Last updated: 2026-07-22

Who we are — Wispers is provided by Scheidegger Technology GmbH, Im Büelhältli 13, 8704 Herrliberg, Switzerland. We act as the data controller for the personal data described here. Contact: privacy@wispers.dev.

Scope — This Policy covers our websites, apps, and the Wispers services, including Wispers Files, Wispers Connect, and Wispers Access (collectively, the "Services"). It applies to all of them. If we link to a separate policy for a specific feature, that policy applies to it.

Data you transfer — Wispers connects your own devices so they can exchange data with each other over an end-to-end encrypted connection. We do not store the content you transfer — whether files, streams, or other data — and we cannot read it. Our Hub helps your devices find and connect to each other but never receives that content; where devices need a relay to reach each other across networks, any data passing through it stays end-to-end encrypted, unreadable to us, and is never stored. Your devices authenticate each other using device pairing and a cryptographic roster that they sign themselves and verify independently of the Hub, so a compromised Hub cannot impersonate your devices or add a rogue device to your account. Your data stays yours, end to end.

Data we collect

• Account data: email, name, preferences, communications with us.
• Device data: device names and configurations needed to register your devices and connect them to each other.
• Connection metadata: records of connections between your devices — device identifiers, timestamps, and transport type — used to operate, route, and secure the Services. We do not log the content exchanged.
• Product & usage data: actions in the Services, features used, logs, crash reports, performance metrics.
• Device/technical data: IP address, device identifiers, browser/OS, timezone, language, referrer.
• Support & feedback: issue reports, screenshots or files you choose to share with us.
• Payment data (if/when applicable): handled by our payment processor.
• We do not collect or store the content you transfer between your devices.

Sources — Directly from you; automatically from your devices; from service providers (e.g. email).

How we use data (purposes & legal bases)

• Provide and secure the Services (create accounts, authenticate, run features, prevent abuse, debug).
  • Legal bases: contract; legitimate interests in running secure Services.
• Communicate with you (operational emails, security/transactional notices).
  • Legal bases: contract; legitimate interests.
• Improve the Services (analytics, research, feature development, quality).
  • Legal bases: legitimate interests; consent for non‑essential cookies/analytics.
• Bot & spam protection (gate support messages on captchas).
  • Legal bases: legitimate interests.
• Legal/compliance (comply with laws, enforce terms, defend claims).
  • Legal bases: legal obligation; legitimate interests.

Cookies & tracking — We use only essential cookies for our sites to work.

Sharing your data

• Service providers (processors): hosting, analytics, email delivery, customer support, logging. They act under contract and only on our instructions.
• Business operations: professional advisors, auditors, insurers.
• Legal / safety: to comply with law, enforce terms, or protect rights, property, or safety.
• Changes in control: in a merger, sale, or reorganization, data may transfer under appropriate safeguards.

We do not sell your personal data.

International transfers — We are based in Switzerland and may process/store data in Switzerland, the EEA, the UK, and other countries. Where transfers go to countries without an adequacy decision, we use appropriate safeguards (e.g., Standard Contractual Clauses) and implement supplementary measures where relevant. You can request a copy of relevant safeguards.

Retention — We keep personal data only as long as needed for the purposes above, then delete or anonymize it. Typical periods:

• Account data: kept while your account is active; deleted or anonymized after closure (contact privacy@wispers.dev). (The content you transfer isn't stored, so there's nothing to retain there.)
• Connection, account & product logs: up to 12 months for analytics and security logs (aggregated thereafter).
• Support requests: 12 months, unless required longer for legal or technical reasons.

Your rights — Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, data portability, and to withdraw consent at any time. You can also lodge a complaint with the FDPIC (Switzerland) or your local data protection authority (EEA/UK). Contact us at privacy@wispers.dev to exercise your rights. We may need to verify your identity.

Children — The Services are not directed to children under 16 (or as defined by local law). We do not knowingly collect such data. If you believe we have, contact us to delete it.

Automated decisions — We do not make decisions with legal or similarly significant effects based solely on automated processing. If this changes, we will explain the logic involved and your rights.

Security — We use administrative, technical, and organizational measures appropriate to the risk (e.g., encryption in transit/at rest, access controls, logging, vulnerability management). No method is 100% secure.

Data breaches — If we become aware of a personal‑data breach that is likely to result in a high risk to you, we will notify the competent authority and the affected individuals as required by law.

Contacts

privacy@wispers.dev

Scheidegger Technology GmbH
Im Büelhältli 13
8704 Herrliberg
Switzerland

Changes to this Policy — We may update this Policy from time to time. We will post the new version here and update the "Last updated" date. Material changes will be notified via email or in‑app notice.

Last updated: 2026-06-22

We use only essential cookies for operating the Wispers services, such as those necessary to allow users to log into their account. Accordingly, we show no cookie consent banner.

Last updated: 2026-06-22

We appreciate security research. If you believe you've found a vulnerability in wispers.dev (including *.wispers.dev), please email security@wispers.dev (PGP) with steps to reproduce and affected URLs or apps; test only with your own accounts, avoid accessing others' data, and do not perform denial-of-service, spam, social engineering, or physical testing. We'll acknowledge within 72 hours, share a status update within 7 business days, and request coordinated disclosure while we remediate. Safe harbor: If you make a good-faith effort to follow this policy, we won't pursue legal action or report you to authorities for your research. Third-party services we don't control are out of scope; please don't run automated scans that degrade service or report non-impactful best-practice findings.

For Wispers Files, see files.wispers.dev/about.
For Wispers Connect, see connect.wispers.dev/about.

With Wispers Access, your access and data are tied to the app shares you have joined using the app. You can delete an app share at any time, which will remove the data we have about your device (with the exception of data we have to retain by law, if any).

To do so, open the shared app's detail view in Wispers Access and choose "Remove from this device". This revokes your device's access to that app and deletes your device's registration from our servers. Residual copies are purged within 14 days, and connection logs are deleted per the retention periods in the Privacy Policy. Removing an app is permanent and cannot be undone. Joining again requires a new invitation code.

If you no longer have access to the device, ask the person who shared the app with you to remove your access. This cuts off the device immediately, and its registration is then deleted automatically after 30 days of inactivity. We do not link your device's registration to a name or email address, so we cannot look up or delete your data based on a support request alone. Deletion only works through the app or the person who shared with you. For anything else, you can reach us at support@wispers.dev.

Wispers is operated by Scheidegger Technology GmbH.

CH-ID: CH-020-4088779-4
UID: CHE-425.697.643-4

Postal address
Scheidegger Technology GmbH
Im Büelhältli 13
8704 Herrliberg
Switzerland