Privacy policy

The data controller is BLANK HEXADECIMAL SL, a company registered in Spain (registered office and CIF to be added), which publishes the WhiskerMind iOS app.

For anything on this page, write to apps@blankhexadecimal.com.

An anonymous device identifier. The first time you open the app it generates a random identifier and stores it on your device. It is sent with each request so we can count how many free cards that device has used. It is not your Apple ID, not your IDFA, and it is not linked to you as a person. Deleting the app deletes it.

The photos and recordings you choose to use. When you generate a card, the photo — or the few seconds of audio, for Pet Talk — is sent to our server and forwarded to the AI provider that writes the line. We do not keep the image or the audio. What our server keeps is described in the next section.

Your pet’s name, species and gender, if you enter them, so the writing refers to your pet correctly. Stored on your device and sent with the request.

A push notification token, if you allow notifications. It identifies the device to Apple’s push service, not you.

We do not use analytics, advertising or crash-reporting SDKs. There is no tracking across other apps or websites, and we do not ask for App Tracking Transparency permission because we have nothing to track you with.

• A usage counter. One row per device: the identifier and the number of free cards used. Kept while the app is in service, because it is what enforces the free allowance.
• A short-lived result cache. Generated text is cached for 24 hours under a key derived from a one-way hash of the photo, so retrying the same photo does not cost you a card. The photo itself is not stored — a hash cannot be turned back into an image.
• Recent Pet Talk lines. The last five translations for a device are held for one hour so a conversation reads as continuous, then they expire automatically.

Nothing above contains your photos, your recordings, your name or your contact details.

Under Article 6 of the GDPR we rely on performance of a contract (Art. 6(1)(b)) to process what is needed to produce the card you asked for, and on our legitimate interest (Art. 6(1)(f)) in keeping the service affordable and free of abuse for the usage counter.

• Cloudflare — hosts our server, database, cache and files.
• Our AI provider — receives the photo or audio in order to generate the line, under an agreement that forbids using it to train models.
• Apple — distributes the app, handles any purchase and delivers push notifications. Apple never passes us your payment details.

We do not sell data, and we do not share it with advertisers. There are no advertisers.

Our providers operate globally, so a request may be processed outside the European Economic Area. Where that happens, transfers are covered by the European Commission’s Standard Contractual Clauses in our agreements with those providers.

You can ask us for access to your data, or for it to be corrected, erased, restricted or ported, and you can object to processing based on legitimate interest. Write to apps@blankhexadecimal.com.

One honest limitation: because we hold no account and no contact details, the device identifier is the only handle we have. To act on a request we will need you to send it from the app, or to give us that identifier. Deleting the app is the fastest erasure — the identifier is gone, and the counter it pointed at is orphaned.

If you think we have handled this badly you can complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority where you live.

We do not sell or share personal information as those terms are used in the CCPA, and we have not done so in the past twelve months. You have the right to know what we collect, to delete it, and not to be discriminated against for asking. The same address handles those requests.

WhiskerMind is not directed at children under 13, and we do not knowingly collect data from them. The App Store age rating carries this too.

This page sets no cookies, runs no analytics and embeds nothing from third parties. Our host records standard request logs for security and reliability.

Subscriptions are not live yet. When they are, this page will be updated to name the payment provider before any purchase is possible. Any other material change will move the date at the top, and the previous version stays available on request.