Privacy Policy

This Privacy Policy explains:

• what information we collect and why;
• how we use, store, and protect that information;
• the choices and rights you have in relation to your data.

By using the Service, you agree to the practices described below.

• Provide, operate, and maintain the Service.
• Personalise your experience (e.g., language preference, suggested prompts).
• Process purchases, manage subscriptions, and verify entitlement.
• Monitor and analyse usage so we can fix bugs, prevent fraud, and improve performance.
• Communicate with you about critical updates or support requests.
• We do not sell your personal information and we do not train our in-house AI models on your private messages.

We process personal data under one or more of the following bases:

• Performance of a contract – to deliver the Service you request.
• Legitimate interests – to keep the Service safe, reliable, and improving.
• Consent – for optional activities such as marketing e-mails (currently none).
• Legal obligation – to comply with accounting or consumer-protection laws.

We share data only as necessary:

• Service providers – cloud hosting, analytics, and support vendors who process data on our behalf under strict confidentiality.
• Payment platforms – the relevant app store to complete your purchase.
• Legal or safety reasons – when required to comply with a lawful request or to protect the rights, property, or safety of Whimly, our users, or the public.

Your private messages are never disclosed to other users or advertisers.

• Account data & purchase history – kept while your account remains active and for up to six years thereafter, to satisfy tax and bookkeeping obligations.
• Public characters – retained until you delete them or request account deletion.
• Private messages – stored until you erase a conversation, tap “Clear All Messages” in Settings, or delete your account.
• Crash and analytics logs – retained for up to 24 months, then aggregated or deleted.

We employ administrative, technical, and physical safeguards, including:

• Encryption in transit (TLS) and at rest.
• Strict internal access controls on a need-to-know basis.
• Regular security reviews and vulnerability scanning.

No system is 100 % secure, but we work hard to protect your information.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Delete information:
  • Remove all chat history instantly by tapping “Clear All Messages” in Settings.
  • Permanently delete your entire account (including public characters and purchase records) by e-mailing mestudiospp@gmail.com. We will complete your request within 30 days.
• Object to, or restrict, certain processing.
• Port your data to another service.

Whimly is intended for users aged 18 or older (or the minimum age in your region). We do not knowingly collect data from children. If you believe a child has provided us information, contact us and we will promptly delete it.

Your data may be processed on servers outside your country. We rely on industry-standard transfer mechanisms (such as Standard Contractual Clauses) to ensure adequate protection wherever data is handled.

We may revise this Privacy Policy from time to time. Material changes will be announced in-app or via e-mail at least seven days before they take effect. The “Last updated” date above reflects the most recent version.

For questions, data requests, or complaints, please contact:
Whimly Privacy Team – mestudiospp@gmail.com