Legal

Privacy Policy

Last updated October 2, 2026

This policy explains what information Wisp (formerly Qalam) collects when you use the Wisp app and qalamapp.net, how we use it, and the choices you have. We don’t sell your personal information and we don’t show ads.

What we collect

Information you give us

Account: email address, username, display name and password (stored only as a secure hash). If you sign in with Apple or Google, we receive the account identifier and the email address they share with us.
Profile: photo or character avatar, banner, bio, the location text you type, website, and your appearance settings.
Content: posts, replies, photos, videos, voice posts, Notes, Ghost posts, questions and answers in Ask, messages, reactions, and anything you share in Cubes, Live and games.
Support: what you send us when you email us or report something.

Information created when you use Wisp

Activity: who you follow, block or mute; likes, reposts, bookmarks, replies and views. We use these to build your feed and suggestions.
Cubes and Live: who joined, who spoke, and the room’s chat. A Cube is recorded only when its host chooses to record it.
Games: matches, answers, scores and rankings.
Device and security: IP address at sign-up and sign-in, device model, iOS and app version, push notification token, and error and crash reports from the app.
Wisp+: if you subscribe, Apple sends us the transaction details we need to confirm your membership. We never see your card or payment details.

Permissions you control

Camera, microphone and photos are used only when you take a photo, record, speak in a Cube, go live or pick media.
Contacts (optional, during setup): your iPhone turns the email addresses in your contacts into anonymous codes and sends only those codes so we can show which of your contacts are already on Wisp. Your contacts are never uploaded or stored.

How we use it

To run Wisp: your account, profile, feed, messages, Cubes, Live, games and notifications.
To rank your feed, suggest people and content, and power search.
To keep Wisp safe: detect spam and abuse, enforce our Terms, review reports and secure accounts.
To verify your email address and send account messages such as sign-in codes.
To fix problems and improve the app.
To meet legal obligations.

AI features

Some features send content to OpenAI to process it. We send only what the feature needs:

Voice posts are transcribed so they can be read and searched.
Posts are turned into search vectors so search can find posts by meaning.
When you mention @qalamai, your post and its thread are used to write the reply.
Wisp+ writing help rewrites, shortens or translates the draft you choose.
Anonymous questions are checked for abuse before they are delivered.
“Between Us” summarizes the public interactions between two people. Private messages are excluded by default.

According to OpenAI’s API data policy, content sent through its API isn’t used to train its models.

Anonymous features

Ask questions and Ghost posts don’t show who wrote them to other people. Wisp still stores who sent them, so we can enforce our rules, act on reports and respond to valid legal requests.

What other people can see

Your profile and posts are public unless you make your account private. A private account shows your posts only to followers you approve.
Messages are visible to the people in the conversation. They are stored on our servers and protected in transit, but they are not end-to-end encrypted.
Anyone in a Cube or Live can hear and see what happens there while it is live, and recordings can be saved by the host.

How long we keep it

Account information and content are kept while your account is active.
Deleting your account hides it right away. After 30 days, your account, posts, Notes, messages and media are permanently deleted. Signing in during those 30 days cancels the deletion.
Deactivating hides your account until you sign back in.
Sign-in history, including IP addresses, is deleted after 90 days.
Ghost posts disappear after 24 hours. Dismissed Ask questions are deleted after 30 days, and unanswered ones after 180 days.
Copies in our backups are removed as the backups are replaced.

Your choices and rights

Edit your profile, change your username or password, and make your account private in the app.
Turn anonymous questions on or off and choose who can ask you.
Block, mute and report people and content.
Turn off notifications and permissions in iOS Settings at any time.
Deactivate or delete your account in Settings → Account.

Depending on where you live, you may have the right to access, correct, delete or get a copy of your information, or to object to some uses. Email hello@qalamapp.net and we will reply within 30 days.

Children

Wisp isn’t for children under 13, and we don’t knowingly collect their information. If you believe a child under 13 has an account, contact us and we will delete it.

Security

We use encryption in transit (HTTPS), hashed passwords, restricted administrative access and rate limits to protect your information. No system is perfectly secure, so please use a strong, unique password.

International transfers

Our servers and providers may be located outside your country. When we transfer information, we protect it as described in this policy.

Changes

If we make important changes to this policy, we will tell you in the app or by email before they take effect. The date at the top shows the latest version.

Contact

Questions or requests about your privacy: hello@qalamapp.net.