping Wisper secure and preventing abuse, with your consent (for example phone permissions), and to meet legal obligations.

Data travels between the app and our server over encrypted HTTPS connections. Our database isn't reachable from the internet, and access to the server is restricted. You can add App lock in You → Privacy. No system is perfectly secure, but we work to protect your data and will notify you if the law requires it after a breach.

Our providers may process data in countries other than the one you live in, including the United States, where several of them are based. Where the law requires it, these transfers rely on safeguards such as Standard Contractual Clauses offered by those providers.

Wisper isn't directed to children under 13, and we don't knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we'll delete it.

This website is hosted on Vercel, which processes standard request data such as your IP address to deliver pages. The site uses no cookies and no analytics. The contact form on the support page only opens your own email app, so nothing reaches us until you send the email.

If we change this policy, we'll update the effective date at the top. If the changes are significant, we'll tell you in the app or on this page before they take effect.

Questions or requests about your privacy:

• Use the support page, or email support@whispernotes.app.
• In the app, go to You → About → Contact support.