Privacy Policy

This Privacy Policy explains how Evoy Ltd (“we”, “us”) handles your information when you use the Whipp app on iPhone, iPad or Android, and this website. The short version: your meal plans, preferences and recipes stay on your device, unless you share them with your household (section 4). To sell and manage subscriptions, Whipp uses Superwall, which receives limited technical and purchase information, and it uses AppsFlyer to measure our own ads (section 3). There are no ads in Whipp, and we never sell your data.

1. What stays on your device

Whipp keeps the things you tell it on your phone, not on our servers. That includes:

• Your preferences: your chosen supermarket, weekly budget, household size, dietary requirements, dislikes and kitchen equipment.
• What you create: the weekly plans you generate and the recipes you save.

This data lives locally so Whipp can plan your week and build your shopping list. We don’t upload it, unless you share your plan with your household (section 4).

2. What leaves your device, and why

Whipp uses Superwall (Superwall, Inc.) to show its subscription screen, start trials and purchases, and check whether your subscription is active. To do that, the Superwall software inside the app sends the following to Superwall’s servers, where it’s processed on our behalf:

• Purchase history: which plan you chose, whether you’re in a free trial, and your subscription and renewal status, as confirmed by the App Store or Google Play.
• App interactions: events such as the app opening, the subscription screen being shown or closed, and a trial or purchase starting.
• Diagnostics and device information: error and performance logs from the Superwall software, plus your device model, operating system version, language, time zone and app version.
• Device and other identifiers: a random ID created for your install and, on iPhone and iPad, the App Store’s app transaction ID for the Apple Account that downloaded Whipp. This lets your subscription follow you after a reinstall or onto your other devices.
• Approximate location: Superwall’s servers see your IP address when the app connects and use it to estimate your country or region, for example to show prices in the right currency. Whipp never asks for or uses your precise location.

We use this information to run your subscription (unlocking the app, restoring purchases and applying a free trial correctly) and to understand how the subscription screen performs so we can improve it. It isn’t tied to your name or email address, because Whipp never asks for them. Superwall handles it under its own privacy policy. Superwall is based in the United States, so this information may be processed there; when it’s transferred from the UK or EU, it’s protected by appropriate safeguards such as standard contractual clauses.

Crash and error reports: if Whipp crashes or something goes wrong, the app sends a report to Firebase Crashlytics (Google): what happened, the last few screens you used, your device model, operating system and app version, and your country’s version of the app. Reports aren’t linked to you, we use them only to find and fix problems, and Google keeps them for 90 days. Google may process them in the United States.

3. Measuring our ads

We advertise Whipp on platforms such as Meta (Facebook and Instagram) and TikTok. To see which ads lead to installs, free trials and subscriptions, the iPhone and iPad app uses AppsFlyer, a measurement service. It sends AppsFlyer the install and app opens, when a free trial or subscription starts (the plan, not your payment details), basic device information such as model, operating system, language and IP address, an ID for your install and, if you allow it, your device’s advertising ID. Superwall may also report renewals and refunds to AppsFlyer. AppsFlyer matches this to the ad you saw and tells the ad platform that showed it, so we can see which ads work.

That’s all it’s used for. AppsFlyer never gets your meal plans, preferences, budget or anything else you tell Whipp, and as Whipp has no account, there’s no name or email to share. AppsFlyer handles this data under its privacy policy.

• Your choice: Whipp asks once, with Apple’s standard prompt, before using your advertising ID. You can change your answer any time in Settings → Privacy & Security → Tracking.
• UK and EU: unless you allow it, nothing about you is shared with ad platforms.
• Elsewhere: if you don’t allow it, ad platforms may still receive install and trial events, without your advertising ID.

4. Sharing with your household

If you create or join a household, the people in it see the same plan and shopping list. To keep everyone’s devices in step, a copy of what you share is stored on our server, run on Google Firebase in the European Union. None of this happens unless you use household sharing.

• What you share: the household’s weekly plans, shopping-list ticks, favourite recipes and preferences (store and zip code, budget, number of people, diets, dislikes and kitchen).
• The household itself: its 6-character code and, for each device, an anonymous ID, its type (such as “iPhone” or “Pixel 8”), when it joined and, on iPhone and iPad, a coded version of the App Store ID that lets the same Apple Account’s other devices join by themselves.
• The subscription: proof of the subscriber’s App Store or Google Play purchase, which our server checks with Apple or Google so everyone in the household gets access.

There are no names, emails or passwords: you join with the code alone.

A household’s shared plan and list are kept while the subscription that pays for it is active. They are deleted straight away when the subscriber stops sharing, and automatically 30 days after the subscription ends. A device that leaves or is removed is taken out of the household at once. Delete my data does the same first (it leaves the household, or stops sharing for the subscriber), then erases everything on your phone.

5. Payments, Apple and Google

Purchases are handled by Apple through the App Store on iPhone and iPad, and by Google through Google Play on Android. We never see or store your payment-card details. Apple or Google processes your payment under its own terms and privacy policy (Apple, Google). We and Superwall only learn that a purchase, trial or renewal went through, so the app can unlock the right features. When Whipp asks whether you’d like to rate it, that prompt is shown by Apple or Google, and we don’t see who responds.

Refund requests on the App Store. If you ask Apple for a refund of a Whipp purchase, Apple asks us for information about that purchase to help it decide. By using Whipp, you agree that we may tell Apple whether your purchase was delivered and works, whether you had a free trial before paying, and whether we think the refund should be granted. We don’t send your name, email, meal plans or anything about how you use the app. If you use whipp.app/refund, we check the Order ID you enter with Apple and keep it with that purchase’s record. You can withdraw your agreement at any time by emailing support@whipp.app, and we’ll stop sending Apple anything about your purchases.

6. Grocery estimates & online shopping

To estimate the cost of a week, Whipp uses pricing information built into the app to give you a helpful guide — it doesn’t look anything up about you. If you choose to shop online, Whipp hands you off to your supermarket’s own website or app; from that point the retailer’s own terms and privacy policy apply. We don’t access your store loyalty account or payment details.

7. If you contact us

If you email us, including from “Help shape Whipp” in the app, we receive your email address and whatever you write. We use them only to reply to you and to improve Whipp, and we keep the conversation for as long as we need it, then delete it.

8. What we don’t do

Whipp has no account or login. It doesn’t show ads, and it uses your device’s advertising ID only as described in section 3. We don’t collect your name, precise location, contacts, photos or browsing activity. We don’t sell your personal information, and apart from the ad measurement in section 3, we don’t share it for advertising.

9. Legal basis

If you’re in the UK or EU, we process the information in section 2 because it’s needed to provide the subscription you ask for (performance of a contract), and for our legitimate interests in keeping Whipp working and improving it. Household sharing (section 4) runs because you ask for it (performance of a contract). For the ad measurement in section 3, we rely on your consent where the law requires it (in the UK and EU, your answer to Apple’s tracking prompt) and otherwise on our legitimate interest in measuring our advertising. We handle emails you send us on the basis of our legitimate interest in replying to you. When you ask Apple for a refund, we answer Apple’s questions about your purchase (section 5) with your agreement, which you can withdraw at any time.

10. How long we keep it

Information on your device stays until you delete it in the app or delete the app. Household data is kept as described in section 4. Superwall keeps subscription records for as long as they’re needed to provide your subscription and support it, in line with its privacy policy, and we can ask Superwall to delete the records for your install at any time. AppsFlyer keeps measurement data in line with its own privacy policy. Our record of an App Store refund request (the purchase’s transaction number, our answer and Apple’s decision) is deleted 12 months after the request.

11. Your rights and choices

You can change or delete your preferences and saved plans in the app at any time, and deleting Whipp removes its on-device data completely. To access or delete the information Superwall holds for your install, email privacy@whipp.app with the Support ID shown on the Profile screen in the app, so we can find the right records.

If you’re in the UK or EU, data-protection law (UK GDPR / GDPR) gives you the right to access, correct, delete, restrict, object to or port your personal data, and to withdraw any consent. If you live in California or another US state with a privacy law, you have the right to know what we collect, to access, delete or correct it, and not to be treated differently for exercising those rights. If your state’s law treats the ad measurement in section 3 as “sharing” personal information, you can opt out by turning off tracking as described there, or by emailing us. Email privacy@whipp.app and we’ll respond within one month. You also have the right to complain to your data-protection regulator — in the UK that’s the Information Commissioner’s Office (ICO) at ico.org.uk.

12. Children

Whipp is made for adults running a household, and it isn’t directed at children. You need to be at least 16 to use Whipp, and we don’t knowingly collect personal data from anyone under that age.

13. Security

Information sent to Superwall or our household server travels over encrypted connections. On your device, your data is protected by your device’s own security — your passcode, fingerprint or face unlock, and the way iOS and Android keep each app’s data separate. We’d recommend keeping your device locked and its software up to date. No method of storage or transmission is completely secure, but keeping your plans on your device avoids the risks of sending them elsewhere.

14. Changes to this policy

If we change what Whipp collects or how we use it, we’ll update this policy and the “last updated” date above before that change takes effect.

15. Contact

Evoy Ltd, registered in England & Wales (company no. 15522503), is the data controller for Whipp. Our registered office is 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Questions about your privacy? Email us at privacy@whipp.app and we’ll be glad to help.