WhisperPrivacy Policy
Whisper has not launched yet. This policy describes the app as it is built for its first release and will be reviewed before launch. If anything here changes, we will update this page and tell parents in the app.
1. Who we are
Whisper is a storytelling app for children, operated by [operator name and address to be confirmed] ("we"). We are responsible for the personal data described here.
Whisper is meant to be set up and managed by a parent or legal guardian. Children use Whisper through a profile under the parent's account; they do not have accounts or passwords of their own. When creating the account, the parent confirms they are the child's parent or guardian and agrees to this policy on the child's behalf.
2. What we collect and why
| Data | Why we need it |
|---|---|
| Parent account: email address, display name, password (stored only as a one-way hash), the time you agreed to this policy, whether your email is verified. If you sign in with Apple or Google: the account identifier and email address they confirm. | To create and secure your account, send verification and reset codes, and let you sign in on your devices. |
| Parent PIN (stored only as a one-way hash) and a count of recent wrong PINs. | To make sure only a grown-up can change protected settings. |
| Child profiles: nickname (it does not have to be a real name), birth year, home language, the languages the child is learning, avatar, interests, and the settings a parent chooses (age range, bedtime hours, microphone, practice and word-preview settings). | To show suitable stories in the right language and apply the parent's settings. |
| Listening activity: which stories were started or finished and where playback stopped, favourites, points and rewards, optional practice results and scores, and answers to the optional starting questions. | To resume stories, recommend the next one, and show the parent their child's activity. Practice results are shown only to that child and the parent. |
| Devices: device name and type (phone or tablet), platform, and a random installation identifier. | To keep you signed in, sync between devices and let you see and remove devices. |
| Subscription status from the App Store or Google Play (for example, whether a subscription is active and when it renews). | To unlock the stories your subscription includes. We never receive your card or bank details. |
| Technical events: for example, that a story started or failed to load and how long it took, with the story and the error code. | To find and fix problems. These never contain voice, typed text, names or email addresses. |
We use this data only to provide Whisper as described here. Some data stays only on your phone, such as downloaded stories and settings for that device.
3. Children's voice
The microphone is used only if the parent allows it, and only while a child takes part in optional practice (for example, saying a word from the story). The phone's own speech recogniser turns what the child said into text on the device. The sound and the text are kept in the phone's memory only for that moment and then discarded. They are never recorded, stored, sent to our servers or used to train any AI. We keep only the result of the practice step, such as which answer was chosen and its score.
Parents can turn the microphone off for each child in the Parent Area. Practice then continues by touch.
If a future version ever needs to process speech away from the phone, we will update this policy and ask for permission first.
4. What we never do
- We do not show advertising and do not use advertising or tracking tools.
- We do not sell or rent personal data.
- We do not show children prices or a checkout; only a parent can buy, after entering the Parent PIN.
- We do not use children's data to build profiles for marketing.
5. Who helps us
We use a small number of service providers who process data only on our instructions:
- Amazon Web Services (Amazon SES), United States: sends account emails (verification and reset codes). It receives your email address and the email's content.
- Cloudflare: secure network connection between the app and our servers.
- Apple and Google: sign-in (if you choose it) and subscriptions through the App Store and Google Play, under their own privacy policies.
- [server hosting provider to be confirmed]: stores the account and profile data described above.
6. Where data is kept
Account and profile data is kept on servers at [location to be confirmed]. Account emails are sent through Amazon in the United States. Where data leaves Vietnam, we do so in line with Vietnamese law, including the required transfer assessments.
7. How long we keep data, and deleting it
- Deleting a child profile (Parent Area, with the Parent PIN) removes the profile and schedules its listening history, favourites, practice results, points and settings for deletion.
- Deleting the account removes the parent account and all its child profiles. Subscription and purchase records that we must keep by law (for example, for tax or fraud prevention) are kept only as long as required.
- Until in-app account deletion is available, you can ask us to delete your account by writing to the contact below; we will confirm it is you and delete it.
- Backups are overwritten on a regular cycle, so deleted data disappears from backups within [period to be confirmed].
8. Your rights
Under Vietnam's personal data protection law, you can ask to see the data we hold about you and your children, correct it, delete it, restrict or object to its use, receive a copy, and withdraw your consent at any time (withdrawing consent may mean we can no longer provide the account). Parents exercise these rights for their children. Much of this you can do yourself in the app: edit profiles and settings in the Parent Area, delete a profile, sign out of devices. For anything else, contact us below. You may also complain to the authority responsible for personal data protection in Vietnam.
9. Security
- All communication between the app and our servers is encrypted (HTTPS).
- Passwords and Parent PINs are stored only as one-way hashes; sign-in tokens are kept in the phone's secure storage (Keychain or Keystore).
- Wrong PINs and sign-in attempts are limited to prevent guessing.
- Access to production data is limited to the people who need it to run Whisper.
10. Changes and contact
If we change this policy, we will update the date above and, for important changes, tell parents in the app before the change applies.
Questions or requests about privacy: [contact email to be confirmed].