Privacy policy
Last updated October 17, 2026
The short version: Whirlwise has no accounts and no ads. Your wheels, results, team names and settings stay on your device, and we never see them. To find bugs and learn which features people use, the app sends anonymous usage statistics and crash reports to Google Firebase. They never include anything you type. You can turn them off at any time in Settings → Share usage & crash data. We don’t sell your information or use it for advertising.
This policy covers the Whirlwise app for iOS and Android (the “app”) and the website at whirlwise.web.app (the “website”), both provided by Muhammad Tahir (“we”, “us”). If you have a question, email m.tahiridrees27@gmail.com.
What stays on your device
Everything you create in the app is stored only on your phone or tablet:
- your wheels, their options, colors, weights and sound settings
- your spin history and stats
- names you type into Teams
- app settings, such as theme and sound
If you turn on the passcode lock, the app stores a one-way hash of your passcode in your device’s secure storage (Keychain on iOS, Keystore on Android). We never see your passcode, and it is never sent anywhere.
We have no copy of any of this. Deleting the app removes it. You can also use Forgot passcode → Erase and reset on the lock screen to wipe the app’s data.
Usage statistics and crash reports
The app uses two Google Firebase services. Both are on by default and both stop when you turn off Settings → Share usage & crash data.
Firebase Analytics tells us how the app is used, so we can improve it. It receives:
- which screens are opened, such as the wheel list, a spin or Settings (never the wheel itself)
- simple events with counts and modes only: a spin landed (and whether Elimination or Tap to stop was on), a wheel was saved (and how many options it has), a wheel was shared (by copied link or the share menu), a wheel was imported, and people were split into teams (how many people and teams)
- basic device and app information: device model, operating system and version, app version, language, and an approximate location (country or city), which Google works out from your IP address
- a random identifier that Firebase creates when the app is installed. It isn’t linked to your name, email, phone number or any account, and it changes if you reinstall the app.
Firebase Crashlytics tells us when the app crashes or hits an error, so we can fix it. A report contains the technical details of the error (where in the app’s code it happened), the device model, operating system version, app version, the device’s orientation and free memory, and a random installation identifier.
What they never receive: wheel titles, option labels, team names, spin results, your passcode, or anything else you type. Shared-wheel links aren’t sent either.
What we don’t do: the app doesn’t read your device’s advertising identifier (IDFA on iOS, advertising ID on Android), we have turned off Google’s use of this data for ad personalization, and we don’t track you across other companies’ apps or websites. We don’t sell or rent this information.
Who processes it and for how long: Google LLC processes this data for us as a service provider, under the Firebase data processing terms. It may be processed in the United States and other countries where Google operates. Analytics event data is kept for 2 months, and crash reports for 90 days. See Privacy and Security in Firebase and Google’s privacy policy.
Why (for people in the EU and UK): we rely on our legitimate interest in keeping the app working and improving it. You can object at any time by turning off Share usage & crash data. From then on, nothing more is sent.
Device features the app uses
| Feature | Why | What happens to the data |
|---|---|---|
| Camera | Scanning a QR code to import a shared wheel | The camera image is processed on your device to read the code. No photos or video are saved or sent. Only used when you choose to scan. |
| Face ID, Touch ID or fingerprint | Unlocking the app when the passcode lock is on | Handled entirely by your device’s operating system. The app only learns whether unlocking succeeded. |
| Internet | Usage statistics and crash reports (above), checking the App Store or Google Play for a newer version, and opening links you tap | The app asks the store for its latest version number. Apple or Google may receive standard request information, such as your IP address, under their own privacy policies. |
Sharing wheels
When you share a wheel, the app builds a link (and a QR code) that contains the wheel’s title, options and settings. Anyone who has that link can see the wheel, so only share it with people you’re happy to show it to.
The wheel data sits after the # in the link. Browsers never send that part to a web server, so if a shared link opens our website, the wheel is read in your browser and never reaches us.
The website
The website is a set of static pages hosted on Firebase Hosting, a Google service. It uses no cookies, no analytics and no advertising. Like any web host, Google processes basic technical information (such as your IP address and browser type) to deliver the pages and protect them from abuse. See Google’s privacy policy.
Contacting us
If you email us, we use your email address and message only to reply to you, and we delete them when they are no longer needed.
Deleting your data
Whirlwise has no accounts, so there is nothing to sign in to or close. To delete your Whirlwise data:
- Stop sending usage and crash data: in the app, open Settings → About and turn off Share usage & crash data. Nothing more is sent from then on.
- Delete everything on your device: uninstall Whirlwise, or on the lock screen tap Forgot passcode → Erase and reset. This deletes your wheels, spin history, team names, settings and passcode, and resets the random identifiers used for statistics and crash reports. We have no copy of any of this, so it can’t be recovered.
- Ask us: email m.tahiridrees27@gmail.com with the subject “Delete my Whirlwise data”. We reply within 30 days and delete any emails you have sent us.
What is deleted and what is kept:
| Data | What happens |
|---|---|
| Wheels, history, team names, settings, passcode hash | Only on your device. Deleted at once when you uninstall or erase and reset. |
| Usage statistics (Firebase Analytics) | Not linked to you. Deleted automatically after 2 months. |
| Crash reports (Firebase Crashlytics) | Not linked to you. Deleted automatically after 90 days. |
| Emails you sent us | Deleted on request, or when no longer needed to reply to you. |
Because statistics and crash reports use random identifiers that we can’t connect to a person, we can’t look up which ones came from your device. They are kept only for the periods above and then deleted automatically.
Children
Whirlwise is meant for a general audience aged 13 and over. It isn’t directed at children under 13, and we don’t knowingly collect personal information from them. If you believe a child under 13 has contacted us, email us and we’ll delete that correspondence.
Your rights
Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you may have rights to access, correct, delete or object to the use of personal information about you.
- Your wheels and settings are on your own device and under your control.
- To stop usage statistics and crash reports, turn off Settings → Share usage & crash data. Uninstalling the app also stops them and discards the random identifiers.
- The statistics and crash reports use random identifiers that we can’t connect to you, so we usually can’t find the data that came from your device. If you want to make a request anyway, email us and we’ll do what we can.
- If you have emailed us, you can ask us to delete that correspondence.
You can also complain to your local data protection authority.
Changes to this policy
A future version of Whirlwise may add optional features, such as ads or a paid “Remove ads” upgrade, that involve other third-party services. If that happens, we’ll update this policy before that version is released and describe exactly what is collected and by whom, and the app will ask for your consent where the law requires it. The date at the top of this page shows when the policy last changed.
Contact
Muhammad Tahir m.tahiridrees27@gmail.com