Wispfeed Privacy Policy
Last updated: July 25, 2026
1. Data controller
Gabriel Ortega Molina, hereinafter “the developer” or “we,” domiciled in Spain, is the controller responsible for the data described in this Privacy Policy in relation to the Wispfeed application (hereinafter, “the app”).
Contact: info@wispfeed.app
2. General principle: Wispfeed is local-first
Wispfeed is designed so that your feeds, articles, blocks, and reading status are stored on your own device, not on our servers. You don’t need to create a visible account or provide personal data (name, email, password) to use the app at its free tier. That said, some specific features—described below—do require an internet connection and therefore involve some data processing.
3. What data we process and why
3.1 Anonymous installation identifier
The first time you launch the app, an anonymous session is automatically created (via Supabase Auth) tied to a unique identifier per installation, without you entering any personal data. This identifier is used to:
- Apply fair-use limits (for example, the number of AI-assisted feed searches per day).
- Associate, if in the future you activate a paid feature that requires it, your subscription data with your installation.
This identifier is not linked to your name, email, or any other information that directly identifies you, unless you decide in the future to link your account with Google or Apple to activate a Pro cross-device sync feature (not available in the current version of the app).
3.2 Feed search
When you search for a feed by name, the search term is sent to our server (Supabase) to query it against a shared catalog of RSS feeds. If there are no results, you can voluntarily opt into an AI-assisted “deep search”: in that case, your search term is also sent to an external language model provider (via OpenRouter) to generate suggestions, which are automatically verified before being shown to you. This service has a daily usage limit per installation.
3.3 Feed synchronization (RSS)
When the app downloads the content of the RSS feeds you’ve added, it connects directly to the servers of those feeds (chosen by you), which means your IP address is visible to those third parties, just as it would be if you visited those websites from a browser. We do not control or take responsibility for the data processing carried out by those third parties.
3.4 Images and fonts
The app downloads the images accompanying articles directly from the source RSS feeds, and the interface fonts from Google Fonts’ servers. Both downloads involve a standard network connection (with your IP address visible to those servers), without transmitting any additional personal data.
3.5 Ads (Android and iOS only)
On the Android and iOS versions, the free app shows ads through Google AdMob. To do this:
- Advertising identifiers on your device (such as IDFA on iOS or the Google advertising ID on Android) are processed in order to show ads, which may be personalized if you give your consent.
- If you’re located in the European Economic Area, the United Kingdom, or Switzerland, the first time you open the app we’ll ask for your consent to personalized ads, using Google’s standard form (User Messaging Platform). You can change your choice at any time from the app’s Settings.
- On iOS, if required by the operating system, you’ll also be asked for your permission for cross-app tracking (App Tracking Transparency) before personalized ads are shown.
- Google acts here as a processor (and, for certain purposes, an independent controller). You can review how Google processes your data in its own privacy policy.
The macOS, Windows, and Web versions of the app show no ads and carry out no advertising-related data processing.
3.6 In-app purchases
If you choose to buy the “Remove ads” option (an auto-renewing subscription), the purchase is processed through the Apple App Store or Google Play, depending on your device, and we manage your purchase status through RevenueCat, an external provider acting as a data processor. We never have access to your payment data (card number, etc.)—that’s handled directly by Apple/Google.
3.7 Crash reports (planned, not yet active)
In a future version, the app may automatically send technical reports when a crash occurs, to help us fix it. This section will be updated with the corresponding detail before that feature is activated.
4. Legal basis for processing
We process your data on the basis of:
- Your consent, for personalized ads and for AI-assisted deep feed search (both are optional).
- Legitimate interest, for the app’s basic operation (anonymous identifier, fair-use limits, synchronization of the feeds you choose).
- Performance of a contract, for managing your purchase if you activate “Remove ads.”
5. Who we share data with
Only with the providers necessary to deliver the features described above: Supabase (server infrastructure, hosted in the European Union), OpenRouter (AI-assisted feed search, only if you use it), Google AdMob (ads, Android/iOS only), and RevenueCat (purchase management). None of these providers receives your name, email, or any data that directly identifies you through our app, other than the anonymous and advertising identifiers described above.
Some of these providers are based outside the European Union. In those cases, they have the corresponding legal safeguards for international data transfers (such as the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses).
6. How long we keep your data
Data stored locally on your device (feeds, articles, blocks, reading status) stays there until you uninstall the app or delete it yourself. The anonymous installation identifier and fair-use logs (AI search limits) are kept while the installation is active. If you activate a purchase, RevenueCat retains the history needed to manage your subscription while it’s active and for the period required by applicable tax/commercial regulations.
7. Your rights
As a user in the European Union, you have the right to access, rectify, delete, object to, and request portability of your data, as well as to withdraw your consent (for personalized ads or AI search) at any time without affecting the lawfulness of prior processing. You can exercise these rights by writing to info@wispfeed.app. You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Minors
Wispfeed is not specifically directed at children under 14, and we do not knowingly request data from minors of that age.
9. Changes to this policy
We may update this Privacy Policy when we change the app in ways that affect the data we process. The “Last updated” date at the top of the document reflects the current version.