Privacy Policy

1. Introduction

Whispie Quest ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how Black Eagle Group LLC ("Whispie Quest," "we," "our," or "us") collects, uses, discloses, and safeguards your information when you use our mobile application (the "Service").

Whispie Quest is a children's activity app designed for parents and guardians of children ages 0-7. By using Whispie Quest, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Account Information

• Email address and password, or Google / Apple sign-in. If you use Google or Apple, the name they share with us.
• App language, time zone and optional household details you enter (e.g. home space).

2.2 Child Profile (entered by the parent)

• Child's name or nickname, date of birth, play language, up to 5 interests, a short personality profile and preferred play times. We do not ask for the child's gender or photo.

2.3 Play and Development Data

• Games suggested, started, finished or skipped, and play duration.
• The quick observations you tap after a game, and materials you mark as "not at home".
• Developmental check-in answers and the resulting development map.
• "First times" diary entries you write. The monthly letter is created on your device from this data.

2.4 Household Sharing (optional)

• If you invite family members with an invite code: each member's display name and role. Members can see the shared children's names, ages, recent games, observations and "first times" entries, and when members were last active.

2.5 Device and Usage Information

• App version, platform, OS version, language, in-app interactions (our own analytics) and error logs.
• A device session identifier and a push notification token (Firebase Cloud Messaging).

2.6 Purchase Information

• Subscription product, status, renewal date, price and currency, and the transaction identifiers from the App Store or Google Play. We never receive your card details.

3. How We Use Your Information

Purpose	Legal Basis	Data Categories
Provide age-appropriate activity suggestions	Contract Performance	Child Profile, Activity Data
Show your child's progress (development map, monthly letter)	Contract Performance	Play and Development Data
Personalize user experience	Legitimate Interest	Usage, Technical
Improve our services	Legitimate Interest	Usage, Technical (Anonymized)
Measure our advertising (Meta)	Consent (iOS tracking permission) / Legitimate Interest	Hashed email and user ID, app events, device information

4. Data Sharing and Disclosure

4.1 Service Providers

• Supabase — database and authentication (EU region, Frankfurt).
• Google Firebase Cloud Messaging — push notifications only.
• Apple App Store / Google Play — subscriptions; we verify transactions with their servers.
• Google / Apple sign-in — if you choose to use them.
• Meta Platforms — advertising measurement. The Meta SDK in the app and our server send install, registration, trial and purchase events with a hashed (SHA-256) email address and user ID, the purchase amount, and device information (app version, OS version, language, time zone, screen size). On iOS, tracking happens only if you allow it. We never send your child's data to Meta.

We do not sell or rent personal information. The app shows no ads. We use the Meta SDK only to measure our own advertising, as described above.

4.2 Legal Requirements

We may disclose information when required by law or to protect our rights.

4.3 Business Transfers

In connection with any merger or sale of company assets.

5. Children's Privacy

Whispie Quest is designed for use by parents and guardians. We take children's privacy very seriously.

• We do not knowingly collect personal information directly from children
• All child data is entered and managed by the parent/guardian
• Child profile information is used solely to provide age-appropriate activities
• Parents can view, modify, or delete their child's data at any time
• We comply with COPPA (Children's Online Privacy Protection Act) and equivalent regulations

7. Data Security

We implement appropriate technical and organizational measures including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Secure development practices

8. Data Retention

• Account, child and play data: kept until you delete your account.
• Analytics and error logs: kept until you delete your account.
• Purchase transaction records (product, price, transaction IDs): kept after account deletion without your user ID, for tax and fraud prevention.
• Usage events recorded before sign-up are anonymous and are not linked to you.

9. Your Rights

Depending on your location, you may have the following rights:

• Access to your personal information
• Correction of inaccurate data
• Deletion of your data
• Restriction of processing
• Data portability
• Objection to processing
• Withdraw consent

To exercise these rights, contact: [email protected]

10. Changes to This Policy

We may update this policy. We will notify you of significant changes via email or in-app notification.

11. Contact Information

Black Eagle Group LLC
30 N Gould St Ste N
Sheridan, WY 82801, USA
Email: [email protected]
Website: www.whispieapp.com