Privacy Policy

WhisperHelp LLC (“WhisperHelp,” “Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, process, and protect your information when you use our website, mobile application, and related services (collectively, the “Service”).

By using the Service, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We may collect the following categories of information:

1.1 Account Information

• Email address
• Name (if provided)
• Subscription and billing details

1.2 User Content

• Messages you submit to the AI
• Journal entries or written reflections
• Feedback you provide

1.3 Technical & Device Information

• IP address
• Browser type
• Device type
• Operating system
• Access times
• Usage logs

1.4 Payment Information

Payments are processed by third-party providers. We do not store full credit card details on our servers.

2. How We Use Information

We may use collected information to:

• Provide and operate the Service
• Generate AI responses
• Improve system functionality
• Monitor abuse or misuse
• Ensure platform safety
• Analyze performance
• Communicate service updates
• Comply with legal obligations

We do not sell personal data.

3. Conversations & AI Processing

WhisperHelp uses artificial intelligence systems to generate responses.

To operate and improve the Service, we may process user inputs and conversations for:

• Response generation
• Quality assurance
• System monitoring
• Safety review
• Model improvement
• Fraud prevention

Third-Party AI Processors

To turn your voice into a conversation and back again, parts of your session are sent to trusted third-party providers that process this data on our behalf, only to deliver their part of the Service. They may not use it for their own advertising, and we do not sell your data.

• Deepgram (speech-to-text): receives your session audio only to convert it into text so WhisperHelp can understand you. WhisperHelp opts out of Deepgram's model improvement program, so your audio is not used to train Deepgram's models. (deepgram.com/privacy)
• OpenAI (conversation): receives your conversation transcript to generate WhisperHelp's replies. OpenAI does not use data sent through its API to train its models. (openai.com/enterprise-privacy)
• Cartesia (text-to-speech): receives the reply text only to turn it into the voice you hear. WhisperHelp has disabled Cartesia model training, so your data is not used to train Cartesia's models. (cartesia.ai/legal/privacy)
• Pinecone (session memory): stores mathematical representations (embeddings) of your sessions so WhisperHelp can remember context across conversations. Pinecone does not use your data to train its models. (pinecone.io/privacy)
• Google (Gemini) (journal analysis): receives your journal entries only to provide reflective analysis back to you. WhisperHelp uses Google's paid Gemini API, so your entries are not used to train Google's models. (ai.google.dev/gemini-api/terms)

Each provider acts as a data processor under an agreement with us, may use your data only to provide its part of the Service, and may retain it only briefly for security, abuse-prevention, or legal reasons, after which it is deleted in line with their published privacy policies.

We may retain conversational data for limited periods consistent with business needs, security, and legal requirements.

Where feasible, we may use anonymized or aggregated data to enhance performance.

4. Legal Basis for Processing (EU/EEA Users)

For users in the European Economic Area (EEA), we process data under the following legal bases:

• Performance of a contract
• Legitimate interests
• User consent
• Legal compliance

You may withdraw consent at any time where consent is the basis for processing.

5. Your Rights (EU GDPR)

If you are located in the EU/EEA, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (“Right to be Forgotten”)
• Restrict processing
• Data portability
• Object to processing

You may lodge a complaint with your local data protection authority.

To exercise your rights, contact: support@whisperhelp.ai

6. United Kingdom (UK GDPR)

For users in the United Kingdom:

You have similar rights under the UK GDPR.

You may contact the UK Information Commissioner's Office (ICO) if you believe your data rights have been violated.

7. Canada – PIPEDA

For users in Canada:

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA).

You have the right to:

• Access your personal information
• Request corrections
• Withdraw consent where applicable

You may contact the Office of the Privacy Commissioner of Canada if concerns arise.

8. International Data Transfers

WhisperHelp operates from the United States.

Your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate.

Where required, we implement safeguards such as:

• Standard Contractual Clauses (SCCs)
• Contractual data protection agreements

By using the Service, you consent to international data transfers.

9. Data Retention

We retain personal data only as long as necessary to:

• Provide the Service
• Comply with legal obligations
• Resolve disputes
• Enforce agreements
• Maintain security

Retention periods vary depending on jurisdiction and operational requirements.

10. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However, no internet-based system is 100% secure.

You use the Service at your own risk.

11. Third-Party Service Providers

We may share data with trusted service providers for:

• Cloud hosting
• AI processing
• Payment processing
• Analytics
• Security monitoring

These providers are contractually obligated to protect data.

12. Children's Privacy

The Service is not intended for individuals under 18 years old.

We do not knowingly collect personal data from minors.

If we become aware that a minor has provided information, we will take steps to delete it.

13. No HIPAA Compliance

WhisperHelp is not a covered entity under HIPAA.

The Service is not designed for storing Protected Health Information (PHI).

Do not submit medical records or clinical documentation.

14. No Therapist-Client Privilege

Communications through WhisperHelp are not protected by therapist-client privilege, doctor-patient privilege, or similar legal confidentiality protections.

While we use reasonable security measures, confidentiality is not equivalent to licensed therapy protections.

15. Cookies & Analytics

We may use cookies and similar technologies to:

• Improve user experience
• Analyze performance
• Monitor usage

You may adjust cookie settings through your browser.

16. Changes to This Policy

We may update this Privacy Policy from time to time.

The updated version will be posted with a revised “Last Updated” date.

Continued use of the Service constitutes acceptance.

17. Contact Us

If you have privacy-related questions, contact: