Whirl Privacy Policy

This policy applies to all information processed through Whirl’s consumer-facing products and services, including the website, mobile apps, creator tools, messaging, daily challenges, subscriptions, and related support, moderation, and account systems.

It does not apply to third-party websites, services, or products linked from or integrated into Whirl. Those are governed by their own privacy policies.

We collect information in three main ways: (1) directly from you when you create an account, post content, or submit AI requests; (2) automatically from your device and app usage; and (3) from third-party sign-in providers (Apple, Google) and service partners when you authorize the connection.

If you contact support, we also receive the content of your messages and any information you provide.

We do not collect precise geolocation, health data, contacts, or any information for advertising or cross-app tracking purposes.

We use the information we collect to:

• Provide, maintain, and improve the Whirl platform, including accounts, social features, messaging, challenges, and media tools.
• Authenticate users, secure accounts, detect abuse, prevent fraud, and investigate incidents.
• Process AI generation and editing requests and maintain your creation history.
• Handle subscriptions, billing, credits, refunds, and entitlements.
• Communicate with you about your account, service updates, and support requests.
• Perform analytics, moderation, debugging, and product improvement.
• Comply with legal obligations and enforce our Terms of Service and Community Guidelines.

We may also use aggregated and anonymized data, including prompts, uploads, and Outputs, for internal analytics, research, AI model training and improvement, and product improvement.

Additionally, when you make content publicly available on Whirl (including generated Outputs, posts, comments, and challenge entries), you grant us the right to use that content — along with your public profile information (username, profile picture, display name, and bio) — for marketing, promoting, and advertising the Whirl platform and Services, as described in our Terms of Service.

Whirl offers powerful AI image, video, and editing tools. When you actively choose to use these features (for example, by submitting a generation or editing request), you give us your explicit consent to send your prompts, uploaded media, masks, settings, task identifiers, and related technical information to our external AI processing partners solely to fulfill your request.

Before your first AI generation or edit request, the app will display a clear in-app notice explaining that your prompt, uploaded media, masks, and settings will be sent to third-party processors for processing only.

You may withdraw this consent at any time by stopping use of the AI features or deleting your generated content.

We may store prompt text, settings, output links, thumbnails, credits usage, and generation metadata to deliver results, show your history, support retries, and protect the service.

We select AI processing partners that have represented to us that they do not use data submitted through our service to train their AI models or for any other purpose beyond processing the specific request.

Please do not submit sensitive personal information, confidential business data, or content you are not authorized to share.

We share information only in the limited circumstances below.

We do not sell your personal information to any third parties, nor do we use your prompts, uploads, or generated content to train AI models for other users or for any purpose unrelated to providing you Whirl’s services.

We do not use your data for cross-app or cross-site tracking, targeted advertising, or sell it to data brokers. We do not participate in Apple’s App Tracking Transparency framework because we do not track users across apps or websites.

Some information is public by design (e.g., public posts, comments, profile details). Direct messages are visible only to participants in the conversation and to Whirl or its service providers when necessary for operation, support, abuse prevention, or legal compliance. Billing and private account data are never made public.

Public content may also be used by Whirl for promotional purposes as further described in our Terms of Service.

Whirl may request access to your camera, microphone, or photo library when needed to capture or upload media. You control these permissions in your device settings at any time.

We may also use local device or browser storage (local storage, session storage, cached data) to support authentication, performance, preferences, and temporary editor state. Clearing app data, browser storage, logging out, or uninstalling the app removes locally stored data, but does not delete information stored on our servers.

Cookies We use cookies and similar technologies (including local storage and session storage) on the Whirl website to keep you logged in, remember your preferences, maintain security, and make the site work properly. These are strictly necessary cookies only — we do not use them for advertising, cross-site tracking, analytics that collect personal data, or any other non-essential purpose.

You can control or delete cookies through your browser settings at any time. Disabling cookies may prevent some features of Whirl from working correctly.

We retain your account and profile information for as long as your account exists. Generation history and content are kept until you delete them or your account. Billing records are kept for 7 years for legal compliance. Diagnostic and security logs are retained up to 90 days. We keep your information only as long as necessary to provide our services, maintain your account, support your creations, process payments, ensure safety and security, comply with legal obligations, and resolve disputes. When information is no longer needed, we delete it, de-identify it, or archive it in limited backup systems. Retention periods vary by data type and legal requirements.

When you request account deletion in the app, your account is immediately deactivated and scheduled for permanent deletion. Your profile and content will no longer be visible on Whirl during this period. You may reactivate your account within 90 days by logging back in. If you do not reactivate within 90 days, your account data will be permanently deleted or anonymized, except for information we must retain for legal, security, fraud-prevention, or backup purposes.

You have the following rights (subject to applicable law):

• Access, correct, update, or request deletion of your personal information.
• Delete your Whirl account directly in the app (go to Settings → Account → Delete Account). When you request deletion, your account will be immediately deactivated and your profile and content will no longer be visible on Whirl. You may reactivate your account within 90 days by logging back in, which will restore your profile, posts, generation history, credits, tokens, and other retained account data during that period. If you do not reactivate within 90 days, your account and personal information will be permanently deleted or anonymized, except for limited retention for legal compliance, fraud prevention, safety, or backup purposes. Subscriptions purchased through Apple are billed and managed by Apple and must be canceled through your Apple ID subscription settings. Deleting your Whirl account does not automatically cancel Apple-billed subscriptions. Subscriptions purchased directly from Whirl (such as through Stripe) are billed and managed by Whirl and may be canceled by deleting your account or through your account billing settings, as applicable. Unless required by law, fees already paid are non-refundable.
• Edit profile information directly in the app or website.
• Manage device permissions and local storage through your device settings.
• Manage subscriptions through our billing tools or the original purchase platform.
• Request a copy of your data or ask questions by emailing support@whirl.art.

California and EU residents have additional rights under CCPA/CPRA and GDPR; email support@whirl.art to exercise them.

To exercise any rights, contact us at support@whirl.art. We will verify your identity before processing certain requests.

Whirl and our service providers may process information in countries other than where you live. We use Standard Contractual Clauses, adequacy decisions, and other appropriate contractual, organizational, and technical safeguards to protect your data during these transfers.

Whirl is intended only for individuals who are at least 18 years old. We do not knowingly permit anyone under 18 to create an account or use the Services, and we do not knowingly collect personal information from anyone under 18. If we learn that a person under 18 has provided personal information to us or is using the Services, we will take steps to disable the account and delete the information as required by applicable law. If you believe someone under 18 has used the Services or provided us with personal information, please contact us at support@whirl.art.

We use reasonable administrative, technical, and organizational safeguards to protect your information. However, no system is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy. If we make material changes, we will notify you through the service or by other appropriate means. The updated policy will be effective when posted with a new “Effective Date.”

For privacy questions or requests, email us at support@whirl.art.