Legal

Privacy Policy

Last Updated: August 2, 2026

Introduction

Orbyt LLC ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"). By accessing or using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

1. Personal Information

Whisper Secrets is an anonymous app. We may collect the following when you use it:

  • Display Name: An auto-generated pseudonym that you can change. We do not collect your real name, and we never require or display a phone number.
  • Account Identifier: A pseudonymous device identifier tied to your account. There is no username or password login. On Android, if you choose to sign in with Google, your email address is converted to an irreversible hash on your device, and only that hash is sent to us — we never receive your email. On iOS, no email is collected. You only provide an email address if you voluntarily submit a support or account-deletion request.
  • Age and Gender: During onboarding you may provide your age and gender (or choose "prefer not to say"). These are self-declared, are attached to your posts and messages, and are not verified by us.

2. Usage Information

We may automatically collect non-personal information about your interaction with the App, including:

  • Device Information: Device type and operating system, and (on Android) device model and manufacturer, plus a Google Play Integrity result used to deter bots and abuse.
  • Log Data: Your IP address (recorded each time you sign in), app version, and access times.
  • App Usage Data: Features you use, interactions, and navigation patterns.

3. Location Information

If you grant location permission, we use your approximate location to power the Local feed and to attach a location to your posts. Before any coordinates leave your device, they are rounded to roughly one kilometer, and other users only ever see a coarse city/state label. We do not collect or store your precise, street-level GPS coordinates. Location is optional — you can skip it during onboarding and turn it off anytime in your device settings.

Messaging

Private messages are delivered to the recipient by push notification and pass through our servers only to complete delivery. We do not retain message content: message text and images are deleted from our servers once the recipient's device has synced them (images within 24 hours at the latest). We do keep basic conversation metadata — the participants, display names, the related post, and coarse location — so your conversation list works across devices.

How We Use Your Information

We may use the collected information for various purposes, including:

  • To Provide and Improve Our Services: Enhance, maintain, and develop new features and functionalities.
  • To Personalize Your Experience: Customize your interaction with the App based on your preferences.
  • For Communication: Send you updates, notifications, and promotional materials (with your consent).
  • For Security and Moderation: Monitor and analyze usage, content, and trends to protect our users, enforce our policies, and help ensure a safe App environment, including through the use of private in-house moderation systems.
  • For Legal Compliance: Comply with legal obligations and enforce our policies.

How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

  • With Service Providers: Trusted third parties who help us operate the App (for example, cloud hosting, analytics and crash reporting, push notifications, and advertising/attribution) under confidentiality obligations.
  • Law Enforcement & Legal Process: We operate a verified law-enforcement request portal and may disclose account records — such as profile details, posts, IP logs, and conversation metadata — in response to valid legal process (such as a subpoena or warrant), a preservation request, or to protect safety. Because private message content is deleted from our servers once delivered, it is generally not available to disclose. As required by law, we also report apparent child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC).
  • In the Event of a Business Transfer: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
  • With Your Consent: In other cases where you have given us your explicit consent to share your information.

Third-Party Advertising

Our App may display advertisements served by third-party advertising partners. These third-party advertisers may collect certain information from your device or your use of the App in order to provide, measure, personalize, and improve advertising. This may include information such as device identifiers, IP address, advertising identifiers, app usage data, approximate location, and other information collected through cookies, SDKs, or similar technologies.

We use Appodeal as our advertising mediation provider, together with a range of advertising networks (including, for example, Google AdMob, AppLovin, Unity/ironSource, Amazon Publisher Services, and Meta Audience Network, among others) and the AppsFlyer attribution service. These partners may collect device identifiers, advertising identifiers, IP address, and app-usage data to serve and measure ads, and process it under their own privacy policies. You can review Appodeal's Privacy Policy at https://appodeal.com/privacy-policy/.

Advertising & Tracking Choices

On iOS, we ask your permission through App Tracking Transparency before an advertising identifier is used for personalized ads. On Android, you can reset or delete your advertising ID in your device settings. You can turn off personalized advertising at any time in your device settings; you will still see non-personalized ads.

Use of Private In-House AI Moderation

To help maintain safety, enforce our rules, and protect the App and its users, we use custom, offline, in-house, private artificial intelligence systems as part of our moderation process. These systems may be used to review content, detect potential violations of our policies, flag suspicious or harmful behavior, and assist in moderation decisions.

These moderation systems are operated privately by us and are not public-facing tools. Automated review may be used alongside human review to support content moderation, safety enforcement, and related security functions within the App.

Data Retention

We retain your account, posts, and conversation metadata for as long as your account is active. Private message content (text and images) is not retained — it is held only transiently to deliver it and is deleted from our servers once the recipient's device syncs it (message images are removed within 24 hours at the latest). IP access logs, moderation records, and any records subject to a legal-preservation request are kept as needed for security, safety, and legal compliance. When data is no longer needed, we securely delete or anonymize it.

Security

We implement a variety of security measures to protect your information from unauthorized access, use, or disclosure. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

  • The right to access and correct your personal data.
  • The right to request deletion or restrict processing of your data.
  • The right to withdraw consent at any time.
  • The right to data portability.

To exercise these rights, use "Delete Account" in the app's settings (which submits a deletion request), or email us at support@orbytgames.com. We do not currently offer an automated data export; contact us if you need a copy of your data.

Children's Privacy

Whisper Secrets is intended only for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. Age is self-declared at signup and is not otherwise verified. If we learn that a user is under 18, we will remove the account. If you believe a minor is using the App, contact us at support@orbytgames.com.

Your California Privacy Rights

If you are a California resident, you may request access to, correction of, or deletion of your personal information, and may opt out of the "sale" or "sharing" of personal information. Our use of third-party advertising partners may involve "sharing" personal information (such as device and advertising identifiers) for cross-context behavioral advertising. To opt out, turn off ad personalization in your device settings (iOS App Tracking Transparency / Android ad settings) or email support@orbytgames.com. We will not discriminate against you for exercising these rights.

International Users

If you are in the European Economic Area or the United Kingdom, we process your personal data on the bases of your consent (for example, location and personalized advertising), our legitimate interests (safety, moderation, and security), and legal obligations. Your data may be processed in the United States. You have the right to access, correct, delete, restrict, object to, or port your data, to withdraw consent at any time, and to lodge a complaint with your local data-protection authority.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: support@orbytgames.com

Whisper Secrets is operated by Orbyt LLC, a New York (USA) limited liability company. This Privacy Policy is governed by the laws of the State of New York, United States.