Privacy Policy

Whisper · Last updated September 21, 2026

Introduction

Whisper is a detective game operated by SmartMove ("we", "our", "us"). You are handed a copy of a fictional suspect's phone and answer questions by looking through the apps on it.

Whisper has no accounts. There is nothing to sign up for, no email to give us, and no password. This policy explains the information the app does handle, and where it goes.

Information We Collect

Information you type

• The name you choose. Early in the game we ask what to call you. That name is stored only on your device and is used only to address you inside the app. It is never transmitted to us or to anyone else.
• Your answers to case questions. When you submit an answer, the text you typed is sent to our server so it can be graded. See Answer checking below.

Information collected automatically

• Device and app information — device model, operating system version, language, country, app version, and general usage and diagnostic events, collected by the analytics and attribution tools we use.
• Advertising and device identifiers — used to measure which marketing campaign led you to install Whisper. On iOS this includes the Advertising Identifier (IDFA) only if you allow tracking when the system asks. See Tracking and advertising.
• IP address — visible to our server, as with any internet request. We do not store your IP address. Where we need to limit how often a single source can submit answers, we store a salted, irreversible hash of it instead of the address itself.

Purchases

Subscriptions are sold and processed by Apple and Google. We never see or receive your payment card details. We receive only whether a subscription is currently active, through our subscription provider.

What Stays On Your Device

The following never leaves your phone. Deleting the app deletes all of it:

• the name you chose;
• which cases you have opened and which questions you have already answered;
• the timing reference used to render the dates and times inside the simulated phone;
• whether your subscription is active.

Answer Checking, and Where AI Is Involved

When you submit an answer, the app sends our server three identifiers — the product, the case, and the question — together with the text you typed. It does not send your name or any device identifier.

Our server grades the answer in stages: first against the answers the case author wrote down, then against a cache of answers other players have already submitted for that same question, and finally, where those do not settle it, using a third-party language model (currently OpenAI) that decides whether your phrasing means the same thing as the intended answer. Only your submitted text and the question are sent to that provider. The provider does not receive your name, your device identifiers, or anything about who you are.

Submitted answers are stored in a normalised form alongside the question, so that the same phrasing does not have to be graded twice for every player. These stored answers are not linked to you, your device, or your other answers.

Please do not type personal information into an answer. An answer box is for naming what you found in the case; anything else you type there is stored and processed the same way.

Tracking and Advertising

We use attribution and analytics tools to understand which marketing campaigns bring players to Whisper, and where players get stuck. We do not show ads inside Whisper, and we do not sell your personal information.

On iOS, the system asks your permission before the app may use the Advertising Identifier for this purpose. If you decline, attribution continues in the aggregate, privacy-preserving form Apple provides (SKAdNetwork) and no identifier for you is used. You can change your answer at any time in Settings › Privacy & Security › Tracking.

On Android, you can delete or reset your advertising ID in Settings › Google › Ads.

How Long We Keep Things

Case and question records used to grade answers, and the salted hash used to limit submission rates, are kept for as long as we operate the game; none of them identifies you. Data held by our analytics and attribution providers is kept according to their own retention settings and policies. Anything stored on your device is kept until you delete the app.

Security

Traffic between the app and our server is encrypted in transit. Because Whisper has no accounts, there is no login for anyone to compromise and no profile of you to steal. No system is perfectly secure, and we cannot guarantee absolute security.

Children's Privacy

Whisper tells stories about adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Your Rights

Depending on where you live — including under the GDPR in the European Economic Area and the UK, and under the CCPA in California — you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and not to be discriminated against for exercising those rights.

Because Whisper has no accounts, most of what the app knows about you is on your own device and you can erase all of it by deleting the app. For anything held by us or by our service providers, email us at support@newwaylabs.co and we will action your request. To help us find the right records, tell us the platform you played on and roughly when.

Changes to This Policy

If we change this policy we will update the date at the top of this page. Where a change is significant, we will say so in the app.

Contact Us

SmartMove — support@newwaylabs.co