Your privacy,
protected.

1. Overview

This Privacy Policy describes how WhisperAct ("we", "us", or "the App") handles information when you use the WhisperAct iOS application. By using the App, you agree to the practices described in this policy.

WhisperAct is designed with a minimal data footprint. The App does not create user accounts or operate proprietary servers for your content. It uses Firebase Analytics for limited product metrics and Firebase Crashlytics for crash diagnostics. Those services never receive your memo content through WhisperAct's custom events, and they are not used for advertising or cross-app tracking.

Who we are. WhisperAct is operated by Zohaib Manzoor Kushwaha, Lahore, Punjab, Pakistan. For the purposes of the EU and UK General Data Protection Regulation (GDPR), we act as the data controller for the limited processing described in this policy. You can reach us at any time at support@whisperact.com.

2. Information Kept Out of Analytics

WhisperAct does not deliberately send or attach the following to Firebase Analytics or Crashlytics:

• Your name, email address, or any contact information
• Memo audio, transcripts, titles, notes, task text, or calendar content
• Place names, saved-place coordinates, or exact reminder and event times
• Advertising IDs (IDFA) or Apple's vendor identifier (IDFV)
• Contacts, photos, or any data outside the App's scope

The App contains no advertising SDK and does not use analytics data to track you across other companies' apps or websites.

3. Voice Recordings

Audio is recorded entirely on your device using your device's microphone. The audio file is used solely to produce a text transcript and is deleted immediately after transcription completes. WhisperAct does not upload, retain, or transmit your raw audio to any server operated by WhisperAct.

For non-English recordings (any of the supported languages other than English), the audio file is transmitted to Groq's speech-to-text API (api.groq.com) for transcription. Groq processes the audio and returns a text transcript. The audio is not retained by Groq after processing. Please refer to Groq's Privacy Policy at groq.com/privacy-policy for details on their data handling.

4. Transcription

Transcription is handled differently depending on your language selection and device:

• English on supported iOS 26 devices: Transcription runs entirely on-device using Apple's on-device speech engine (SpeechTranscriber). Your audio never leaves your device in this path.
• English on other devices or as a fallback: Transcription may use Apple's speech recognition servers — the same infrastructure that powers Siri and Dictation — governed by Apple's Privacy Policy. WhisperAct does not receive, store, or process the audio in this path; it is handled end-to-end by Apple.
• Non-English languages (Urdu, Arabic, Spanish, French, Portuguese, German, Greek, Turkish, Russian, Indonesian, Italian, Polish, Korean, Japanese): The audio file is sent to Groq's Whisper API for transcription when an internet connection is available. The audio is not retained by Groq after processing. Transcription is unavailable for these languages when offline.

5. Task and Event Extraction (AI)

When you are online, the text transcript — not the audio — is sent to Groq's language model API (api.groq.com) to identify tasks, reminders, and calendar events. The request contains only the transcript text and the current date and time. It is not linked to your name, Apple ID, device identifier, or any personally identifiable information. Groq does not retain transcript data after processing.

When you are offline, or as a fallback, AI extraction runs entirely on-device using Apple Intelligence or a built-in keyword analysis engine. No data leaves your device in this path.

6. Memos, Tasks, and Calendar Data

All memos and tasks are stored locally on your device using SwiftData. If you subscribe to WhisperAct Pro, your data is synced to your private iCloud database via Apple's CloudKit framework. This data is stored in your personal Apple account and is not accessible to us. WhisperAct has no access to your iCloud content.

Reminders and calendar events are written directly to your device via Apple's EventKit framework and remain fully under your control within Apple's Reminders and Calendar applications.

7. Analytics and Crash Diagnostics

Firebase Analytics. On physical devices in release builds, the App records a small set of product events using bounded labels, such as capture input type and AI engine, manual-item type and screen, Apple-sync failure category, review outcome, and paywall context. Custom events never include free text or memo content. Firebase also automatically processes app lifecycle and product-interaction events, an app-instance identifier, device/OS/app metadata, a broad geographic region derived from a masked IP address, and App Store purchase or subscription events.

IDFV collection and advertising-personalisation signals are disabled. The App does not link AdSupport, does not access IDFA, and does not use Firebase data for advertising or cross-app tracking. Analytics collection is disabled in Debug builds and in the iOS Simulator.

Firebase Crashlytics. Crashlytics sends crash stack traces, app and device state, OS/app versions, a Firebase installation identifier, and related diagnostic data to help us find and fix crashes. We do not set a user ID or deliberately attach memo, transcript, task, note, place, or schedule content to crash reports.

Firebase is operated by Google. See Firebase Privacy and Security for its processing and retention information.

8. Subscriptions and Purchases

All subscription purchases are processed by Apple through the App Store. WhisperAct does not receive payment card information or billing details. The App receives subscription transaction and product status needed to unlock Pro, and Firebase Analytics may automatically record purchase or subscription events as described above.

9. Third-Party Services Summary

10. Data Retention and Deletion

WhisperAct stores your memo and task content only on your device and, for Pro users, in your private iCloud account. We do not maintain copies of that content on any proprietary server. Limited analytics and crash-diagnostic data is retained by Google under Firebase's policies and configured retention controls.

To delete all your data, go to Settings → Delete All Data within the App. This permanently removes all memos and tasks from your device and iCloud. Deleting or reinstalling the App from your device also removes all locally stored data.

11. Children's Privacy

WhisperAct is not directed at children under the age of 13 (or under 16 in the EU/EEA, or the minimum age required in your country), and we do not knowingly collect personal information from children. If you believe a child below the applicable age has used the App, please contact us and we will take appropriate steps.

12. Your Rights & EU / EEA / UK Data Protection (GDPR)

WhisperAct keeps data on your device and in your private iCloud account, and does not store your memos, transcripts, or audio on any server we operate. The limited online processing described in this policy is covered below for users in the EU, EEA, and UK.

Legal bases for processing. Where the GDPR applies, we rely on:

• Performance of a contract — to provide the transcription and task-extraction features you actively request.
• Legitimate interests — to operate, secure, and maintain the App. We use no advertising, profiling, or behavioral tracking.

International data transfers. When transcription (non-English) or AI task extraction is performed online, the relevant audio or transcript text is processed by Groq, Inc. in the United States. Firebase Analytics and Crashlytics data is processed by Google. These services may process data outside the EU/EEA/UK under their applicable data-transfer terms. See Groq's Privacy Policy and Firebase Privacy and Security for details.

Your rights. You have the right to access, rectify, erase, restrict, object to, and port your personal data. Because your memo and task content lives on your device and in your own iCloud account, you can exercise most of these rights directly in the App — edit or delete any item, or use Settings → Delete All Data (see Section 10). For analytics/diagnostic requests or anything else we can help with, email support@whisperact.com.

Right to complain. You also have the right to lodge a complaint with your local data protection supervisory authority in the EU, EEA, or UK.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of the App after any such changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

14. Contact

If you have questions or concerns about this Privacy Policy, please contact us at support@whisperact.com.

This Privacy Policy applies to all versions of WhisperAct available on the Apple App Store.