Privacy Policy

1. Overview

Whisprin is operated by Intellminds Incorporation ("Whisprin," "we," "us"), and is built around pseudonymity: what you post is never shown next to your real name or email. This policy explains what we collect, why, and who else sees it.

2. What we collect

• —Sign-in information: when you sign in with Google, we receive your email address and Google account identifier. This is stored in our authentication system only -- it's never shown to other members and is not attached to your posts or handle anywhere visible in the app.
• —Profile information: the anonymous handle you choose, and your confirmation that you're 18 or older.
• —Content: posts, comments, and reactions you create, and their timestamps.
• —Moderation data: an automated safety score and label generated for content you post, used internally for moderation.
• —App usage data: on the Android app, we use Firebase Analytics to log which screens you visit and when you sign in, so we can understand how the app is used. This is tied to an anonymous device/analytics identifier, not your name or email.
• —Push notification token: on the Android app, a device token that lets us deliver notifications (for example, a reply to your confession) to your device. This token identifies your device, not you personally, and isn't shared with other members.
• —Basic technical data our infrastructure provider (Supabase) logs to operate the service, such as request timestamps.

We don't use advertising trackers, and we don't collect payment information -- Whisprin doesn't currently charge for anything.

3. AI processing

When you post a confession or comment, its text is sent to Google's Gemini API to generate an automated safety score before the post is shown to other members. When a post is approved, its text is also sent to Gemini once to generate the AI companion reply. Only the content text is sent -- not your name, email, or account identifier. This is a standard API call to a third-party AI provider, used solely for moderation and the companion reply; it is not used to identify you.

4. How we use it

To run your account, show you the feed and your own content, screen content for safety, enforce our Community Guidelines, and maintain internal logs of moderation and safety actions. We don't sell your data, and we don't use it for advertising.

5. Who we share it with

• —Supabase, our database, authentication, and hosting provider -- they store account and content data on our behalf.
• —Google, when you sign in with a Google account -- governed by Google's own privacy policy for the sign-in itself.
• —Google (Gemini API), which processes post and comment text to generate an automated safety score, and a post's text once more to generate its AI companion reply.
• —Google (Firebase), which provides app usage analytics and delivers push notifications to the Android app.
• —Whisprin staff and moderators, who can see content pending or flagged for review, and -- in a restricted, logged action reserved for serious safety or legal situations -- can look up the real identity behind an account.

We don't share your data with advertisers or data brokers, and we don't sell it to anyone.

6. Identity protection

Your real email is never shown to other members and is never displayed alongside your handle or content anywhere in the app. Looking up the real identity behind a handle requires a specific, restricted action available only to a super admin, and every use of it is logged internally, including who did it, when, and why.

7. Data retention and deletion

We keep your account and content for as long as your account is active. To request deletion of your account and associated content, contact us at the address below -- we'll act on it as soon as we reasonably can. Some records, such as moderation or safety logs tied to enforcement actions, may be retained for a limited period afterward where needed for safety, security, or legal reasons.

8. Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to certain processing. You can exercise any of these by contacting us below.

9. Children's privacy

Whisprin is for adults 18 and over. We don't knowingly collect data from anyone under 18. If we learn an account belongs to someone under 18, we'll close it and delete the associated data.

10. International data

Whisprin's infrastructure is hosted in India. If you use Whisprin from outside India, your data will be transferred to and processed in India.

11. Security

We rely on our infrastructure provider's encryption and access controls, and restrict sensitive actions -- like identity lookups and account bans -- to logged, authorized staff actions. No method of storing or transmitting data is completely secure, and we can't guarantee absolute security.

12. Changes

We may update this policy as Whisprin changes. If we make a material change, we'll update the date at the top of this page.

13. Contact

Questions about this policy, or a request to access or delete your data, can be sent to team@intellminds.com.