Privacy Policy

Last updated: October 2, 2026

Bu çeviri yalnızca bilgilendirme amaçlıdır. Bağlayıcı metin İngilizce sürümdür.

Whisper is an ephemeral, widget-first messaging app for people who have paired with each other. It is operated by Lula Apps ("Lula Apps", "we", "us"). This policy explains what information the app handles, how it is used, and the choices you have. We built Whisper to keep your conversations private by default — your messages are end-to-end encrypted and are deleted about a day after they are opened, at the latest.

1. Information we collect

Account and sign-in

You sign in with either Sign in with Apple or Sign in with Google:

• Sign in with Apple — Apple provides us a unique account identifier. If you choose to hide your email, Apple gives us a private relay address instead of your real one. We do not store the name Apple offers during sign-in.
• Sign in with Google — Google provides us a unique account identifier and your email address so we can create and identify your account. We use your Google information only to sign you in.

Authentication is handled by our backend provider, Supabase. Your sign-in session tokens are stored securely on your device.

Profile

• A display name you choose during onboarding.
• An optional profile photo, stored in private storage and not publicly accessible.

Pairing

Each pair in Whisper connects exactly two people, and you can be in more than one pair. To set up a pair we store which accounts are paired and the public cryptographic keys used to establish end-to-end encryption. We never receive your private keys.

Messages and media

The text, photos, voice notes, and videos you send are end-to-end encrypted on your device before they reach our servers. We store and relay only the encrypted form and cannot decrypt it. Encrypted messages are kept only while they can still be opened or replayed: a message is removed when the person who received it dismisses or answers it, and at the latest about 24 hours after they first open it. A message that is never opened is removed after one week.

Songs

You can attach a song to a photo or video. The song's title, artist, and its identifiers on Apple Music, Spotify, and YouTube Music travel inside the end-to-end encrypted message, so we cannot see which song a message carries. Finding the song and playing it does involve other services:

• Searching — what you type in song search goes straight from your device to Apple's music catalogue, together with your App Store country. It does not pass through our servers.
• Matching a song across services — when you pick a song, paste a song link, or open a song you received, your device sends that song's link and your App Store country to our servers. We then look the song up with Apple, Spotify, and YouTube to find the same track on each service. Those lookups come from our servers, not from your device, and contain only the song's identifier or its title and artist. The request is made from your signed-in account so that we can prevent abuse, but it carries nothing about the message, the pair, or the person you are sending to. We do not store the link or the result, and we do not log the link, the title, or the artist.
• Samples and cover art — a song's 30-second sample is streamed to your device directly from Apple when you tap play, and is not saved. Cover art is loaded directly from Apple, Spotify, or YouTube. As with any web request, that service sees your IP address.
• Opening a song — opening a song takes you to Apple Music, Spotify, or YouTube Music, where that service's own privacy policy applies. To choose where a song opens, the app checks which of these apps are installed. That, and the music service you prefer, stay on your device.

Song matching uses YouTube API Services. Google's privacy policy is at policies.google.com/privacy.

Notifications

To deliver push notifications, we register a device token with Apple Push Notification service (APNs). Notification delivery is handled by Apple; the message content underlying a notification remains end-to-end encrypted.

Purchases and subscriptions

If you buy a subscription, the purchase is processed by Apple through the App Store, and we use RevenueCat to manage and verify subscription status. We receive your subscription tier and status — we never receive your payment card number or full billing details.

Diagnostics

To find and fix crashes and bugs, we collect technical diagnostic information such as your device model, operating system version, app version, and a trail of recent in-app events (breadcrumbs). These reports are processed using Sentry and do not include your message content.

Anonymous usage analytics

We record a small set of anonymous, content-free product events — for example, that a message was sent and its type (text, photo, voice, video), or that a pairing completed. These events are tied only to a random installation identifier, never to your name, account, pair, or message content, and the identifier is reset when you delete your account. This analytics data is processed on our own servers (Supabase), not shared with a third-party analytics provider.

2. What we do not collect

• We do not read, view, or listen to your message content — it is end-to-end encrypted.
• We do not collect your location. If you add a place to a photo or video, its name and where it is travel inside the end-to-end encrypted message to the person you send it to, and we cannot see them. Your device asks Apple for the place's name.
• We do not use advertising identifiers (IDFA) or track you across other apps and websites.
• We do not sell or rent your personal information to anyone.

3. End-to-end encryption

Whisper protects your conversations with end-to-end encryption, using a key-agreement handshake and a forward-secret message ratchet. The private keys are generated on your device, stored in the iOS Keychain, and never leave your device. Because of this, our servers only ever hold ciphertext — neither we nor anyone who intercepts the data in transit can read your messages or media.

4. How we use information

• To operate Whisper — pair you with another person and deliver your encrypted messages.
• To authenticate you and keep your account secure.
• To send push notifications you have enabled.
• To process and verify subscriptions.
• To diagnose crashes, fix bugs, and improve reliability.
• To prevent abuse, fraud, and misuse of the service.
• To comply with legal obligations.

5. How long we keep it

• Messages and media: deleted when the recipient dismisses or answers them, and at the latest about 24 hours after they are first opened. A message that is never opened is deleted after one week.
• Account and profile data: kept while your account is active.
• Diagnostics and analytics: retained only as long as needed to keep the service working well, then aggregated or deleted.

When you delete your account, we delete your profile and the data associated with it from our systems, remove your registered device token, and reset your anonymous analytics identifier.

6. Who we share it with

We do not sell your data. We share information only with the service providers (sub-processors) that we rely on to run Whisper, and only as needed to provide the service:

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the service.

7. Security

We protect your data with end-to-end encryption for message content, secure transport (HTTPS with certificate pinning), encrypted storage of media, and single-device session enforcement. No system is perfectly secure, but we work to protect your information using current best practices.

8. Your choices and rights

• Access and update your display name and profile photo in the app.
• Unpair from another person at any time in the app.
• Delete your account and its associated data from Settings inside the app.
• Manage notifications in your device Settings, and manage your subscription in the App Store.

Depending on where you live, you may have additional rights to access, correct, or delete your personal information, or to object to or restrict certain processing. To make a request, contact us at the address below.

9. Children

Whisper is not directed to children, and we do not knowingly collect personal information from children under 13 (or the minimum age required in your country). If you believe a child has provided us information, please contact us and we will delete it.

10. International data transfers

We and our service providers may process and store information in countries other than where you live. Where required, we take steps to ensure your information receives an appropriate level of protection when it is transferred.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, provide notice in the app.

12. Contact us

If you have questions about this policy or your data, contact us at privacy@lulaapps.com.