Privacy policy
Last updated: 13 October 2026. This policy explains how [Company name, registration no., address] (“we”) handles personal data in Whispers. We designed Whispers to collect as little as possible about your family.
Who uses Whispers
Whispers is for parents and legal guardians. Children do not create accounts and are not asked for any data. A parent enters information about their own child and confirms they are the child's parent or legal guardian.
What we collect
- Parent: email address, the name you want us to use, language, and the date and version of your consent.
- Child: first name, daughter/son, date, time and city of birth (with its coordinates and time zone), and your answers to the questionnaire (personality, worries, interests, a pet or toy name).
- Content we generate for you: the portrait, stories, tips and weekly plans, and which stories you marked as read.
- Payments are handled by Stripe. We never see or store card numbers; we keep a Stripe customer id and your subscription status.
- Technical: a single essential session cookie that keeps you signed in, and a language cookie. No analytics, advertising or tracking cookies.
Why we use it (legal bases, GDPR art. 6)
- To provide the service you ordered: performance of a contract (art. 6(1)(b)).
- Your child's data: your consent as parent or guardian (art. 6(1)(a) and art. 8), which you can withdraw at any time by deleting the account.
- Billing and accounting records: legal obligation (art. 6(1)(c)).
Who processes it for us
- OpenAI (API) writes the portraits and stories. It receives the child's first name, gender, age, birth chart positions and questionnaire answers, but never your email or payment details. Under the vendor's API terms, this data is not used to train its models.
- Stripe processes payments.
- Resend delivers sign-in emails.
- Open-Meteo resolves the city name you type to coordinates (only the city text is sent).
- Our servers are hosted by Scaleway in the European Union.
Some processors may transfer data outside the EEA under Standard Contractual Clauses. We do not sell or share data for advertising.
How long we keep it
Until you delete your account. Deleting is immediate and removes your account, your children's profiles and all stories. Stripe keeps invoices for the period required by tax law.
Your rights
You can access and download all your data (Settings → Download my data), correct it, delete it (Settings → Delete account), restrict or object to processing, and withdraw consent. Contact us at [privacy@your-domain]. You may also complain to your data protection authority (in Latvia: Datu valsts inspekcija, www.dvi.gov.lv).
About astrology
Whispers uses astrology as a playful way to notice and talk about your child. It is not a medical, psychological or scientific assessment.