Privacy Policy

Last updated: April 12, 2026

Whissle ("we," "our," or "us") operates the Whissle mobile application and web application at lulu.whissle.ai (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Information You Provide

• Account Information: Device identifier, display name, and optional profile preferences you set within the app.
• Voice & Audio Data: When you use Push-to-Talk, Live Assist, or Voice Notes features, audio is recorded and processed for transcription. Audio may be temporarily stored for processing and is not retained beyond the session unless you explicitly save a voice note.
• Text Input: Messages, search queries, and notes you create within the app.
• Calendar & Email Data: If you connect your Google account, we access calendar events and email metadata to provide AI-powered scheduling and email assistance. This data is processed in real time and cached only for the duration of your session.

1.2 Information Collected Automatically

• Device Information: Device type, operating system version, app version, and a locally-generated device identifier.
• Usage Data: Feature usage patterns, session duration, and interaction metrics to improve our Service.
• Push Notification Tokens: If you enable notifications, we collect your FCM (Firebase Cloud Messaging) token to deliver push notifications.

2. How We Use Your Information

• Provide, maintain, and improve the Service
• Process voice input for transcription and AI-powered responses
• Deliver real-time conversation coaching (Live Assist)
• Perform deep research and provide contextual answers
• Store and retrieve your voice notes, research history, and memories
• Send push notifications (with your permission)
• Analyze usage patterns to improve the user experience
• Detect and prevent abuse or security incidents

3. AI Processing & Third-Party AI Services

Our Service uses AI models to process your queries, transcribe audio, analyze conversations, and generate responses. We may use the following third-party AI providers:

• Google Gemini API — for text generation, reasoning, and image understanding
• Anthropic Claude API — as an alternative AI provider for text generation
• Whissle ASR — our proprietary speech recognition engine for audio transcription

Data sent to these providers is used solely for processing your request and is subject to their respective privacy policies. We do not sell your data to AI providers for model training.

4. Data Storage & Security

• Your data is stored securely using Google Cloud Platform (Firebase/Firestore) with encryption at rest and in transit.
• Voice recordings are processed in real time and not stored permanently unless you save a voice note.
• Your device identifier is used to associate your data with your device. No email or password is required.
• We implement industry-standard security measures including HTTPS encryption, access controls, and regular security audits.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following cases:

• Service Providers: With trusted third-party services that help us operate the Service (cloud hosting, AI processing, analytics).
• Legal Requirements: When required by law, regulation, or legal process.
• Safety: To protect the rights, safety, or property of Whissle, our users, or the public.

6. Data Retention

• Research sessions, notes, and conversation history are retained until you delete them.
• You can delete individual sessions, notes, and memories from within the app at any time.
• Temporary audio data from Push-to-Talk and Live Assist is automatically purged after processing.
• Analytics data is retained in aggregate form and cannot be used to identify individual users.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Delete your data (individual items via the app, or all data by contacting us)
• Opt out of push notifications via your device settings
• Revoke Google account access at any time via your Google Account settings
• Request data portability or a copy of your data

8. Children's Privacy

Our Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us and we will promptly delete it.

9. Microphone & Camera Permissions

The app requests microphone access for voice input features (Push-to-Talk, Live Assist, Voice Notes). Camera access may be requested for image-based queries. These permissions are optional and can be revoked at any time through your device settings. Audio and images are only captured when you actively initiate a recording or capture.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

• Email: privacy@whissle.ai
• Website: whissle.ai