🕊️ Whispr Privacy Policy

Last updated: 7 August 2026

Welcome to Whispr ("we", "us", "our"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the Whispr mobile application (the "App").

Whispr is operated by Greenvision Labs, a partnership firm registered in India ("Company"). By using Whispr, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information you provide directly:

Email address (via Google Sign-In or email/password registration)
Username and display name
Date of birth (used to verify you are 18 years or older and to calculate your age)
Gender
Profile picture and gallery photos
Bio, interests, and profile prompts
Verification selfie (if you choose to verify your profile)
Messages, images, and voice notes sent within the App

Information collected automatically:

Device identifiers (used for account security and abuse prevention)
App usage data (features used, session length)
Firebase Cloud Messaging token (for push notifications)
Approximate country/region derived from your device's SIM, network, or general location signals (used for regional matching, not precise GPS location)

2. How We Use Your Information

To create and manage your account
To match you with other users based on your preferences (age range, gender, region)
To enable messaging between matched users
To verify your age and identity where you opt into verification
To send you notifications about matches, messages, and account activity
To detect and prevent fraud, abuse, and violations of our Terms of Service
To improve and develop new features

We collect and process only the data reasonably necessary for these stated purposes, and we do not use your data for purposes beyond what is described in this Policy.

3. Message Privacy and Encryption

Text messages sent between matched users are end-to-end encrypted. This means the content of your messages cannot be read by Whispr, our staff, or any third party in transit. Messages sent in random "ephemeral" chats are permanently deleted from our servers when either user ends the chat. Messages in ongoing conversations with mutually connected users ("Whispr'd" contacts) are retained until either user deletes the conversation.

Photos and voice messages shared in chat are stored on our servers (Firebase Storage) but are not end-to-end encrypted, and access is restricted to the two participants in that conversation only. Photos and voice messages sent as "view once" media are permanently deleted after being viewed, or after their set timer expires, whichever comes first.

Optional encrypted key backup. Whispr allows you to optionally back up your encryption key by setting a passphrase known only to you. If you choose to enable this feature, an encrypted copy of your key — protected by your passphrase — is stored in our systems so you can recover access to your message history after reinstalling the app or switching devices. We never see, store, or have any way to recover your passphrase; if you forget it, the backup cannot be decrypted or recovered by us or anyone else. This feature is off by default and entirely optional.

4. Profile Gallery and the "Whispr" Feature

Whispr allows you to upload up to 6 gallery photos. These photos are only visible to another user once you have both mutually chosen to "Whispr" each other. We do not disclose to a user whether someone has Whispr'd them until the connection becomes mutual.

5. Sharing Your Information

We do not sell your personal information. We may share information with:

Service providers: Google Firebase (authentication, database, storage, cloud functions, crash reporting)
Other users: your profile information (username, age, gender, bio, interests) is visible to users you are matched or connected with, in accordance with the app's privacy features described above
Legal authorities: where required by law, to protect our rights, to protect the safety of our users, or to comply with child safety reporting obligations described in our Terms of Service

6. Data Retention

Ephemeral (random stranger) chat messages: deleted immediately when the chat ends
Persistent conversation messages: retained until you or the other user deletes the conversation
Profile data: retained until you delete your account
Report and moderation records: retained for up to 12 months for safety purposes, even after account deletion

7. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your account and associated data
Object to or restrict certain processing of your data
Request a copy of your data in a portable format

You can delete your account at any time from within the App via Profile → Settings → Delete Account, or via our web-based account deletion page. You can export a copy of your profile data at any time from within the App via Profile → Settings → Export My Data. You can also exercise these rights by contacting us at the email below.

7.1 Additional rights for users in India

If you are located in India, your personal data is processed in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"). Under the DPDP Act you are a "Data Principal" and have the right to access, correct, and erase your personal data, to withdraw consent at any time, and to nominate another individual to exercise these rights on your behalf in the event of your death or incapacity. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

We have appointed a Grievance Officer to address complaints relating to the processing of your personal data. You may contact our Grievance Officer at privacy@getwhisprd.com. We will acknowledge and address grievances within the timelines prescribed under applicable law.

7.2 Additional rights for California residents

If you are a California resident, you have certain rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), including the right to:

Know what personal information we collect, use, and disclose about you
Delete personal information we have collected from you, subject to certain exceptions
Correct inaccurate personal information
Opt out of the sale or sharing of personal information — we do not sell or share your personal information for cross-context behavioural advertising, so no opt-out action is required
Non-discrimination — we will not deny you goods or services, charge different prices, or provide a different level of service because you exercised any of these rights

To exercise any of these rights, contact us at privacy@getwhisprd.com. We may need to verify your identity before fulfilling certain requests.

8. Children's Privacy

Whispr is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we become aware that a user is under 18, we will suspend and delete the account. See also the Child Safety section of our Terms of Service.

9. Data Security

We use industry-standard security measures including encryption of messages, secure authentication, and Firebase App Check to prevent unauthorized access to our systems. However, no method of electronic transmission or storage is 100% secure.

10. International Data Transfers

Your data may be processed on servers located outside your country of residence, including in the United States (via Google Firebase infrastructure). We take steps to ensure appropriate safeguards are in place for such transfers, consistent with applicable data protection law in your region.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the App or by email. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

General privacy queries: privacy@getwhisprd.com

Grievance Officer (India / DPDP Act): privacy@getwhisprd.com

Child Safety Point of Contact: privacy@getwhisprd.com