1. Overview
This Privacy Policy describes how WhisperAct ("we", "us", or "the App") handles information when you use the WhisperAct iOS application. By using the App, you agree to the practices described in this policy.
WhisperAct is designed with a minimal data footprint. The App does not create user accounts, does not operate proprietary servers for your data, and does not collect analytics, advertising identifiers, or behavioral tracking data of any kind.
Who we are. WhisperAct is operated by Zohaib Manzoor Kushwaha, Lahore, Punjab, Pakistan. For the purposes of the EU and UK General Data Protection Regulation (GDPR), we act as the data controller for the limited processing described in this policy. You can reach us at any time at support@whisperact.com.
2. Information We Do Not Collect
We do not collect, store, or transmit:
- Your name, email address, or any contact information
- Device identifiers, advertising IDs (IDFA), or IP addresses
- Analytics, usage statistics, or crash reports via any SDK
- Location data
- Contacts, photos, or any data outside the App's scope
The App contains no analytics SDK, no advertising SDK, and no third-party tracking framework.
3. Voice Recordings
Audio is recorded entirely on your device using your device's microphone. The audio file is used solely to produce a text transcript and is deleted immediately after transcription completes. WhisperAct does not upload, retain, or transmit your raw audio to any server operated by WhisperAct.
For non-English recordings (any of the supported languages other than English), the audio file is transmitted to Groq's speech-to-text API (api.groq.com) for transcription. Groq processes the audio and returns a text transcript. The audio is not retained by Groq after processing. Please refer to Groq's Privacy Policy at groq.com/privacy-policy for details on their data handling.
4. Transcription
Transcription is handled differently depending on your language selection and device:
- English on supported iOS 26 devices: Transcription runs entirely on-device using Apple's on-device speech engine (SpeechTranscriber). Your audio never leaves your device in this path.
- English on other devices or as a fallback: Transcription may use Apple's speech recognition servers — the same infrastructure that powers Siri and Dictation — governed by Apple's Privacy Policy. WhisperAct does not receive, store, or process the audio in this path; it is handled end-to-end by Apple.
- Non-English languages (Urdu, Arabic, Spanish, French, Portuguese, German, Turkish, Russian, Indonesian, Italian, Korean): The audio file is sent to Groq's Whisper API for transcription when an internet connection is available. The audio is not retained by Groq after processing. Transcription is unavailable for these languages when offline.
5. Task and Event Extraction (AI)
When you are online, the text transcript — not the audio — is sent to Groq's language model API (api.groq.com) to identify tasks, reminders, and calendar events. The request contains only the transcript text and the current date and time. It is not linked to your name, Apple ID, device identifier, or any personally identifiable information. Groq does not retain transcript data after processing.
When you are offline, or as a fallback, AI extraction runs entirely on-device using Apple Intelligence or a built-in keyword analysis engine. No data leaves your device in this path.
6. Memos, Tasks, and Calendar Data
All memos and tasks are stored locally on your device using SwiftData. If you subscribe to WhisperAct Pro, your data is synced to your private iCloud database via Apple's CloudKit framework. This data is stored in your personal Apple account and is not accessible to us. WhisperAct has no access to your iCloud content.
Reminders and calendar events are written directly to your device via Apple's EventKit framework and remain fully under your control within Apple's Reminders and Calendar applications.
7. Subscriptions and Purchases
All subscription purchases are processed entirely by Apple through the App Store. WhisperAct does not receive, store, or have access to any payment card information, billing details, or purchase history beyond what Apple exposes to the App (your current subscription status).
Third-party services
8. Third-Party Services Summary
| Service | Purpose | Data transmitted | Retention |
|---|---|---|---|
| Apple iCloud (CloudKit) | Cross-device sync (Pro only) | Memos & tasks (your private iCloud database) | Your control |
| Apple Speech Recognition | English transcription (fallback path) | Audio file (Apple's own pipeline, not seen by us) | Apple's policy |
| Groq Whisper API | Non-English transcription (11 languages) | Audio file — not retained after processing | Not retained |
| Groq LLM API | AI task & event extraction | Transcript text only — no identifier attached | Not retained |
| Apple App Store | Subscription management | Handled entirely by Apple | Apple's policy |
9. Data Retention and Deletion
WhisperAct stores your data only on your device and, for Pro users, in your private iCloud account. We do not maintain copies of your data on any proprietary server.
To delete all your data, go to Settings → Delete All Data within the App. This permanently removes all memos and tasks from your device and iCloud. Deleting or reinstalling the App from your device also removes all locally stored data.
10. Children's Privacy
WhisperAct is not directed at children under the age of 13 (or under 16 in the EU/EEA, or the minimum age required in your country), and we do not knowingly collect personal information from children. If you believe a child below the applicable age has used the App, please contact us and we will take appropriate steps.
11. Your Rights & EU / EEA / UK Data Protection (GDPR)
WhisperAct keeps data on your device and in your private iCloud account, and does not store your memos, transcripts, or audio on any server we operate. The limited online processing described in this policy is covered below for users in the EU, EEA, and UK.
Legal bases for processing. Where the GDPR applies, we rely on:
- Performance of a contract — to provide the transcription and task-extraction features you actively request.
- Legitimate interests — to operate, secure, and maintain the App. We use no advertising, profiling, or behavioral tracking.
International data transfers. When transcription (non-English) or AI task extraction is performed online, the relevant audio or transcript text is processed by Groq, Inc. in the United States. This is a transfer of data outside the EU/EEA/UK. The transfer is governed by Groq's data-processing terms, which include the EU Standard Contractual Clauses; the data is processed only to return a result, is not retained by Groq after processing, and is not used to train Groq's models. See Groq's Privacy Policy for details.
Your rights. You have the right to access, rectify, erase, restrict, object to, and port your personal data. Because your data lives on your device and in your own iCloud account, you can exercise most of these rights directly in the App — edit or delete any item, or use Settings → Delete All Data (see Section 9). For anything we can otherwise help with, email support@whisperact.com.
Right to complain. You also have the right to lodge a complaint with your local data protection supervisory authority in the EU, EEA, or UK.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of the App after any such changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.
13. Contact
If you have questions or concerns about this Privacy Policy, please contact us at support@whisperact.com.
This Privacy Policy applies to all versions of WhisperAct available on the Apple App Store.