Privacy Policy

Whispen ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle your data when you use the Whispen keyboard app and related services.

The short version: We send your voice recordings to OpenAI for transcription and immediately discard them. We don't store your audio, we don't log your keystrokes, and we don't have access to what you type.

Voice Audio (Transient): When you use Whispen's voice input feature, your audio recording is sent to OpenAI's Whisper API for transcription. This audio is processed in real-time and is not stored by Whispen. OpenAI's API does not use this data for model training (per their API Data Usage Policy).

Account Information: If you create an account, we store your Apple ID identifier and subscription status via Supabase (our authentication provider).

Analytics: We use Vercel Analytics, which collects anonymized, cookie-free usage data (page views, device type, country). No personally identifiable information is collected.

- Keystrokes: Whispen does not log, record, or transmit any keystrokes you type on the keyboard.
• Message Content: We do not have access to the text you type or the transcribed output.
• Contacts or Personal Data: We do not access your contacts, photos, or other personal data on your device.
• Location: We do not collect your location.

Whispen uses the following third-party services:

• OpenAI Whisper API — for speech-to-text transcription. Audio is sent to OpenAI servers (US-based) for processing. Per OpenAI's API data usage policy, API inputs and outputs are not used to train their models.
• Supabase — for authentication and subscription management. Stores your account identifier and subscription status.
• Apple StoreKit — for subscription billing. Payment processing is handled entirely by Apple.
• Vercel Analytics — for anonymous, cookieless website analytics.

Voice audio is processed by OpenAI's servers, which are located in the United States. By using Whispen's voice features, you consent to your audio being processed in the US. Audio is transient — it is not stored by either Whispen or OpenAI after transcription is complete.

For users in the European Economic Area (EEA):

• Legal Basis: We process voice audio based on legitimate interest (providing the transcription service you requested). Account data is processed based on contract performance.
• Data Minimization: We collect only what is necessary. Audio is transient and not stored.
• Your Rights: You have the right to access, correct, or delete your personal data. See the "Your Rights" section below.
• Data Transfers: Audio is processed in the US via OpenAI's API. This is necessary to provide the transcription service.

- Voice Audio: Immediately discarded after transcription. Not stored.
• Account Data: Retained as long as your account is active. Deleted upon account deletion request.
• Analytics: Anonymized and aggregated. No personal data retained.

You have the right to:

• Access your personal data
• Delete your account and all associated data
• Export your data
• Withdraw consent for data processing

To exercise any of these rights, including account deletion, email us at support@whispen.io. We will respond within 30 days.

Whispen is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us at support@whispen.io and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date and, where appropriate, through in-app notification. Continued use of Whispen after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, contact us at:

Email: support@whispen.io