Your family's words stay yours.

WhisperWishes (whisperwishes.com) is run by Squareish LLC, 8200 Springwood Dr, Ste 235, Irving, TX 75063, USA. We decide what happens to the information in this policy, and we're the ones to ask about it: support@whisperwishes.com.

In this policy, "you" is the person who makes a book. "The family" is anyone who adds their voice from a family link, friends included. "The person the book is for" is who you're making it for.

When you make a book

• Your email address, to sign you in with a link and to tell you when your book is ready.
• Your first name, for the book's signature. Who the book is for (their name, and anything you add about them), the occasion and the languages.
• Your interview: the recording of your voice and the words, written down. We keep the recording so the voice in the book is really yours.
• Your photos, as phone-sized copies, and what you tell us about who's in them. We delete the original file right after we make the copies, because originals can hold the place where the photo was taken.
• The book itself, each change you make, and older versions, so Undo works.
• When you say a change out loud, the recording is turned into text, and we don't keep the recording. The words of your request are kept with the book.

When the family adds their voice

• Their first name and the language they'll speak, so the book can say whose voice it is.
• That they ticked the consent box, when, and which words they agreed to.
• Their interview recording and its words, or the message they typed, and up to 3 photos.
• Their email, only if they leave it, to send a reminder if they haven't finished. We use it for nothing else, and you can't see it.

When someone opens a book

• Nothing we ask for. The book opens from its link, and the visit shows in our providers' ordinary request logs (below). Their phone remembers how smoothly pages can turn on it.

Everyone

• To stop abuse, we count requests using a scrambled version of your IP address or email address, never the address itself. Our hosting providers keep ordinary request logs for a short time.

We don't make voice prints or face prints. The photo reading finds where faces are so the cover doesn't cut one off. It never guesses who someone is: only you say that.

We use AI services from two companies:

• OpenAI runs the friendly interviewer you talk with and turns recordings into text. During a live interview, your phone connects straight to OpenAI to carry the conversation.
• Anthropic reads your photos, writes the book from your family's words, checks every line against what was said, and makes the changes you ask for.

We use both through their business services, with training turned off in both of our accounts. They don't use your family's words, voices or photos to train their models. Read their own pages on this: OpenAI and Anthropic.

They may keep what we send for a limited time to check for abuse, as their own terms set out. That part isn't up to us. Today their pages say:

• OpenAI keeps the live conversation for up to 30 days. It doesn't keep the recordings it turns into text. It can keep things longer if the law requires it or to prevent harm.
• Anthropic deletes what we send, and what it writes back, within 30 days. If its safety systems flag something as breaking its rules, it can keep it for up to 2 years. It can also keep things longer if the law requires it.

Read their own pages on how long they keep it: OpenAI and Anthropic.

The AI never makes anything up: every line it writes comes from something someone said or typed, and we check it against what was said. A line you type yourself stays exactly as you wrote it. We never copy or fake anyone's voice. The voices in a book are the real recordings.

Photos and recordings are never public. They open only through links that expire after a few hours, made each time someone opens your book. A book's private link is stored only in scrambled form, so even someone who saw our database couldn't rebuild it.

• The people you choose. Anyone with your book's private link can open it, hear the voices and see the photos. In a family book, you see what each person adds. Until the book is sent, each family member sees only their own part.
• The companies that run parts of WhisperWishes for us, only to do that job: Supabase (database, sign-in, storage), Vercel (hosting), Trigger.dev (making books in the background), OpenAI and Anthropic (AI, above), Resend (emails).
• If the law makes us, for example a valid court order. We'll tell you unless we're not allowed to.

That's the whole list. We never sell your information or share it for advertising. There are no ad trackers on our site or in the app.

We don't look at your books, recordings or photos unless you ask us for help, something breaks and we need to fix it, or we need to deal with abuse or a legal request.

We use only what the app needs to work. No advertising cookies, no tracking cookies.

• Sign-in cookies (they start with sb-) keep you signed in. They go when you sign out.
• NEXT_LOCALE remembers English or Spanish when you pick a language different from your browser's. It goes when you close the browser.

Your phone also keeps a few small things for the app, not cookies and never sent to anyone else: the email you typed to sign in, your name and the language you speak (so your next book starts ready), the tips you've already seen, and, for the family, a private key that lets each person change or remove only their own part.

One more cookie exists only on our internal test pages, which customers don't use.

• Your books, and everything in them, until you delete them. That includes books you started and didn't finish.
• What the family adds, until the book is deleted, unless they remove it first or you take them out (see "For the family" below).
• Original photo files: only minutes, until the phone-sized copies are made.
• Spoken change requests: we don't keep the recording.
• At the AI companies: for a limited time, under their own terms (see "How we use AI").
• Your email and account, until you ask us to close your account.
• Cost records (the date, which AI step ran, how much it used and what it cost, with no words, voices or photos): we keep them for our accounts.
• Request logs and sent emails at our providers: a short time, on their schedule.

Delete a book from My books. After you confirm, we:

• turn its private link off for good, and close its family link;
• remove its photos and every recording, yours and the family's, from storage;
• delete every page and version of the book, your interview and its words, and everything the family added, with their names, consent records and emails.

Close your account: write to support@whisperwishes.com from the email you sign in with. We delete every book as above, then your account, within 30 days, and tell you when it's done.

If someone sent you a family link, here's what happens with your part.

• You don't need an account. You type your first name, pick the language you'll speak and tick one box: you agree that your voice and photos go into this book, that the person making it sees them, and so does anyone they send the book to. We keep a record of when you ticked it and which words you agreed to.
• Until the book is sent, only the person making it sees what you add. Other family members don't see it before then.
• Until the book is made, you can change or remove everything you added with "Change or remove mine". Removing it deletes your words, photos, name and consent record, and the recordings in your message. A recording you started but didn't keep stays in private storage until the book is deleted.
• If the person making the book takes you out, what you added is deleted when they make the book, except a recording you started and didn't keep, which goes when the book is deleted.
• After the book is made, your words and voice are part of it. If you want them out, ask the person who made it, who can change the book or delete it, or write to us at support@whisperwishes.com and we'll help.
• Your email, if you leave one, is used only to remind you, and the person making the book can't see it.

You must be 18 or older to make an account and a book.

Anyone under 18 may add their voice from a family link only if a parent or guardian ticks the box for them.

Only add a photo of a child if you're their parent or guardian, or have a parent's or guardian's permission. Books stay private to the people you send them to. We never use photos of children anywhere public, including our marketing, without written permission from a parent or guardian. The same goes for any book: we never use it in our marketing without the written permission of the people in it.

Every connection is encrypted. Our database blocks anyone from reading another person's books, and only our own server can change them. Links to books and family links are long and random, and we store them only in scrambled form. Photos and recordings sit in private storage and open only through links that expire.

No system is perfect. If something goes wrong that affects your information, we'll tell you quickly and say what we're doing about it.

Wherever you live, you can ask us to:

• tell you what we hold about you and give you a copy;
• correct something that's wrong;
• delete it;
• stop using it for something you didn't agree to.

Write to support@whisperwishes.com. We may ask you to write from the email you sign in with, so we know it's you. We reply within 30 days, and we never treat you differently for asking.

United States. Some states, including California, give their residents rights like these by law. We give them to everyone. We don't sell personal information, and we don't share it for advertising.

European Union and United Kingdom. If you live there, data protection law (the GDPR and the UK GDPR) also applies. Why we use your information: to make the book you asked for. The family's voices and photos: because they agreed with the consent box, and they can take that back as described above. Scrambled counters and cost records: because we need them to run a safe, fair service. You can also ask to take your information elsewhere. And you can complain to your local data protection authority (in the UK, the Information Commissioner's Office). We'd like the chance to fix it first.

Write to support@whisperwishes.com. A person replies, usually within a day. By post: Squareish LLC, 8200 Springwood Dr, Ste 235, Irving, TX 75063, USA.

If we change this policy, we'll update the date at the top. If a change affects what we do with what you've already added, we'll email you before it takes effect.