Posts, polls and comments are published under a persistent anonymous Whispry ID and nickname. Your email address is used only to sign in and to send account or safety notices — it is never shown to other members, never attached to a post, and never sold.

We do not ask for your real name, phone number, contacts, precise location, photos or microphone access. Please do not include identifying details about yourself or others in what you write; once published, other members can read it.

• Account data — email address, a hashed password, nickname, private Secret ID, and account creation date.
• Content — your posts, polls, poll votes, comments, reactions and saved items, with timestamps.
• Preferences — theme, motion, notification and posting settings, stored on your device.
• Technical and usage data — approximate country derived from IP, device type, app version, session times, page views and crash diagnostics.
• Purchase records — product, store transaction identifier, start date and expiry date.
• Safety data — reports you file or receive, and moderation decisions.

To operate your account and publish your content; to enforce daily limits and Pro entitlements; to deliver notifications you asked for; to keep the community safe through moderation and abuse prevention; to understand aggregate usage so we can improve the app; and to comply with legal obligations. We do not use your content to build advertising profiles, and we do not sell personal data.

Pro unlocks detailed engagement — which anonymous identities related to or reacted to your content, when they did it, full post statistics, and the ability to read other members' comments.

Pro never reveals real names, email addresses, phone numbers, IP addresses, precise location or any other private information. It only ever shows the anonymous Whispry ID. No paid tier, and no member, can de-anonymise anyone.

Only with service providers that make the app work: our cloud hosting and database provider, push notification delivery, crash and analytics tooling, and the app store that processes payments. They act on our instructions and may not use your data for their own purposes.

We may also disclose data where legally required, or where strictly necessary to prevent imminent harm to a person.

Payments are processed by the app store. Whispry stores only the entitlement record needed to grant access: product, transaction identifier, start date and expiry date. We never see or store card numbers, billing addresses or store account credentials.

• Account and content — until you delete them or delete your account.
• Backups — rolling copies purged within 30 days.
• Moderation and ban records — up to 12 months, so bans cannot be evaded.
• Purchase records — as long as tax and accounting law requires.
• Aggregate analytics — retained in non-identifying form.

Data is transmitted over TLS and stored with access controls that restrict reads to the account that owns the row. Passwords are stored hashed. Free accounts cannot retrieve other members' comment data through the API — that restriction is enforced on the server, not just hidden in the interface. No system is perfectly secure, so please use a strong, unique password.

You can delete individual posts and comments at any time, export a copy of your data from Settings → Privacy & data → Download my data, turn notifications off per category, and permanently delete your account from Settings → Account → Delete account.

Depending on where you live, you may also have the right to access, correct, restrict or object to processing, and to complain to your data protection authority. Email pal_guy@hotmail.com and we will respond within 30 days.

Deleting your account immediately erases your account record, posts, polls, comments, reactions, saved items and notifications, and retires your anonymous ID so it is never reissued. It cannot be undone and does not refund remaining Pro time. Backup and moderation copies expire on the schedules above.

Ending Pro access, by contrast, never deletes anything — your content and saved items stay exactly as they are.

Whispry is not intended for children under 13, or under 16 where local law sets a higher age. If we learn that such an account exists, we delete it.

We will announce material changes to this policy in the app before they take effect. Questions: pal_guy@hotmail.com. See also our Terms of Service.