Whispered – Privacy Policy

This Privacy Policy explains how Whispered ("we," "us," "our") processes information when you use our AI-powered relationship simulation role-playing game (the "App"). We operate the App as Artifectus, MB (company code: 307536402), a company registered in Lithuania.

We collect only what we need to provide the service. We don't run ads or sell your data.

1. What We Collect

Account & Authentication

• Email address

App Usage

• Chat messages you send and AI responses generated (text only)
• Technical logs: IP address, device/HTTP metadata (user agent, timestamps, request paths) for security and diagnostics

We do not require you to share your real name in chat, and you should avoid sending personal or sensitive information.

2. How We Use Your Data

• Provide and secure the App (authentication, fraud prevention, reliability)
• Generate AI responses to your messages
• Create, store, and deliver AI-generated images during conversations
• Maintain conversation history and associated content
• Debug and improve service performance
• Comply with legal obligations if required

We do not send marketing or promotional emails.

3. Legal Bases

Where privacy laws apply (e.g., GDPR-style regimes), processing is based on:

• Contract necessity – to provide the App you requested.
• Legitimate interests – security, fraud prevention, debugging.
• Consent – where you actively choose to interact with AI or request deletion.

4. Third-Party Service Providers (Processors)

We use trusted service providers ("processors") to operate Whispered. These providers process limited user data solely on our behalf and may include:

• Supabase – authentication
• xAI – AI text generation; processing of prompts and responses
• Replicate and Kie.ai – AI image generation services
• Hostinger – hosting and infrastructure services
• Cloudflare – DNS and content delivery network (CDN) services
• Other similar service providers – as needed to provide and improve our services

AI processing: Your messages are sent to third-party AI providers to generate responses. We do not opt into model-training programs when such options exist. Providers may temporarily retain data for abuse prevention or diagnostics under their own privacy policies. We do not permit them to use your data to identify you.

We may update or replace service providers as our technology stack evolves. All providers must maintain reasonable data-protection and security standards consistent with this Policy.

5. Cookies and Local Storage

Analytics Cookies: We use Google Analytics to monitor service performance, understand user behavior, and improve the App. This is essential for maintaining and optimizing our service. Google Analytics uses cookies to collect usage data such as pages visited, features used, time spent, and general location (country/city level).

These analytics cookies are necessary for us to operate and improve the service. We use this data solely for internal analysis and service optimization — not for advertising, marketing, or selling to third parties.

By using Whispered, you consent to this data collection. If you do not agree, please do not use the App. You may also use browser extensions like Google Analytics Opt-out Browser Add-on to block analytics tracking, though this may affect our ability to improve the service based on usage patterns.

Local Storage and IndexedDB: The App stores data locally on your device using browser storage technologies (LocalStorage and IndexedDB). This includes:

• Authentication tokens – to keep you signed in
• User preferences – theme settings, tutorial completion status
• Chat history cache – to provide offline access and faster loading
• Character data – cached information about AI characters you've interacted with

This local data remains on your device and is not transmitted to us except when syncing with our servers (e.g., when sending messages or loading chat history). You can clear this data at any time through your browser settings or by deleting your account. Clearing browser data will log you out and remove cached content, but your account data on our servers will remain unless you request deletion.

6. Data Retention

• Chat history and AI-generated images: retained until you delete your account.
• Access and security logs (IP, technical data): retained for approximately 60 days for security and diagnostics, then deleted or anonymized.
• Backups: temporary backups may persist briefly but are purged on a normal rotation schedule.

You can request deletion of your account and data at any time (see Section 10).

7. International Data Transfers

We serve users worldwide. Data may be processed in countries other than yours (e.g., EU/EEA, US, or others). We rely on standard contractual clauses or other lawful mechanisms offered by our providers to ensure adequate protection.

8. Security

We implement reasonable technical and organizational measures to protect data, including encrypted transport, access controls, and least-privilege practices. However, no system is perfectly secure; you use the App at your own risk.

9. Your Rights

Depending on your location, you may have rights to:

• Access your data
• Rectify inaccuracies
• Delete your data ("right to be forgotten")
• Port your data to another provider
• Object to or restrict certain processing

We will honor applicable rights subject to legal limits and technical feasibility.

10. Account and Data Deletion

You may delete your account and associated data at any time by:

• Using in-app deletion (if available), or
• Emailing [email protected] from your sign-in email.

We will verify ownership and complete deletion within a reasonable period. Backups may retain data briefly but are automatically purged on rotation.

11. Age Restrictions and Content Policy

• The App is strictly 18+. Minors are not permitted.
• The App may include fictional AI-generated narratives involving emotional or romantic interactions.
• No user-to-user interaction: Users only interact with AI characters, never with other users. This is not a dating service connecting people to each other.
• All content is purely fictional entertainment generated by AI with no connection to real people or relationships.
• Do not upload or share illegal content or any material involving real minors. Such activity will result in termination and may be reported to authorities.

12. Sharing and Disclosure

We do not sell your personal information. We share data only with:

• Processors listed above (for core functionality)
• Legal authorities when required by law or to protect rights and safety
• Successors in case of reorganization or asset transfer (if ever applicable)

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be available within the App or on our website, and the "Last updated" date will reflect the most recent change. Material updates will be highlighted where practical.

14. Contact

For privacy questions or to exercise your rights, contact us at: [email protected]

Last updated: January 11, 2026