Wispim — Privacy Policy

Version 1.16 · Effective date: 31 October 2026

1. Who we are (Controller)

Wispim is a teleprompter app for iPhone, iPad, Mac, Android phones and Windows PCs published by Evgeny Savochkin, a sole proprietor (jednoosobowa działalność gospodarcza) established in Poland (Polska). This policy covers those apps and wispim.com (§7a).

Address: Aleksandra Gieysztora 4/97, 02-999 Warszawa, Polska
Email: support@wispim.com
NIP: 9512576713 · REGON: 526236847 · Registered in CEIDG (Centralna Ewidencja i Informacja o Działalności Gospodarczej)

The developer is the administrator danych osobowych (data controller) for the limited processing described below.

2. Our privacy approach

There are no user accounts: you never sign in to anything of ours. Your scripts and videos are stored on your device and never uploaded to us (§3(a), §3(g)). We do not sell your data, show no ads and do not track you across apps or websites. Apart from analytics, which you can turn off (§3(c)–(e)), opening these documents (§3(f)) and what you send us (§7), Wispim sends us nothing.

3. What data is processed, and why

(a) Scripts, settings and iCloud sync. Scripts and their titles, imported documents and their file names, and the transcript the app builds as you read are stored or processed on your device. We never receive or store them. If you use sync, your script library goes to your own iCloud; on Android, the phone’s backup may copy it (§3(i)). Your settings are kept on your device too; analytics, which you can turn off (§3(e)), may report some of Wispim’s own settings (§4). With Wispim Pro on Apple devices, iCloud sync is on by default: a copy of your script library is kept in the private CloudKit database of your own Apple Account. We have no access to it, and it never reaches our systems. Your app settings and the take counter are not synced; you can switch sync off and delete the copy (§8).

(b) Microphone and speech recognition. The microphone is used only for Voice and Sound modes, voice commands, the sound of videos (§3(g)) and, on Windows, a level meter. Sound mode and the meter only measure loudness; voice commands in Sound and Constant modes are recognised only on your device, or are unavailable, and are never sent.

On Apple devices, speech is recognised on your device where your device supports your language; otherwise, as the system tells you and the language picker marks, the audio goes to Apple, which may use it to improve its recognition. It may also go to Apple for the rest of a session or take if on-device recognition fails or stops following you; the full-screen prompter then tells you in a banner; the floating window does not.
On Android, Android’s speech recognition (Google’s, or your phone’s default service) runs on the phone where it can; where it cannot, Voice mode sends your speech to Google, and the app marks the languages that always need this and warns you first. It may also do so for the rest of a session or take, with a banner, if offline recognition fails or stops following you. On Android 11 and earlier, speech in any language may go to Google.
On Windows, when a model on your PC can read your script, Vosk, an offline recogniser built into the app, recognises your speech there, and neither the audio nor the transcript is saved or leaves your PC. Models come from alphacephei.com, which receives your IP address and the model’s name: the one for Windows’ first display language by itself on unmetered connections, others when you ask.
Microsoft online speech (Windows) is off unless you turn it on. Then a Voice take that no model on your PC can read may be recognised online: Windows sends your voice to Microsoft while its own Online speech recognition setting, which Wispim never changes, is on. Voice commands never go online.
Wispim itself never stores or transmits your audio or transcripts, except the sound of a video you choose to record (§3(g)). Server-based recognition is performed by Apple or Google as an independent controller under its own privacy policy, and by Microsoft under Microsoft’s own terms and privacy statement (https://privacy.microsoft.com/privacystatement). Legal basis: performance of the app functionality you request / your consent to microphone and speech use (GDPR Art. 6(1)(b)/(a)).

(c) Analytics (TelemetryDeck). Analytics is processed by TelemetryDeck GmbH, Von-der-Tann-Str. 54, 86159 Augsburg, Germany, our processor (podmiot przetwarzający) under Art. 28 GDPR, and stored exclusively in the EU. There is no third-party analytics SDK: our own code sends the events of §4, encrypted (HTTPS), and each request gives TelemetryDeck your IP address. TelemetryDeck sets no cookies and performs no cross-app tracking. Legal basis: our legitimate interest in understanding and improving the app (GDPR Art. 6(1)(f)); you can object at any time by turning analytics off (§3(e)).

(d) The analytics identifier. Each event carries one identifier for your installation: Apple’s identifier for vendor or Android’s ANDROID_ID (never the advertising ID), combined on the device with a salt and reduced to a one-way SHA-256 hash; we receive only the hash. It is not linked to you, as we hold nothing that connects it to you, but it is not anonymous: the same value comes with every event, on Apple devices while the app stays installed, on Android until a factory reset, even across reinstalls. On Windows no device identifier is read: turning analytics on creates a random value, hashed the same way, and turning it off erases it, so earlier and later events cannot be connected.

(e) Turning analytics off. You can turn analytics off at any time, in the app, at Settings › Privacy & legal › Analytics (on a Mac and on Windows, Settings › General › Privacy & legal › Analytics). It is on by default on Apple devices and Android; on Windows it is off by default, and nothing is sent until you turn it on. Turning it off stops all analytics and deletes anything not yet sent; one request already in flight may still complete.

(f) Opening these documents inside the app. Opening the Privacy Policy or the Terms from the app may open the current version on our website or show the app’s built-in copy. That is an ordinary visit to wispim.com (§7a); the app adds nothing to it, and we do not use it to identify you.

(g) Recording with Wispim’s camera (iPhone and Android). Wispim can record video and sound while your script scrolls, only when you start a recording; on iPad, Mac and Windows it does not. A recording may not be saved if something goes wrong.

On iPhone, a video is saved to Photos or, if it cannot be, may be offered for sharing; temporary copies are deleted at the latest at the app’s next start.
On Android, a video is saved in Movies/Wispim, visible to your gallery and apps you allow. On Android 9 and earlier without media access it is kept in Wispim’s own folder, which is deleted with the app; if saving to Movies/Wispim fails, the video may also be kept in Wispim’s own folder and offered for sharing.

Wispim never uploads your videos, and we hold no copy; a video leaves your phone only if you share it or through services you set up, such as iCloud Photos or a photo-backup app. Analytics never contains a video or says whether one was saved or shared, but can show that a take used Wispim’s camera and with which settings and, from how the take went, that you recorded a video. On iPhone the duration it reports is the take’s, not the video’s; on Android 9 and earlier it can roughly show a video’s length.

(h) Permissions on Android. Wispim asks only for the microphone, the camera, Display over other apps (for the floating window), notifications (Android 13 and later) and, on Android 9 and earlier, media access to save videos. Display over other apps lets Wispim draw its window, not see or record other apps, and the floating window’s required notification never shows your script. Wispim’s own code connects only for analytics and §3(f); purchases, Google speech and backup go through Google’s services.

(i) Android backup. Wispim for Android has no sync, but if backup is on in your phone’s settings, Android copies your scripts, settings (including the analytics switch) and free-take counter to your Google account and new phones, under Google’s terms; we have no access. Videos and unsent analytics are not included.

(j) Permissions on Windows. Wispim uses only the microphone, under Windows’ privacy settings, and asks for no other permission. Apart from shortcuts you can switch off, it reacts to keys only in its own windows. To stay on top, the floating window notices which window is in front, never its title or contents, and keeps or sends nothing about it; Wispim records nothing of your screen. Its own code connects only to download language models and, while analytics is on, to send analytics.

(k) Windows backup. Wispim for Windows has no backup or sync of its own. Backup or sync tools you use may copy its data folder, with your scripts and settings, under their own terms; we have no access to such copies.

(l) Permissions on Apple devices. Wispim asks for the microphone and speech recognition (§3(b)) and, on iPhone, the camera and add-only access to Photos, to record and save videos (§3(g)). Add-only access lets Wispim add videos to Photos without seeing your other photos or videos.

4. Analytics events we send to TelemetryDeck

While analytics is on (§3(e)), the app may send events of these kinds:

How the app is used. How you use Wispim’s features, for example the scroll mode and speech recognition in a take, the script’s detected speech language, how far and how long a take ran, voice commands, imports, and counts such as free takes used.
Your settings in Wispim. At the end of a take, its kind, its window’s shape and the display, reading and camera settings you chose in Wispim, such as text size, speed or resolution, each as a value from a fixed set or a band. We analyse these only as totals across users, never installation by installation.
Purchases. How the purchase screens are used, how purchases end and whether you have Pro, for example which Pro product was chosen and a fixed error code. Never a price, receipt, account or payment detail.
Permission answers. Your answer to a system permission prompt and whether it came during onboarding or a take; sent only when you answer.
Problems and recovery. Faults and recovery, such as the floating-window step reached and its time, a microphone retry, or how many seconds following your voice stalled.
Feedback. For example how you heard about Wispim, a rating prompt and your answer, with a count of completed sessions, and the contact link you tapped. Never a review or star rating.
One answer you type. On Apple devices, if you choose “Other” for how you heard about Wispim, type an answer and go on without tapping Skip, it is sent too, after your device has cleaned it (removing, for example, what looks like an email address or phone number) and cut it short. The cleaning can miss things, such as a name, so please type no personal details. Only what you typed when you first went on is sent, and Skip sends nothing typed; other platforms send only the word Other.
Sent with every event. Technical values (the app and system version, the device model (on Windows, only PC), the platform, the display language without its region and a debug flag), the installation identifier (§3(d)), a session identifier, and fields that identify our app and keep test traffic apart.

These categories are complete: the app sends nothing else to analytics. A later version of the app may send other events or values within these categories without a new version of this policy; a new category, purpose, recipient or kind of identifier, or any other text you type, needs a new version first. Apart from the one answer you type, the events never contain script text, titles, transcripts, file names, audio or video, an exact position in your script, the place or size of a window on your screen, your location or time zone, your device’s accessibility or appearance settings, or your screen size. A speech-language code such as en-GB may include your device’s region.

5. Purchases

Wispim Pro, where offered, is bought through Apple StoreKit, Google Play’s billing system or the Microsoft Store, as a subscription or a lifetime purchase (Terms of Use, §4a). The seller is Apple Distribution International Ltd. (Cork, Ireland) on Apple devices and, for buyers in the European Economic Area, Google Commerce Limited, Gordon House, Barrow Street, Dublin 4, Ireland on Android. The store handles payment, billing and refunds under its own terms and privacy policy; for a store purchase, your name, payment details and receipts never reach us. The app checks Pro with the store on your device, and from the app we receive only the purchase analytics of §4.

An organisation can also license Wispim for Windows for its users by invoice, outside the Microsoft Store: it orders from us (§7), and we bill it. Its IT then places a signed licence on its PCs, and the app checks on the PC itself that the licence is genuine, still valid and issued to an organisation whose work account is on the PC, using Windows’ own record of the PC’s work account. The check itself sends nothing about the PC, its user or the organisation to us or to anyone else; analytics, if on, works as on any other PC (§4).

6. File import

You may import text and document files, such as PDF or Word. Import is processed locally on your device; neither the file, its name nor its content is sent to us. Wispim reads only the file you choose or drop on it, text you share into it, and the clipboard only when you paste. Some formats are read with offline open-source libraries that make no network connections.

7. Support

If you email us at support@wispim.com, we process your email address and message content to answer you (GDPR Art. 6(1)(b)/(f)). You may voluntarily attach a diagnostic log; that log contains no script text and no audio.

On Apple devices, diagnostics you choose to share hold technical events and app and device facts, with heard words replaced, and go only where you send them. On Android and Windows, Help & feedback opens your mail app with versions and device model filled in (on Android, optionally recent technical log lines without recognised words); nothing leaves until you send it. Wispim for Windows also keeps local logs, without script text or audio, that are never sent.

If you write to join the Android beta, we add the Google account address you give us to the test’s tester list in Google Play, so Google, an independent party, receives it under its own terms (GDPR Art. 6(1)(b)). Ask us at any time to take it off the list.

If you order for an organisation (§5), we process what you send, such as the company’s name, VAT ID and billing address, the number of users, its Microsoft Entra tenant ID and an IT contact’s name and email address, to send a quote, an invoice and the licence and to renew it (GDPR Art. 6(1)(b), (c) and (f)). Please let the IT contact know that you have given us their details.

7a. This website

wispim.com is hosted on Cloudflare Pages (Cloudflare, Inc., our processor under Art. 28 GDPR). Cloudflare logs each request (IP address, time, page, referrer, user agent) to deliver the site and defend it against abuse (Art. 6(1)(f) GDPR); the logs are kept for the short period Cloudflare’s retention allows, and we build no profile from them.

The site sets no cookies of its own; Cloudflare may set security cookies that carry no analytics. Your theme choice and the browser teleprompter’s script and settings stay in your browser. That teleprompter uses your browser’s speech recognition, which may send audio to the browser vendor or its provider; the page warns first, and Wispim never receives that audio or transcript. Everything else comes from wispim.com, except Cloudflare Web Analytics, which counts page views without cookies, browser storage or cross-site identifiers.

The site may also count, with Cloudflare Zaraz, taps on its App Store, TestFlight and Google Play links, a QR code opened instead of a store, and the start of a reading in the browser teleprompter (Art. 6(1)(f) GDPR). Each count names only the button and its page. Cloudflare, as our processor, receives it with the request’s technical data, such as the time, your IP address and the approximate location derived from it, your browser, its language and screen size, and the page’s address; it sets no cookies, uses no browser storage, gives you no identifier and uses the count only to show us totals. Our links to the App Store and the Microsoft Store may carry a code naming the button and page they are on; the store receives that code when you follow the link and shows us totals by code. The code says nothing about you.

8. Retention

On your device, scripts, settings, the analytics choice (§3(e)), unsent events and Windows’ local logs stay, at most, until you delete them or uninstall the app. Backups of your device or files keep copies under their own settings (§3(i), §3(k)).
The iCloud copy (§3(a)) stays until you remove it with Settings → iCloud → Remove the copy in iCloud (on a Mac, Settings → Pro) or in your device’s iCloud settings; turning sync off or deleting the app does not remove it.
Videos in Photos or Movies/Wispim stay until you delete them, even after you uninstall Wispim (§3(g)).
Support emails: as long as needed for your request and 6 months after it is closed, unless the establishment, exercise or defence of legal claims requires longer.
The free-take counter, one number with no personal data, survives reinstalling the app on Apple devices and Windows, and on Android through Android’s backup.
The Android beta’s tester list (§7): until the beta ends or you ask us to take your address off it, whichever comes first.
Website counts (§7a): as totals in Cloudflare’s dashboard, under Cloudflare’s retention; no single event is exported.
Organisation orders (§7): invoices and the records behind them for as long as Polish tax and accounting law requires; the rest of the correspondence as support emails.
Analytics: retained by TelemetryDeck per its data-processing terms.

9. Recipients and third parties

We use no third-party analytics, advertising or tracking SDKs. Recipients:

TelemetryDeck GmbH, our processor: analytics, in the EU (§3(c)).
Cloudflare, Inc., our processor: the website, its counts and document requests (§3(f), §7a).
Apple and Google (or your phone’s speech service), as independent parties: store purchases, server-based speech recognition, the iCloud copy, Android’s backup and the Android beta’s tester list.
Microsoft, on Windows: Store purchases and, if you turn it on, online speech.
Alpha Cephei Inc. (alphacephei.com): Windows model downloads.

Our processors may process your data only on our instructions (Art. 28 GDPR); the other recipients act under their own terms and privacy policies. A rating or review you give in the store’s own prompt inside the app goes directly to that store, never to us. Apart from that prompt, the purchases above and the Android beta’s tester list (§7), Telegram, Instagram and the app stores receive data only after you follow their links.

10. International transfers

The app’s analytics data (§3(c)) is stored exclusively in the EU. Apple, Google, your phone’s speech service or Microsoft may transfer speech audio, and Google an Android backup and the Android beta’s tester list, internationally under their own safeguards (GDPR Arts. 44–49). Cloudflare may process website connection data and the site’s counts (§7a) outside the European Economic Area under its Data Processing Addendum, which provides the EU–US Data Privacy Framework and, where required, the EU Standard Contractual Clauses with supplementary safeguards.

11. Your rights

Under the GDPR (Arts. 12–22) and the ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time, without affecting what was lawful before. You withdraw a permission, such as the microphone or camera, in your device’s settings; the simplest way to object to analytics is the switch in §3(e). Because there are no accounts and we cannot link the analytics identifier to a person (§3(d)), Art. 11 GDPR applies: we normally cannot tell which installation is yours and, for analytics data, may ask for more information or be unable to act. To exercise a right, email support@wispim.com.

No law or contract requires you to give us personal data: the app works with analytics off. You may complain to Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, uodo.gov.pl.

12. Children

Wispim is a general-audience app and is not directed at children under 13; consistent with COPPA, we do not knowingly collect personal data from children under 13.

13. California notice (voluntary)

We do not sell or share personal information as defined by the CCPA/CPRA. We are below all CCPA thresholds, so this notice is provided voluntarily.

14. UK users

For users in the UK, the UK GDPR applies; you may contact the Information Commissioner’s Office (ICO), ico.org.uk.

15. Changes

We publish each new version of this policy on wispim.com, with its number and date at the top: before a new category of data, purpose, recipient or kind of identifier applies (§4), and whenever a statement in it would otherwise stop being accurate.

Version 1.16 (31 October 2026) — New: an organisation can license Wispim for Windows by invoice, and the app checks that licence on the PC, and the check sends nothing (§5). §7 and §8 say what we do with an organisation’s order and with an email asking to join the Android beta. §7a says that the website may count taps on its store links, a QR code opened and the start of a reading, with Cloudflare Zaraz, and that store links may carry a code naming the button. §9 and §10 add them to the recipients and transfers.

Version 1.15 (26 October 2026) — Rewritten in a shorter form: §4 describes kinds of analytics data instead of listing every event and setting. New: Wispim for iPhone can record video with sound, with the camera and add-only access to Photos (§3(l)), never uploaded; that sound is the one exception to Wispim never storing your audio (§3(b), §3(g)). Analytics may include Wispim’s own settings, which §3(a) no longer says are never sent, and can show that a take used the camera (§4). On Android, a video that cannot be saved to Movies/Wispim may be kept in Wispim’s own folder and offered for sharing, and §3(g) no longer says that a failed save leaves no copy. §3(b) and §4 now also say, as was already the case, that Android may send speech to Google when on-device recognition stops following you, and that a speech-language code may include your device’s region. Earlier versions are available on request at support@wispim.com.

16. Controlling language

This Privacy Policy is published in English, Polish, German and Russian. The English version controls in case of conflict, except that for consumers resident in Poland the Polish version prevails where mandatory Polish consumer law or the Act on the Polish Language (ustawa o języku polskim) so requires. -----