Privacy Policy
Last updated: April 11, 2026
Whispurr is a private intimacy tracker built and operated by WhispurrApp, LLC ("Whispurr", "we", "us", or "our"). This policy explains what data Whispurr collects when you use the iOS app, why we collect it, and what we do — and don't — do with it.
We built Whispurr because intimate data deserves to be treated with extraordinary care. Our guiding principle is simple: your intimate life stays on your device.
1. What we don't do
- We do not sell your data.
- We do not use third-party advertising or tracking SDKs.
- We do not use analytics services to profile your behavior.
- We do not share your data with data brokers.
- We do not read the contents of your messages or attached media. They are end-to-end encrypted on your device before being uploaded.
2. Data we collect
2.1 Account information
When you create an account, we collect your email address and an opaque user identifier ("user ID") through Firebase Authentication. These are used solely to sign you in and to allow you to pair with your partner. They are not used for marketing or analytics.
2.2 Session data
Whispurr lets you log intimate sessions, partners, activities, and notes. This data is stored locally on your device in an encrypted SQLite database. It is not transmitted to our servers and we cannot read it.
2.3 Photos, videos, and other media
You may attach photos and videos to sessions or send them to your partner through the in-app chat. Media attachments are encrypted on your device before they leave your phone. Encrypted blobs are stored using Stream Chat (operated by GetStream.io, Inc.), but only you and your paired partner hold the keys needed to decrypt them. We cannot view your media.
2.4 Messages with your partner
Whispurr uses Stream Chat to deliver messages between paired partners. Message metadata (sender, recipient, timestamp) is processed by Stream Chat in order to deliver the message. Message content and attachments are encrypted such that only the participants can read them.
2.5 Diagnostic information
Whispurr does not use Firebase Analytics, Crashlytics, or any third-party analytics service. The only diagnostics you may see are those provided by Apple's standard "Share with App Developers" opt-in, which you control through iOS Settings → Privacy & Security → Analytics & Improvements.
3. How we use the data
We use the data we collect strictly to:
- Sign you in to your account.
- Pair you with your partner.
- Deliver chat messages and encrypted media between you and your partner.
- Respond to support requests.
We do not use your data to train machine-learning models, to advertise to you, or to make automated decisions about you.
4. Third-party processors
Whispurr uses a small number of trusted service providers ("processors") to operate the app. None of them are used for advertising or tracking.
- Google Firebase Authentication (Google LLC) — handles sign-in and account management. Receives your email address and an opaque user ID. Firebase privacy.
- Stream Chat (GetStream.io, Inc.) — delivers messages between paired partners and stores encrypted media blobs. Receives metadata required for delivery; cannot read message contents or media. Stream privacy.
- Apple Inc. — distributes the app through the App Store and provides anonymous diagnostics if you opt in via iOS Settings. Apple privacy.
- Cloudflare, Inc. — hosts whispurr.app and may log basic request metadata (IP address, user agent) for the duration required to serve the page and protect against abuse. Cloudflare privacy.
5. Data storage and security
Session data is stored on your device. Account credentials are stored in iOS Keychain. Media attachments are encrypted on your device using a key derived from your account credentials before being uploaded to Stream Chat. Network traffic between Whispurr and our processors uses HTTPS/TLS.
No system can be guaranteed perfectly secure. We design Whispurr so that even in the event of a server compromise at one of our processors, your intimate content cannot be read without your account credentials.
6. Data retention and deletion
Local session data persists until you delete it from the app or uninstall Whispurr. Account information persists in Firebase Authentication until you delete your account. Encrypted media in Stream Chat persists until you delete the corresponding chat or attachment.
To delete your Whispurr account and all associated server-side data, open the app and navigate to Settings → Account → Delete Account, or email privacy@whispurr.app. Account deletion is permanent and cannot be undone.
7. Children
Whispurr is not directed at children. The app is rated 17+/18+ and is not intended for use by anyone under the age of 18 (or the equivalent age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact privacy@whispurr.app and we will delete it.
8. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate personal information.
- Delete your account and associated personal information.
- Object to or restrict certain processing of your data.
- Receive a copy of your personal information in a portable format.
- Lodge a complaint with a data protection authority.
To exercise any of these rights, email privacy@whispurr.app. We will respond within 30 days.
9. International transfers
Whispurr is operated from the United States. By using Whispurr, you understand that your information may be processed in the United States and other countries that may have different data-protection laws than your country of residence.
10. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top and, for material changes, notify you in the app. Your continued use of Whispurr after a change indicates your acceptance of the updated policy.
11. Contact us
Questions, concerns, or requests related to this policy can be sent to:
WhispurrApp, LLC
Email: privacy@whispurr.app