Privacy Policy

Personal Information

• Email Address: For account creation, waitlist registration, and communication
• Facebook Login Data: When you sign up using Facebook, we receive your name, email, and profile picture
• Birthdate: To verify you are 13 years or older (required by law)
• Phone Number: Optional for account security and two-factor authentication
• Payment Information: For future premium features (processed securely by third-party payment processors)

Content You Create

• Messages/Whispers: Anonymous messages you send to others
• Replies: Responses to whispers you receive
• Profile Information: Username and any additional details you choose to share

Technical Information

• Device Information: Browser type, operating system, IP address
• Usage Data: How you interact with our service, pages visited, features used
• Log Data: Server logs, error reports, performance data

AI Service Providers

• OpenAI: Primary AI service for message rewriting and kindness filtering
• Google Gemini: Backup AI service when OpenAI is unavailable

What AI Does

• Analyzes message content for sentiment and appropriateness
• Rewrites messages to be more kind, constructive, and positive
• Blocks harmful, offensive, or inappropriate content
• Maintains anonymity while ensuring message quality

Data Storage

• Supabase: Your data is stored securely on Supabase's encrypted servers
• Encryption: All data is encrypted in transit and at rest
• Retention: We keep your data only as long as necessary for our service

Security Measures

• Industry-standard encryption and security protocols
• Regular security audits and updates
• Access controls and authentication systems
• Monitoring for suspicious activity

GDPR Rights (EU Residents)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your personal data
• Restriction: Limit how we process your data

CCPA/CPRA Rights (California Residents)

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we don't sell data)
• Right to Non-Discrimination: We won't discriminate for exercising your rights

If You're Under 13

• You cannot create an account without parental consent
• We will delete any information we discover was collected from children under 13
• Parents can contact us to review, update, or delete their child's information

EU-US Data Transfers

For EU residents, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Appropriate safeguards for data protection