Last Updated: 10/15/2026
BUONAFORMA INC. ("we," "our," and/or "us") values the privacy of individuals who use our application, website (including https://trywhiskers.com), and related services (collectively, our "Services"). This privacy policy (the "Privacy Policy") explains how we collect, use, and disclose personal information from users of our Services ("you" or "your"). As used in this Privacy Policy, "personal information" means any information relating to an identified or identifiable individual. By using our Services, you agree to the collection, use, disclosure, and procedures described in this Privacy Policy. Beyond the Privacy Policy, your use of our Services is also subject to our Terms of Service (https://trywhiskers.com/terms-of-service).
Personal Information We Collect
We may collect a variety of personal information from or about you or your devices from various sources, as described below. Where applicable, we indicate whether and why you must provide us with your personal information, as well as the consequences of failing to do so. If you do not provide your personal information when requested, you may not be able to use our Services if that personal information is necessary to provide you with our Services or if we are legally required to collect it.
A. Personal Information You Provide to Us
Account Creation. You can create an account using Google Sign-In, Apple Sign-In, or email registration. If you use a third-party sign-in service, that provider may share certain information with us according to your privacy settings with that provider.
Pet Profile Creation. When you create a digital animated twin of your pet, we will receive your pet's photo, your pet's name, age, and gender. We use this information to generate and personalize your pet's digital twin.
Pet Photo Storage and Use. When you upload a pet photo, we store it in our secure cloud database to maintain your digital pet twin. We may use pet photos to train and improve our own Services. You retain ownership of your original pet photos, but you grant us a license to use, store, and process these images to provide and improve our Services. Our third-party AI service providers process your photos to deliver the features of our Services, as governed by their own terms of service and privacy policies.
User Profile Information. We collect your name, age, and gender to personalize your experience with our Services.
Pet Interactions. When you interact with your digital pet twin, we may receive audio information (including sound or voice recordings from voice chat), text from regular chat, and image data from that interaction. The Services allow you to submit this audio information, text, image data, and other materials to the Services ("Prompts"), which our AI model uses to generate conversational responses based on your Prompts ("Outputs"). If you include personal information in your Prompts, we will collect that information, and this information may be reproduced in the Outputs. Your Pet Companion is an AI character, not a person.
Voice and Biometric Data. When you use voice chat features, we collect voice recordings that may be considered biometric identifiers or biometric information under certain state laws, including Illinois' Biometric Information Privacy Act (BIPA). We ask for your consent in the app before your first voice chat, and you can decline and still use the Services without voice chat. We use voice recordings only to provide voice chat and to improve and secure the Services as described in this policy. We do not sell, lease or trade voice data or any biometric identifier. We share voice data only with the AI service providers that process it for us, as described under "AI Service Providers" below, or as required by law. Retention schedule: we delete raw voice recordings within [30] days after they are processed, and in all cases no later than three (3) years after your last interaction with the Services, or sooner when the purpose for collecting them has been satisfied or you ask us to delete them.
Communications. If you contact us directly, we may receive personal information about you. For example, when you contact us for customer support purposes, we may receive your name, email address, the contents of a message or attachments that you may send to us, and other information you choose to provide. When you communicate with us, third party vendors may receive and store these communications on our behalf.
Payment and Subscription Information. When you make a purchase, payment processing is handled by third-party payment processors. If you subscribe in the Whiskers app with Apple Pay or a card, we are the merchant, our payment processor is Stripe, and the charge appears on your statement as "WHISKERS". If you subscribe through the Apple App Store, Apple is the merchant. We use RevenueCat to help manage subscription status. These processors collect and process payment information such as your name, billing details and a payment token according to their own privacy policies. We do not directly store your complete credit card number. We keep records of your purchases and subscription (plan, price, dates, trial and renewal status, cancellations and refunds), and records that you accepted our Terms.
Marketing and Advertising Information. If you interact with our advertisements or marketing campaigns (such as through Meta/Facebook ads), we may collect information you provide, including your phone number, email address, and other contact information. This information is used to communicate with you about our Services and may be stored by third-party advertising platforms according to their privacy policies.
B. Personal Information We Collect When You Use Our Services
Location Information. When you use our Services, we may infer your general location information from your internet protocol (IP) address for security purposes, fraud prevention, and to comply with legal obligations. We do not track precise geolocation.
Device Information. We receive information about the device and software you use to access our Services, including IP address, web browser type, operating system version, phone carrier and manufacturer, application installations, device identifiers, mobile advertising identifiers, and push notification tokens.
Usage Information. To help us understand how you use our Services and to help us improve it, we automatically receive information about your interactions with our Services like the pages or other content you view, features you use, and the dates and times of your visits and activity.
Information from Cookies and Similar Technologies. We and our third-party partners may use tracking technologies, including cookies (if you access our website), mobile advertising identifiers, and similar technologies to collect information about your use of our Services. Our third-party partners, such as analytics partners, may use these technologies to collect information about your online activities over time and across different services. Cookies are small text files containing a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services. Please review your web browser's "Help" file to learn the proper way to modify your cookie settings. Please note that if you delete or choose not to accept cookies from our Services, you may not be able to utilize the features of our Services to their fullest potential.
C. Personal Information We Receive from Other Sources
Information from Apple. If you download our app through the Apple App Store or use Apple Sign-In, Apple may share certain information with us in accordance with Apple's privacy policy, including your Apple ID email (if you choose to share it) and basic account information.
How We Use the Personal Information We Collect
We use the personal information we collect:
To provide, maintain, improve, and enhance our Services;
To personalize your experiences of our Services, such as by providing tailored content and recommendations;
To understand and analyze how you use our Services and develop new products, services, features, and functionality;
To communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to comments and questions, and otherwise provide customer support;
To send you push notifications;
To facilitate transactions and payments, including to bill your subscription, send trial confirmations, trial-ending and renewal reminders, receipts and cancellation confirmations, and process refunds;
To respond to payment disputes, chargebacks and refund requests, including by providing records of your account, purchase, acceptance of our Terms, and use of the Services to our payment processors, card networks and your card issuer;
To generate de-identified or aggregated data containing only de-identified, non-personal information that we may use for any lawful purpose;
To train, develop, and improve our own artificial intelligence and machine learning algorithms, models, and Services. We may use your interactions, including Prompts and Outputs, to improve our AI's performance, accuracy, and capabilities. You understand that your conversations may contribute to the ongoing development of our AI technology;
To review conversations and content for safety, abuse prevention, and quality;
To find and prevent fraud, and respond to trust and safety issues that may arise;
For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
For other purposes for which we provide specific notice at the time the personal information is collected.
Legal Bases for Processing European Personal Information
Our Services are intended for use in the United States. If you are located in the European Economic Area ("EEA") or the United Kingdom ("UK"), we only process your personal information when we have a valid "legal basis," including as set forth below.
Consent. We may process your personal information where you have consented to certain processing of your personal information.
Contractual Necessity. We may process your personal information where required to provide you with the Services. For example, we may need to process your personal information to respond to your inquiries or requests.
Compliance with a Legal Obligation. We may process your personal information where we have a legal obligation to do so. For example, we may process your personal information to comply with tax, labor and accounting obligations.
Vital interests. We may process your personal information in order to protect your vital interests, or the vital interests of another natural person.
Legitimate Interests. We may process your personal information where we or a third party have a legitimate interest in processing your personal information. Specifically, we have a legitimate interest in using your personal information for product development and internal analytics purposes, fraud prevention, defending against payment disputes, and otherwise to improve the safety, security, and performance of the Services. We only rely on our or a third party's legitimate interests to process your personal information when these interests are not overridden by your rights and interests.
How We Disclose the Personal Information We Collect
Affiliates. We may disclose information we receive to our corporate affiliates, parents, or subsidiaries for the purposes described in this Privacy Policy.
Vendors and Service Providers. We may disclose personal information to vendors and service providers retained to support the provision of our Services, such as cloud hosting, customer support, analytics, subscription management, payment processing, and communications providers. These vendors process your information only as needed to provide services to us and in accordance with their own applicable privacy policies and terms of service.
Payment Processors, Card Networks and Issuers. If you or your bank dispute a charge, we may disclose records about your account and purchase, such as your email address, plan and charge details, the time you accepted our Terms and subscription terms, and the dates you used the Services, to our payment processors, the card networks and your card issuer so that we can respond to the dispute. We do not include the content of your chats in these responses.
AI Service Providers. We share personal information with third-party vendors that provide artificial intelligence services, including large language models, image generation, voice and speech processing, and machine learning capabilities, to power core features of our Services. Before sharing your personal information with these providers, we obtain your in-app consent. The information we share includes: photos you upload within the app; voice recordings and chats and conversations you have with your digital companions; digital companion details, including name, age, gender, and personality; memories and personal context you share within the app; and your display name and in-app profile details. Our current AI service providers include OpenAI (openai.com) and Google / Gemini (deepmind.google). These providers process your information to generate AI-powered responses and personalized digital companion content on your behalf. [CONFIRM and keep only if true: We have configured our agreements with these providers so that they do not use your data to train their own models.] These providers handle your data in accordance with their own terms of service and privacy policies.
Analytics Partners. We may use third-party analytics services to collect and process certain analytics data about how you use our Services. These services may also collect information about your use of other websites, apps, and online resources. When we engage analytics partners, we will ensure they handle your data in accordance with applicable privacy laws.
Website analytics. We use Microsoft Clarity to understand how visitors use our website. Clarity records how you interact with our pages, such as clicks, scrolling and mouse or tap movement. It uses that to create heatmaps, session replays and usage statistics, which help us improve our site and checkout. This data is collected with first- and third-party cookies and similar technologies. We set Clarity to mask what you type into form fields, such as your name and email. For more about how Microsoft collects and uses data, see the Microsoft Privacy Statement at https://privacy.microsoft.com/privacystatement.
As Required by Law and Similar Disclosures. We may access, preserve, and disclose your personal information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others' rights, property, or safety. For the avoidance of doubt, the disclosure of your personal information may occur if you post content that violates our Terms of Service, applicable laws, or threatens the safety of others.
Merger, Sale, or Other Asset Transfers. We may use, transfer, disclose, or otherwise process your personal information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company, or we sell, liquidate, or transfer all or a portion of our assets. The use of your information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.
Consent. We may also disclose your information with your permission.
Your Choices
Marketing Communications. You may opt out of receiving promotional emails, push notifications, or other marketing messages from us by following the instructions in those messages or by contacting us directly. If you opt out, we may still send you non-promotional messages, such as those about your account, billing and subscription, or our ongoing business relations.
Voice Chat. You can choose not to use voice chat. You can ask us to delete your voice recordings at any time at [email protected].
Age Verification. We rely on Apple App Store age ratings and user self-certification to enforce our age restrictions. By using our Services, you represent that you are at least 16 years of age.
Your European Privacy Rights
If you are located in the EEA or the UK, you have additional rights described below. You may request access to the personal information we maintain about you, update, and correct inaccuracies in your personal information, restrict or object to the processing of your personal information, have your personal information anonymized or deleted, as appropriate, or exercise your right to data portability to easily transfer your personal information to another company. To request a copy of your data in a portable format, please contact us at [email protected]. We will provide your data in JSON or CSV format within 30 days of your verified request. In addition, you have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place.
You may withdraw any consent you previously provided to us regarding the processing of your personal information at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.
You may exercise these rights by contacting us using the contact details at the end of this Privacy Policy. Before fulfilling your request, we may ask you to provide reasonable information to verify your identity. Please note that there are exceptions and limitations to each of these rights, and that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain personal information for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.
Your California Privacy Rights
If you are a California resident, you have specific rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA):
Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell or share about you, including the categories of sources and third parties.
Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
Right to Correct: You have the right to request correction of inaccurate personal information.
Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. We do not sell your personal information for money, but some data sharing with third parties, such as advertising and analytics partners that use cookies or mobile advertising identifiers, may be considered a "sale" or "share" under the CCPA. You can opt out by emailing [email protected] with the subject line "Do Not Sell or Share My Personal Information". [CONFIRM: We honor opt-out preference signals, such as Global Privacy Control, received through your browser.] We do not knowingly sell or share the personal information of anyone under 16.
Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information. Voice recordings and certain interaction data may be considered sensitive personal information under California law. We use them only to provide and secure the Services and for the other purposes described in this policy.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise these rights, please contact us at [email protected]. We will verify your identity before processing your request, typically by matching the email address on your account, and we will respond within 45 days (we may extend once by another 45 days with notice). You may use an authorized agent to make a request on your behalf; we may ask for proof of the agent's authority.
Other State Privacy Rights
If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, or other states with comprehensive privacy laws, you may have additional rights including the right to confirm whether we process your personal information, access your personal information, correct inaccuracies, delete your personal information, obtain a copy of your personal information, and opt out of targeted advertising, the sale of personal information, and certain profiling. To exercise these rights, please contact us at [email protected]. If we decline your request, you may appeal by replying to our response or emailing [email protected] with the subject line "Privacy Appeal" within 60 days, and we will respond to your appeal within 60 days. If you are not satisfied with the result, you may contact your state attorney general.
Third Parties
Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.
Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include: the length of time we have an ongoing relationship with you and provide Services to you; whether there is a legal obligation to which we are subject (such as certain laws that require us to keep records for a certain period of time); and whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, payment disputes, or regulatory investigations). Typical periods:
CategoryHow long we keep itAccount, pet profile, pet photos, chat history and memoriesWhile your account is active, and deleted within [30] days after you delete your account or ask us to (backups within [90] days)Voice recordings (biometric data)Within [30] days after processing, and no later than three years after your last interaction (see "Voice and Biometric Data")Purchase, subscription, refund and terms-acceptance records[7] years, for tax, accounting, and to respond to payment disputesSupport messages[3] years after the conversation closesDevice, usage and analytics data[24] months, or in de-identified or aggregated form
When we no longer need your personal information, we will securely delete or anonymize it. If deletion is not possible (for example, because personal information has been stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible.
Security
We take the security of your personal information seriously and implement reasonable administrative, technical, and physical safeguards designed to protect the personal information we maintain. These measures include: encryption of data in transit using industry-standard protocols; secure storage systems with access controls; regular security assessments and updates to our practices; and employee training on data protection and privacy.
However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us at [email protected].
Children's Privacy
We do not knowingly collect, maintain, or use personal information from children under 16 years of age, and no part of our Services is directed to children under 16. If you learn that a child under 16 has provided us with personal information in violation of this Privacy Policy, please alert us at [email protected] and we will take steps to delete such information as quickly as possible. If we learn that we have collected personal information from a child under 16, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 16, please contact us at [email protected]. Users aged 16 and 17 may subscribe only with the permission of a parent or guardian, as stated in our Terms of Service.
International Visitors
Our Services are hosted in the United States ("U.S."). If you choose to use our Services from the EEA, the UK or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal information outside of those regions to the U.S. for storage and processing. We may transfer personal information from the EEA or the UK to the U.S. and other third countries based on European Commission-approved or UK Government-approved Standard Contractual Clauses, or otherwise in accordance with applicable data protection laws. Also, we may transfer your personal information from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating our Services. By providing any information, including personal information, on or through our Services, you consent to such transfer, storage, and processing. For more information about the tools that we use to transfer personal information, or to obtain a copy of the contractual safeguards we use for such transfers (if applicable), you can contact us as described below.
Delete Your Information
You can delete your account and information in the app at [Settings > Account > Delete Account]. You can also email us at [email protected] from the email address on your account (or, if you cannot, include your name as entered in the app, your pet's name, and the date of your last app session so we can verify it is you). We will process your deletion request in accordance with applicable law and may retain certain information as permitted or required by law for legitimate business purposes, such as fraud prevention, legal compliance, tax and accounting records, responding to payment disputes, or to enforce our Terms of Service.
Deleting your account or the app does not cancel a paid subscription or free trial. To avoid further charges, cancel first (see Section 4.5 of our Terms of Service: in the app, Settings > Whiskers Membership > Manage Membership > Cancel Membership, or by emailing [email protected]). Please note that after deletion:
Your digital pet twin and associated data will be permanently removed;
Your conversation history and voice recordings will be deleted;
Some information may be retained in backup systems for a limited time before permanent deletion, and purchase and billing records will be kept as described under "Retention"; and
We may retain anonymized or aggregated data that cannot identify you.
Changes to This Privacy Policy
We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or disclose personal information previously collected from you through our Services, we will notify you through our Services, by email, or other communication.
Contact Information
BUONAFORMA INC. is responsible and the data controller for processing your personal information.
If you have any questions, comments, or concerns about our processing activities, please email us at [email protected] or write to us at:
BUONAFORMA INC.
5830 E 2nd St Ste 8
Casper, WY 82609
