Privacy Policy

1. Introduction

Black Eagle Group LLC ("we," "our," or "us") operates Whispie Flavor Agent (the "App") and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application.

Whispie Flavor Agent is a science-backed family game designed to be used by parents and guardians of picky eaters and screen-dependent children. By using the App, you agree to the data practices described in this policy.

2. Information We Collect

2.1 Account Information

Parent/Guardian: Name, email address, account credentials
Child Profile: Child's name (or nickname), age

2.2 Game & Session Data

Session Data: Completed sessions, foods explored, exposure count per food
Sensory Response Data: Reactions per sense phase per food (liked/disliked/neutral)
Progress Data: XP points, creature levels, streak days, graduation records
Usage Data: App interactions, feature usage, session duration

2.3 Technical Information

Device Information: IP address, device type, operating system
Location Data: General location (country only) for content localization

3. How We Use Your Information

Purpose	Legal Basis	Data Categories
Running sensory discovery sessions	Contract Performance	Child Profile, Session Data
Generating the parent Sensory DNA report	Contract Performance	Sensory Response Data
Managing XP, streaks, and creature system	Contract Performance	Progress Data
Improving our services	Legitimate Interest	Usage, Technical (Anonymized)

4. Data Sharing and Disclosure

4.1 Service Providers

Supabase: Database and authentication services
RevenueCat: Subscription and payment management
Expo / React Native: App infrastructure
Cloudflare: DNS and security services

We do not sell your personal data to third parties.

4.2 Legal Requirements

We may disclose information to comply with legal obligations or protect our rights.

5. Children's Privacy

Whispie Flavor Agent is designed for use by parents and guardians. We take children's privacy very seriously.

We do not collect personal information directly from children
All child data is entered and managed by a parent or guardian
Sensory response data is used solely for parent reporting and personalizing the game experience
We never use children's data for advertising purposes
Parents can view and delete their child's data at any time
We comply with COPPA (USA) and KVKK (Turkey) and applicable child privacy laws

6. Regional Provisions

6.1 European Union & United Kingdom (GDPR/UK-GDPR)

Legal Basis: We process personal data based on consent (GDPR Art. 6(1)(a)), contract performance (Art. 6(1)(b)), and legitimate interests (Art. 6(1)(f)).

Your Rights: Access, rectification, erasure, restriction, data portability, and objection.

Data Transfers: Standard Contractual Clauses apply for transfers outside the EU.

6.2 United States — CCPA (California)

California residents have the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.

6.3 Turkey (KVKK)

Data Controller: Black Eagle Group LLC

Your personal data is processed in accordance with Law No. 6698 on the Protection of Personal Data. You have all rights under KVKK Article 11.

8. Data Retention

Account Data: Until account deletion + 6 years (legal obligations)
Sensory Session Data: Until account deletion (free plan: 30 days)
Payment Data: 10 years for tax purposes
Analytics Data: 2 years (anonymized)

9. Your Rights

Access your personal data
Correct inaccurate data
Request deletion ("right to be forgotten")
Restrict processing
Data portability
Object to processing
Withdraw consent

To exercise these rights: [email protected]