WhistleWise
Sign in
Privacy Policy
Last updated September 24, 2026
This policy explains what information WhistleWise collects, why, and what you can do about it. WhistleWise is run by Tortoisail LLC ("we", "us"). The short version: we collect what the app needs to work, we don't sell it, and we don't use advertising or tracking cookies.
What we collect
- Account details: your name, email address and password. Passwords are stored only as a secure hash.
- Settings: your time zone (so "today" and "this week" match where you are), the rules edition you study, and your reminder time.
- Your training: the reviews and quizzes you complete, your answers and scores, the days you were active (for streaks and your history chart), and any reports you send about a question, including your note.
- Reminders: if you turn on reminders, the push subscription your browser or phone creates for each device. It lets us send notifications and nothing else.
- Sign-in sessions: the IP address and browser type used to sign in, stored with each session for security.
- Billing: if you subscribe, our reseller Creem shares your customer ID and your subscription's plan, status and billing dates with us. Creem collects your payment details directly; we never see or store your full card number.
How we use it
- to run your account and give you the plan you're on;
- to show your progress, streaks and history;
- to send the reminders you asked for;
- to fix content you report and improve WhistleWise;
- to keep the service secure and prevent abuse;
- to email you about your account, your subscription, or important changes. We don't send marketing email without your permission.
If you're in the European Economic Area or the UK, we rely on performing our contract with you (running your account and subscription), our legitimate interests (security and improving the service), and your consent (reminders, which you can turn off at any time).
Cookies
We use one essential cookie that keeps you signed in. We don't use advertising or analytics cookies, and we don't track you across other sites. The app also stores a copy of itself on your device so it loads quickly and works as an installed app.
Who we share it with
We don't sell or rent your information. We share it only with services that help us run WhistleWise:
- Cloudflare hosts the app and its database and keeps short-lived server logs.
- Creem, our reseller and Merchant of Record, handles checkout, payments, taxes, receipts and the billing portal. Creem's own privacy policy covers the information you give it at checkout.
- Push services run by your browser or phone maker (such as Apple, Google or Mozilla) deliver reminder notifications. They receive the notification, not your account details.
We may also share information if the law requires it, or to protect the rights and safety of our users or of WhistleWise.
Where it's stored
Our providers may store and process information in the United States and other countries. When information leaves the EEA or UK, it's protected by the safeguards those providers offer, such as standard contractual clauses.
How long we keep it
We keep your information for as long as you have an account. When you delete your account, we delete your account and training data within 30 days. Creem keeps billing records for as long as tax and accounting laws require.
Your choices and rights
- Turn reminders off at any time in Settings, or in your device's notification settings.
- Change your time zone and rules edition in the app.
- Ask us for a copy of your information, to correct it, or to delete your account, by emailing support@whistlewise.app from your account's email address. We'll reply within 30 days.
Depending on where you live (for example, in the EEA, the UK or California), you may have other rights, such as objecting to how we use your information or complaining to your local data protection authority. We'll honour those rights whatever your location, and we don't sell or "share" personal information as California law defines it.
Security
Information travels over HTTPS, passwords are hashed, and access to our systems is restricted. No service can promise perfect security, so please use a strong password that you don't use anywhere else.
Children
WhistleWise isn't meant for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has created an account, email support@whistlewise.app and we'll delete it.
Changes to this policy
If we change this policy in a significant way, we'll tell you by email or in the app before the change takes effect. The date at the top shows when it was last updated.
Contact
Privacy questions or requests: support@whistlewise.app.