Wisp Privacy Policy

Effective date: October 30, 2026

Policy version: 2026-10-30-v10

This policy explains what information the WisperVoice reading app ("Wisp" for short), its website and our email use, where it goes and your choices. Wisp is offered only in the United States, and this policy follows US law. Wisper Voice LLC, a South Carolina limited liability company ("we", "us"), makes Wisp.

"Parent" includes a legal guardian, and "child" and "reader" mean anyone who uses Wisp through a reader profile. Only a parent who is at least 18 and an adult under the law where they live may agree to this policy and set up Wisp.

Questions or requests: email privacy@wispervoice.com, call 854-212-5305, or write to Wisper Voice LLC, 6650 Rivers Ave., Ste 100, Charleston, SC 29406. Email us if you need this policy in another format, such as large print.

1. Wisp at a glance

• Reading, listening, Wisp's voice and Smart Wisp's answers all work on the device.
• Wisp never records your child's voice. The device's own speech recognition turns speech into words, and Wisp deletes those words after each turn.
• Create a Story is the only feature that uses online AI (OpenAI). It is off until a grown-up turns it on, and a grown-up approves every story.
• Wisp has no ads, chat or public profiles, no tracking across other apps or websites, no analytics tools that watch how your child uses Wisp, and never uses your device's location. We do not sell personal information or share it for advertising.

2. What stays on the device and what goes online

Stays on this device only: each reader's nickname, exact age and picture (chosen from Wisp's own set, never a photo); what your child says; your child's questions and Wisp's answers; reading details such as the words read, word colors and words to practice; settings; and approved Create a Story books.

Goes online:

• To sign in: the grown-up's email address, account ID and sign-in records, such as IP address and device type (section 3).
• A record of each agreement to this policy, the Terms of Use or a subscription's renewal terms (section 11).
• Your plan, and purchase records and device details sent to RevenueCat (section 7).
• How many free Smart Wisp demo minutes the account has used (section 4).
• On Wisp Learn, Wisp Create and Wisp Family: a backup of each reader's progress (section 4).
• Create a Story requests and usage records, only after a grown-up turns it on (section 6).
• Reports a grown-up sends from the app (section 17).
• Ordinary network details, such as IP address, app version and device model, whenever Wisp connects online (section 10).

3. The grown-up's account

A parent account is required to use Wisp on every plan, including Free and Wisp Reader. Children have no accounts and are never asked for an email address. You sign in with your email address, using a password or a sign-in link we email you.

Sign-in, Wisp's account database and its online functions run on Supabase; Wisp has no servers of its own. The account database stores your email address, a random account ID, sign-in times and security records (including IP address and device type) and, if you use a password, only a protected (hashed) form of it. We email you only about sign-in, your account, purchases (such as a reminder before a yearly plan renews), backups, security, your requests or changes to these documents.

4. Readers and backed-up progress

Readers are for children aged 3 to 12. When you add a reader, you enter a nickname (please don't use a full name) and an age and pick one of Wisp's pictures, and a short quiz sets a reading level. These stay on the device.

On the Free plan and Wisp Reader, all reading progress stays on the device. On Wisp Learn, Wisp Create and Wisp Family, Wisp backs up progress to your account so it can be restored on another device. For each reader, the backup contains only:

• a random reader ID that does not contain your child's name;
• an age band (a range such as 6 to 8), never the exact age;
• a broad reading stage (starter, supported or independent) and whether the reader is active on your plan;
• progress totals, such as reading time, words read, streak, stars and books finished;
• the dates your child read (calendar dates only);
• best star scores, rewards, puzzle pieces and the Smart Wisp chapters finished;
• up to 12 favorite books; and
• technical sync records, so an older device can't bring back something you deleted.

The backup does not keep the words read, word colors or reading sessions. Wisp also counts free Smart Wisp demo minutes used for the account and on the device, so the demo doesn't restart. Anything only on the device is lost if Wisp is deleted.

5. Microphone, voices and on-device AI

Microphone: Wisp asks for microphone permission (and, on iPhone and iPad, speech recognition permission) the first time a reading mode listens, and the microphone is on only during your child's turn. Speech goes, unsaved, to the device's built-in speech recognition (Apple's, or Google's or the device maker's on Android). Wisp asks it to work on the device and does not listen if on-device recognition is not available; Wisp does not use Apple's online recognition, which Apple's permission message mentions. Wisp does not make or keep recordings. The recognized words are used to color words, answer a question or check an answer, and are deleted after each turn.

Voices: Wisp's voices are generated on the device. Wisp does not create a voice profile of your child.

Smart Wisp: Smart Wisp, which answers questions about the book and leads reading lessons, is an AI model that runs entirely on the device, so questions and answers are not sent anywhere. Smart Wisp is a computer program, not a person. If asked, Wisp says "I'm a computer helper, not a real person." After every 3 hours of use, it reminds your child to take a break. If a question mentions hurting themselves, something dangerous, a private detail such as an address, or changing Wisp's rules, Wisp says "Please tell a grown-up you trust." No filter catches everything, so please stay nearby. No person reads or hears these conversations, and Smart Wisp can't recognize every worry or call for help.

Downloads: once a grown-up agrees to this policy, Wisp downloads its voice files (about 165 to 200 MB) and, on devices that can run Smart Wisp, its files (about 700 MB) on Wi-Fi, and asks before using mobile data. Wisp starts none of these downloads before a grown-up agrees. Google Play or the App Store delivers them; Wisp adds no account ID, reader ID or name.

6. Create a Story (online)

Create a Story comes with Wisp Create and Wisp Family, but it is not available yet in every version of the app. It stays off until a grown-up turns it on in the Adult Area. Your child picks three story cards (a hero, a place and an adventure), and Wisp's story service, which runs on Supabase, asks OpenAI to write a short book and paint its pictures.

What is sent: the device sends the story service the cards, the reading level, a broad age range (2 to 6, 6 to 10 or 10 to 14), a random number and your sign-in session, which includes your account ID and email address, so it can check your plan. OpenAI receives only the cards, reading level and age range, Wisp's own instructions and pictures, the story it wrote (for its safety check) and a coded household tag that helps it spot misuse without revealing who you are. Wisp never sends your child's name or nickname, exact age, voice or photo, or anything your child says. OpenAI never receives your IP address, email address or account, reader or device ID.

What is kept: stories and pictures are saved only on the device. The story service keeps only usage records, such as how many stories were made each month. OpenAI may not use Create a Story requests to train its models and keeps them for up to 30 days to check for misuse.

A grown-up reads and approves every story and its pictures, behind the Adult Check, before the story joins your child's Library. No automatic check is perfect, so please read new stories with your child. These stories carry an "AI" label.

7. Purchases

Purchases are made through the Apple App Store or Google Play. Wisp Learn, Wisp Create and Wisp Family are auto-renewing subscriptions billed by Apple or Google. They renew automatically until you cancel them in the store, and we email you a reminder before a yearly plan renews. Wisp never sees your card or bank details.

We use RevenueCat to check purchases and subscriptions. Wisp starts RevenueCat's software only after a grown-up passes the Adult Check. RevenueCat receives your random Wisp account ID, purchase records (plan, price, dates and renewal status) and basic device details: IP address, device model, system and app version, language, store country and, on iPhone and iPad, Apple's app-maker device ID (IDFV), which is not the advertising ID. These are used only to check purchases, and RevenueCat gives us reports about purchases and subscriptions only. Apple receives your Wisp account ID, and Google a scrambled (hashed) form of it, to match purchases to your account.

8. Age checks required by law

Some US laws require apps to use age information from the app stores. Before a purchase, at setup and when restoring purchases, Wisp asks Apple or Google for the age range of the store account and whether a parent manages it. If the store reports someone under 18 without a parent's approval, or cannot answer, Wisp does not start a purchase; free reading keeps working. On iPhone and iPad this check needs iOS or iPadOS 26 or later; on earlier versions, Apple's own approval, such as Ask to Buy, applies. The answer is used only to follow these laws and is not saved, sent to Wisp's account database or shared.

9. How we use information

We use information only to provide Wisp's features, sign you in and keep your account secure, restore backed-up progress, check purchases and apply your plan, answer requests, prevent fraud and follow the law.

We do not show ads. We do not use children's information for advertising, marketing, profiling or decisions with legal or similarly significant effects. We do not collect, use or sell anyone's personal information, grown-ups' or children's, to train AI models.

Children's screens show stars and days read; reading accuracy estimates are shown only to grown-ups. Rewards follow fixed rules and can't be bought. Wisp sends no reminders to bring your child back, has no leaderboards, and suggests books on the device, never from reading scores.

10. Who we share information with

Service providers that run parts of Wisp for us:

• Supabase: sign-in, Wisp's account database, backups and Wisp's story service.
• RevenueCat: checking purchases and subscriptions.
• OpenAI: writing stories and painting pictures for Create a Story, only after a grown-up turns it on.
• Cloudflare: running our website, wispervoice.com, and forwarding the emails you send to our wispervoice.com addresses.
• Google (Gmail): holding the emails you send us.
• Resend: sending emails about your account, including sign-in emails.

Companies that act under their own terms and privacy policies:

• Apple and Google: purchases, age checks, delivering the app and its files, and speech recognition. If you share diagnostics with app developers in your device settings, they may give us crash reports.

Our website sets no cookies and shows no ads. It counts visits with Cloudflare Web Analytics, which stores nothing on your device and does not fingerprint visitors; it reports only the pages visited, the site you came from, approximate country, device type, browser and operating system.

These services receive ordinary technical details, such as your IP address, when Wisp connects, and some estimate a rough location (city, ZIP code or country) from it. We use these details only to keep Wisp working and secure, never to contact, track or profile you or your child. We don't allow advertising, analytics or data companies to collect information through Wisp about your or your child's activity across other apps and websites.

We may also share information if the law requires it, to protect someone's safety, or in a merger or sale of our business. This policy still protects it, and no new owner may use children's information in a new way without a parent's agreement.

11. Children's privacy

Wisp is made for children aged 3 to 12, so the US Children's Online Privacy Protection Act (COPPA) applies; every reader gets the same protections. This policy is our online notice to parents.

• A child never types a name, email address, phone number, photo or message into Wisp, and what a child says stays on the device.
• Only a parent may set up Wisp. Before any account or reader exists, the parent reads this policy and the Terms of Use and taps I Agree; until then, Wisp backs up nothing and starts no downloads. Wisp records each agreement on the device and, once the parent signs in, in its account database: the document versions, the time, the app build, the type of device and a coded account reference with no email address, plus the plan, billing period, price and renewal terms for a subscription. We keep these records for 3 years, even after the account is deleted, to show that a parent agreed.
• Signing in, adding readers, buying, the Adult Area and links that leave the app, such as Contact Support, need the Adult Check, a short task that keeps young children out. It does not check who you are or how old you are.
• What we collect about children and why: on plans with backups, the backup in section 4, to restore progress; with Create a Story, the request in section 6, to make the story; and technical details such as the device's IP address and, after the Adult Check on iPhone and iPad, the IDFV that RevenueCat receives to check purchases. Section 10 lists who receives it.
• We use children's information only to run Wisp for your family and follow the law. We never sell it or use it for ads, marketing profiles or AI training, and our service providers may not either.
• We don't ask a child for more information than reading needs. If a child emails us, we reply once, only about that message, and then delete it.
• You can review your child's information, have it deleted and refuse further collection at any time (section 12). Section 13 says how long we keep it.
• If you think a child used Wisp without a parent setting it up, email privacy@wispervoice.com and we will delete their information.

12. Your choices and rights

In the app:

• See it: the Progress Report in the Adult Area shows each reader's progress and, on paid plans, the words they looked up and the words to practice, on this device.
• Correct it: change your account email in the Adult Area, or email us. To change a reader's details, delete and add the reader again.
• Reset Progress in the Adult Area clears a reader's progress on this device and in the backup. Deleting a reader removes it from both (the backup is updated when Wisp is next online).
• Delete your account: "Delete Wisp account & reader profiles" in the Adult Area deletes your account, all backed-up reader data and your purchase record at RevenueCat, and clears reader data from this device. You confirm with a fresh sign-in from a link we email you. A few records are kept for a limited time (section 13).
• Withdraw your consent: turn off Create a Story or microphone permission, delete a reader or your account, or cancel your subscription to stop backups.

Delete without the app: you don't need to install or open Wisp to delete your WisperVoice (Wisp) account. Email privacy@wispervoice.com and give the email address you sign in with. Once we confirm that you control the account, we delete the same information as "Delete your account" above and email you when it is done, within 45 days. These steps are also on our website, at https://wispervoice.com/privacy/#your-choices-and-rights.

Deleting the app, a reader or your account does not cancel a subscription. Cancel it in your App Store or Google Play subscription settings.

US state privacy rights: wherever you live in the US, you can ask whether we hold personal information about you or your child, and get a copy in a common file format, correct it or delete it. You can also opt out of the sale of personal information, targeted advertising and profiling for decisions with legal or similarly significant effects (Wisp does none of these). We will not treat you differently for using these rights.

These are the kinds of personal information we and our service providers have received in the past 12 months:

• identifiers: email address, account ID, reader IDs, IP addresses, device type, the IDFV and the coded household tag;
• customer records: emails and reports you send us, and agreement records;
• age: age bands and Create a Story age ranges, never exact ages;
• commercial information: plan and purchase records;
• app activity: backed-up progress, demo minutes used and Create a Story usage;
• approximate location: estimated from IP addresses, never precise;
• inferences: each reader's broad reading stage; and
• sensitive information: sign-in details and children's information, used only to run Wisp.

We received no biometric information, precise location, photos, recordings or education records. The sources are you, your device, Apple, Google and RevenueCat. We have not sold personal information or shared it for advertising in the past 12 months.

To make a request, email privacy@wispervoice.com from your account email. We confirm that the request comes from the parent on the account, for example by asking you to reply to a message we send. Someone you authorize may ask for you with your signed permission. We reply within 45 days, or tell you within that time why we need up to 45 more. If we decline, we tell you why. To appeal, reply to our answer with the word "Appeal". We answer your appeal in writing within 45 days, and if we still decline, we tell you how to complain to your state attorney general.

Do Not Track: Wisp doesn't track you across other apps or websites, so Do Not Track and Global Privacy Control signals don't change how it works. Nevada residents may send a request not to sell their information to privacy@wispervoice.com, although we do not sell personal information.

13. How long we keep information

• On the device only: until you delete it, the reader or the Wisp app.
• Recognized speech: deleted after each turn. Speech is never recorded.
• Parent email address, account ID, plan and demo minutes used: until you delete the account (the device's demo count, until you delete the app).
• Backed-up reader data: while your household has a plan with backups, and for 12 months after the last such plan ends; then deleted automatically, with a notice in the Adult Area 30 days before. Deleted sooner when you delete the reader or the account.
• Technical sync records: up to 400 days; deleted with the account.
• Purchase update records (with no email or account ID): up to 400 days, even after the account is deleted.
• RevenueCat purchase records: until you delete your account.
• Create a Story usage records: 13 months; sooner if you delete the account.
• Create a Story requests at OpenAI: up to 30 days, unless OpenAI must keep them longer by law or to protect its services or others.
• Agreement records: 3 years after each agreement, even after the account is deleted.
• A request to delete your account: 10 minutes to confirm it by email; erased once confirmed, or within about a day.
• Signed-in sessions: until you sign out on that device or delete your account.
• Sign-in, service and error logs at Supabase: up to 90 days, even after the account is deleted.
• Supabase database backups: encrypted, up to 30 days.
• Messages you send us: as long as needed to help you; records of privacy requests and our answers for 24 months.

We keep information longer only if a law, court order or legal claim requires it.

14. Security

We protect information with encrypted connections, access rules that let each household reach only its own records, and checked downloads. The Adult Check is not a security measure: any grown-up on a device signed in to your account can change your readers' information. No system is perfectly secure. If someone gets into your or your child's information without permission, we will tell you without unreasonable delay, as the law requires. Please keep your device locked and your email account secure.

15. Where information is processed

We are based in the United States. Our service providers may process information in other countries, and we choose ones that protect it as this policy describes.

16. Changes to this policy

When we change this policy, we update the version and effective date at the top, which is never earlier than the day we publish it. For an important change, such as collecting, sharing, using or keeping children's information in a new way, Wisp asks a grown-up to review it and agree again before continuing; we will not use children's information in a new way without a parent's consent. If you don't agree, you can stop using Wisp and ask us to delete your account. This policy is in the app under Settings > Privacy Policy and online at https://wispervoice.com/privacy/. Ask us for any past version.

17. Contact us

Wisper Voice LLC

6650 Rivers Ave., Ste 100

Charleston, SC 29406

Phone: 854-212-5305

Email: privacy@wispervoice.com

To report a safety concern or a problem with a book, story or Smart Wisp answer, use "Report a story or Wisp answer" in the Adult Area or email us. The report opens your own email app with the kind of problem, an optional title, your description, the app version and the type of device, never your child's words; nothing is sent until you send that email. Please don't include your child's name or what your child said.