Wisp — Privacy Policy

Last updated: 31 May 2026

Plain English summary
Wisp is a daily kids' podcast app. We don't ask for your child's name. We don't track them. We don't show them ads. The only thing we ever ask for is birth month and year (kept on your phone), and your favourite topic picks (also kept on your phone). That's it.

1. Who we are

Wisp is built and operated by Ben Heyman (sole trader), based in the United Kingdom. Contact: hello@wispdaily.com.

2. What we collect — and what we don't

On your phone, never sent to us:

• Your child's birth month and year (used to pitch episodes age-appropriately)
• Your favourite theme choices (used to bias the Lucky Dip mix)
• Your drive-time preference
• Playback history

What we never collect:

• Your child's name
• Account credentials (Wisp has no accounts)
• Location
• Contacts, photos, calendar, microphone (Wisp does not request these permissions)
• Analytics or behavioural tracking
• Anything for advertising

3. What we serve

Every day, Wisp generates a fresh shared pool of podcast episodes — the same files for every listener. When you tap "Today's Wisp", your phone downloads MP3 files from our content delivery network (Cloudflare R2). No identifying information is sent in those requests beyond standard internet routing (IP address, like every web request).

If you say "Hey Siri, play my daily Wisp", Apple's Siri handles the voice request on your device; we never receive your voice recording.

4. Voice input (when available)

If a future version of Wisp adds voice input, recognition will happen on your device using Apple's Speech Recognition framework. Audio is not sent to our servers. You can revoke microphone access at any time in iOS Settings.

5. Children's privacy (COPPA / UK GDPR — Children's Code)

Wisp is designed for children aged 5–11 listening with a parent. We have built it specifically to comply with the Children's Online Privacy Protection Act (COPPA) and the UK ICO's Age Appropriate Design Code:

• No account creation — we cannot identify a child even if we wanted to.
• No personal information is collected from anyone, including children.
• No advertising of any kind is shown to children.
• No third-party tracking, analytics, or behavioural profiling.
• Birth month and year are stored only on the device and only used to choose age-appropriate content. We never see them.

6. Third-party services we use

To deliver Wisp we use three vendors. None of them ever receive personal information about you or your child:

• OpenAI — we use OpenAI's API to generate the scripts and voices for each daily episode. We send only the topic prompt (e.g. "Why is the sky blue?") — never anything user-specific.
• Cloudflare — hosts the generated audio files. When your phone fetches an episode, Cloudflare sees the standard request metadata (IP address, user agent). Cloudflare's privacy policy: cloudflare.com/privacypolicy.
• Render — hosts the small API the app talks to to ask "what's on today?". Same standard request metadata. Render's privacy policy: render.com/privacy.

7. Data retention

Because we don't collect personal data, there is nothing to retain or delete. If you uninstall the app, the on-device preferences (birth month, theme picks) are deleted along with the app.

8. Your rights

Under UK GDPR you have the right to access, correct, or delete personal data we hold about you. Since we don't hold any, there is nothing to disclose. If you have any concern, email hello@wispdaily.com and we will respond within 30 days.

9. Changes to this policy

If we change this policy we will update the "Last updated" date at the top and (if the changes are material) post a notice in the app before the change takes effect.

10. Contact

For any privacy question, write to hello@wispdaily.com or to: