Privacy policy.

This Privacy Policy explains how Candy Studio Apps (“we”, “us”) handles personal data when you use Wisper AI for iPhone and iPad, including the Wisper keyboard and widgets (“Wisper” or the “App”). Wisper is a voice dictation app: you speak, and it turns your speech into clean text. We wrote this policy to be specific about what leaves your device, where it goes and for how long.

Separate policies apply to Wisper on Android and Mac — see the links at the top of this page.

1. Who we are

The controller responsible for your personal data is:

You can contact us about anything in this policy, including requests to exercise your rights, at support@wisperai.app.

2. What we collect

Wisper works without an account. You never give us your name, phone number or password. Here is what Wisper does process:

2.1 Content you create

• Voice recordings — the audio you record when you dictate with the Wisper keyboard or record a note in the app.
• Transcripts and notes — the text produced from your recordings, plus summaries, key points, flashcards, rewrites and note chat that you ask for.
• Text you choose to edit — when you use Edit selection or a quick transform in the keyboard, the text you selected and your spoken instruction.
• Your settings — dictionary words, snippets, voice styles, languages and translation targets.

2.2 Identifiers

• A random user ID created by the App. It is not linked to your name or email. It is stored on your device (including the iOS Keychain, so it survives reinstalling the App) and in your private iCloud key-value storage, so that Wisper on your iPhone, iPad and Mac share the same subscription.
• Apple’s identifier for vendor, used as a temporary ID for the practice dictations during onboarding.
• Analytics device IDs — random IDs that our analytics and crash-reporting tools assign to your installation.
• Advertising Identifier (IDFA) — only if you allow tracking in Apple’s App Tracking Transparency prompt (see section 5.4).

2.3 Usage and device data

• App events — for example that a dictation started or finished, how long it was, word and character counts, which features and styles you use, paywall views, and error codes. These events don’t contain the words you said or typed.
• Device and app information — device model, operating system version, app version, language, region, and microphone input type.
• Crash reports — technical information about crashes and app stability.
• Network data — your IP address is processed by our servers and service providers when the App connects to them.

2.4 Purchases

If you subscribe, Apple processes your payment. We never receive your card details. Through RevenueCat we receive your subscription status, plan, price, currency, purchase and renewal dates and store transaction IDs, plus an Apple Search Ads attribution token.

2.5 Feedback and support

• In-app feedback — when you send a feature request or tell us what to improve, we receive your message (up to 1,000 characters) and the email address if you choose to add one.
• Emails — if you write to us, we receive your email address and message. The “Contact us” email the App prepares includes technical details such as your device model, OS version and user ID so we can help you; you can remove them before sending.

3. What we don’t collect

• We don’t log, store or send what you type with the Wisper keyboard.
• We don’t record audio when you aren’t dictating or recording.
• We don’t create voiceprints or use your voice to identify you.
• We don’t collect your contacts, photos, location, health data or browsing history.
• We don’t sell your personal data, and we don’t use what you say or write for advertising.

4. How your voice is processed

4.1 Dictation and recordings

1. You start recording. In the keyboard, tap Dictate; in the app, tap record. The keyboard itself never records — the Wisper app records for it.
2. Audio is sent for transcription. Your audio is sent over an encrypted connection (TLS) to our servers, which pass it to a speech-to-text provider. Depending on the settings, audio is sent as a file after you finish or streamed while you speak.
3. Text is cleaned up. The raw transcript is sent to a language-model provider together with what is needed to apply your choices: your style or template, dictionary words, snippet trigger phrases, language and translation target.
4. The text comes back to your device, where it is inserted where your cursor is and saved in your history.

4.2 AI features

When you ask for a summary, key points, flashcards, a rewrite or a note chat answer, the text of that note (and, for chat, your recent messages in that chat) is sent to our servers and a language-model provider to produce the result. When you use Edit selection or a quick transform in the keyboard, the selected text (up to 5,000 characters) and your instruction are sent the same way.

Before your first in-app recording, Wisper shows a screen that explains what is sent and to whom, and asks for your agreement.

4.3 What our servers keep

• Audio: not stored. It is held in memory only while it is being transcribed.
• Transcripts: the finished text is kept for up to 30 minutes so the App can collect it if the connection drops, then deleted automatically.
• Edit results: the result of an edit is kept for up to 24 hours so a retried request doesn’t run twice, then deleted automatically. The text you selected is not stored.
• AI feature requests (summaries, flashcards, rewrites, chat): not stored.
• Logs: our servers log technical details such as your user ID, request times, audio length and the AI model used — not the words you said.

4.4 Our AI providers

We currently use these providers to transcribe and process your content. Each one processes it on our behalf only to return the result:

• OpenAI — speech-to-text, text cleanup, and AI features.
• Cerebras — fast text cleanup and edits.
• Anthropic — backup for AI features if our primary model is unavailable.
• ElevenLabs, xAI and OpenRouter — alternative speech-to-text providers we may route audio to for quality or reliability.

We use these providers through their business APIs. Under those terms they do not use your audio or text to train their models. Some providers may keep request data for a limited time — typically up to 30 days — to detect abuse, and then delete it. We don’t use your recordings or text to train AI models either.

5. Device permissions

Wisper asks only for the permissions it needs. You can change them at any time in your device settings; features that depend on a permission stop working without it.

5.1 Microphone

Used to record your dictations and notes. When the Wisper Keyboard switch in the app is on, Wisper keeps an audio session active in the background (you’ll see the orange microphone indicator and, on supported iPhones, a Live Activity) so that dictation starts the moment you tap Dictate. While it waits, Wisper keeps only the last 2.5 seconds of audio in memory, overwriting it continuously; when you tap Dictate, up to 2 seconds of it are added to the start of your recording so your first word isn’t cut off. This buffer is never saved or sent anywhere unless you start a dictation. Turn the switch off, or use the button on the Live Activity, to stop it. Locking your screen cancels a keyboard dictation in progress.

5.2 The Wisper keyboard and Full Access

The Wisper keyboard asks for Full Access. iOS shows a general warning that keyboards with Full Access can transmit what you type. Here is what Wisper actually does with it:

• Full Access lets the keyboard share data with the Wisper app (through an App Group on your device): it asks the app to record, receives the finished text, and reads your settings such as language, style and snippets.
• The keyboard does not log, store or send your keystrokes. It reads the text just before your cursor only on your device — to replace the quick draft with the cleaned-up text, to undo, and to capitalize correctly — and never keeps it.
• The keyboard notices whether text is selected, so it can offer editing. The selected text is sent to our servers only when you tap Edit selection or a quick transform (for example Polish, Formal or Bullets). Edit with voice is off until you turn it on in Settings.
• iOS automatically switches to the system keyboard in password fields and some other secure fields, so the Wisper keyboard never sees them.
• The keyboard sends app events to our analytics provider (for example “keyboard opened”, style chosen, character counts of an edit). These events never contain your text or the name of the app you’re typing in — iOS doesn’t tell keyboards which app they’re in.

5.3 Notifications and Photos

If you allow notifications, Wisper may send local reminders, for example about getting started. You can turn them off in Settings → Push notifications or in iOS Settings. If you tap Save to Photos on an Insights card, Wisper asks to add that image to your photo library; it never reads your library.

5.4 Tracking and ad measurement

We use Meta’s SDK to measure how our ads perform. It receives app events such as installs, app opens and subscription purchases (including the price and currency). Wisper shows Apple’s App Tracking Transparency prompt; only if you tap Allow does Meta also receive your device’s Advertising Identifier (IDFA) to attribute installs and purchases to ads across apps and websites. If you choose not to allow it, the IDFA isn’t shared and every feature keeps working. You can change your choice any time in Settings → Privacy & Security → Tracking. We never share your recordings, transcripts or notes with advertising partners. Wisper also uses Apple’s privacy-preserving SKAdNetwork and AdServices attribution, which don’t identify you. Meta processes this data as an independent controller under its own privacy policy.

6. How we use data and our legal bases

We process personal data only for the purposes below. If you are in the European Economic Area or the UK, the GDPR requires a legal basis for each:

We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.

7. Service providers and sharing

We share personal data only with service providers that process it on our behalf under contracts requiring them to protect it and use it only to provide their service to us, and with the parties described below.

We may also disclose personal data when required by law or a valid request from a public authority; to protect the rights, safety and security of our users, us or others; or as part of a merger, acquisition or sale of assets, in which case we will tell you before your data becomes subject to a different privacy policy.

Apple handles your payments under Apple’s own privacy policy; we don’t control it.

8. International transfers

We are based in the European Union. Several of our providers are in the United States or process data there. When personal data is transferred outside the European Economic Area, we rely on the European Commission’s Standard Contractual Clauses included in our providers’ data processing terms, or on the EU–US Data Privacy Framework for certified providers, together with safeguards such as encryption in transit. You can ask us for a copy of the relevant safeguards at support@wisperai.app.

9. How long we keep data

10. Security

All data between the App, our servers and our providers is encrypted in transit with HTTPS/TLS. We don’t store your audio on our servers, and we keep transcripts there only for minutes. Access to our production systems is limited to people who need it. On your device, your notes are protected by Apple’s app sandboxing and your device passcode. No method of transmission or storage is completely secure; if a personal data breach is likely to put your rights at risk, we will notify the supervisory authority within 72 hours and inform you where the law requires it.

11. Your choices and deleting data

• Delete a note: delete it in the App. Its text and audio are removed from your device.
• Delete everything on your device: delete the Wisper app. This removes your notes and audio. Your random user ID stays in the iOS Keychain and your iCloud key-value storage so a reinstall can restore your subscription.
• Delete data held by us: email support@wisperai.app from the App’s Contact us option or include your User ID (Settings → User ID). We will delete your user record, usage counts and the analytics data linked to your user ID, except purchase records we must keep by law.
• Export your notes: use Export in Settings to save a file with your notes that you can keep or import on another device.
• Withdraw consent: revoke the microphone, Full Access or notification permission in your device settings, or change your tracking choice in Settings → Privacy & Security → Tracking. Withdrawal doesn’t affect processing that took place before it.

12. Your rights (EU and UK)

Under the GDPR you have the right to:

• access your personal data and get a copy;
• rectify inaccurate data;
• erase your data (“right to be forgotten”);
• restrict processing;
• data portability — receive the data you gave us in a structured, machine-readable format;
• object to processing based on legitimate interests, including ad measurement;
• withdraw consent at any time, without affecting earlier processing.

Because Wisper has no accounts, we identify your data by your user ID; please include it in your request (Settings → User ID). We answer within one month; for complex requests we may extend this by up to two further months and will tell you why.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work. Our lead authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl.

13. US state privacy rights

If you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon or another US state with a consumer privacy law, you have the right to know what personal information we collect and how we use and disclose it; to access, correct and delete it; to receive a portable copy; and not to be treated differently for exercising these rights.

• Categories we collect (sections 2 and 6): identifiers (user ID, device IDs, advertising ID, IP address); audio information (voice recordings); commercial information (subscription purchases); internet or other electronic activity (app usage events); and your content (transcripts, notes, selected text). We collect them from you and your device, and use them for the purposes in section 6.
• Sale and sharing. We don’t sell personal information for money. Using Meta’s SDK to measure our ads (section 5.4) may count as “sharing” or “targeted advertising” under some state laws. You can opt out by not allowing tracking in Settings → Privacy & Security → Tracking, or by emailing us — we will treat a Global Privacy Control signal sent with your request as an opt-out.
• Sensitive information. Voice recordings are used only to provide the service you request. We don’t use them to identify you, to infer characteristics about you, or for any purpose that would require a right to limit.
• Retention is described in section 9. In the past 12 months we have not sold personal information or knowingly processed data of anyone under 16.

To make a request, email support@wisperai.app with your user ID. You may use an authorized agent; we may ask for proof of the authorization. If we decline your request, you can appeal by replying to our decision; if the appeal is denied, you can contact your state attorney general.

14. Children

Wisper is not directed at children. You must be at least 16 to use it, or the age of digital consent in your country if lower (and never under 13), unless a parent or guardian has agreed. We don’t knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.

15. Changes to this policy

We will update this policy when Wisper or the law changes. The date at the top shows the latest version. If a change is significant, we will tell you in the App or through the App Store listing before it takes effect.

16. Contact

Questions, requests or complaints about privacy: