About Wispers Access

With Wispers Access, your access and data are tied to the shares you have joined using the app. You can delete a share at any time, which will remove the data about your device stored on our servers (if any) and on the share host (the server run by the person who generated the invitation code). Exceptions may apply if we have to retain data by law.

To remove your data, open the share's detail view in Wispers Access and choose "Remove from this device". This revokes your device's access to that share and deletes your device's registration from our servers and, if it is online at the time, from the host's server. Residual copies are purged within 14 days, and connection logs are deleted per the retention periods in the Privacy Policy. Removing a share is permanent and cannot be undone. Joining again requires a new invitation code.

If you no longer have access to the device, or if the host's server is offline, ask the person who shared the app with you to remove your access. This cuts off the device immediately, and any registration on our servers is then deleted automatically after 30 days of inactivity. We do not link your device's registration to a name or email address, so we cannot look up or delete your data based on a support request alone. The person who invited you may have labelled your invite with your name or email; that label is theirs, not ours. Deletion only works through the app or the person who shared with you. For anything else, you can reach us at support@wispers.dev.

Effective date: 2026-10-13

1. Summary (not a substitute for the full terms)
Wispers Access is in open beta. The apps and waserver are open source (MIT). If someone shared an app with you through Wispers Access, that person, not Wispers, is responsible for the app and for your access to it. If you share apps, you are responsible to the people you invite, and the transport you choose comes with its own terms for the hosted services behind it: Wispers Connect's if you share through Wispers Connect, n0's if you share through iroh. There is no service-level agreement.

2. Agreement
These Terms ("Terms") govern your use of the Wispers Access apps for phones and computers (the "Apps") as distributed by us, and of the Wispers-operated services the Apps use. By installing or using the Apps you agree to these Terms. "We", "us" and "Wispers" mean Scheidegger Technology GmbH. "Guest" means someone who opens apps shared with them; "host" means someone who runs waserver to share apps. The same person can be both.

3. The software
The Apps and waserver are licensed under the MIT License. Your use of that code, including modifying and redistributing it, is governed by that license, not these Terms. These Terms cover the Apps as we distribute them through the app stores and our website, and the services described below.

4. Guests
You do not need an account. When you add an invite, the App registers your device with the host's share, and the host can see and revoke that registration at any time. The host decides which apps are shared and who is invited. The shared apps, their content and their behaviour are the host's, not ours: we do not operate them, cannot see their content, and are not responsible for them. Questions about a shared app go to the person who invited you. You may remove a share from your device at any time; how that works and what it deletes is described under Removing Your Data.

5. Hosts
You run waserver on your own machine and choose what to share and with whom. You, not Wispers, are responsible to your guests: for the apps you share and their content, for having the right to share them, for any notices or consents your guests' data requires, and for complying with applicable law. You will not represent that a shared app is provided or endorsed by Wispers. Which hosted services apply depends on the transport you configure:

• Wispers Connect. You create a Wispers Connect organization and an API key, and the Wispers Connect Developer Terms govern your use of the Hub, the relay and your organization. Your guests' devices are registered under your organization; for their data you are the controller and we are your processor, as those terms describe.
• iroh. Wispers operates no service for you. Discovery and relaying use n0's public iroh relays under n0's conditions for those relays, to which we are not a party. They include no uptime guarantee, rate limits and a recommendation against sensitive data. You may also run your own relays.

6. Acceptable use
You will not use the Apps or the services to break the law; to access devices, networks or systems without authorization; to interfere with the integrity or performance of the services or of other users; or to upload malware. Hosts will not share apps whose content is unlawful. Where a share runs through Wispers Connect, we may block a device or the share for breaches; the Developer Terms say what else can happen to the host's organization.

7. Privacy
Our Privacy Policy describes how we process personal data for which we are the controller, such as device registrations we hold. For shares that run through Wispers Connect, the host is the controller of their guests' device data under the Developer Terms. The content of shared apps is end-to-end encrypted between guest and host and is not readable by us.

8. Beta; availability; changes
The Apps and the services are provided on a beta basis without uptime or support commitments and without a service-level agreement. A shared app is only reachable while the host's machine is running waserver and online. We may add, change or remove features, require an App update to keep connecting, or discontinue the Apps or the services, with reasonable notice for material changes.

9. Changes to the Terms
We may update these Terms. If changes are material, we will give notice on this page and, where feasible, in the App. Continued use means you accept the changes.

10. Disclaimers
The Apps and the services are provided "as is" and "as available." To the maximum extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non‑infringement.

11. Limitation of liability
To the maximum extent permitted by law, we and our suppliers will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, data, or goodwill. Our aggregate liability for all claims relating to the Apps or the services will not exceed the amounts you paid us in the 3 months before the event. Consumer‑specific mandatory rights remain unaffected.

12. Indemnity
Hosts will indemnify us against third‑party claims arising from the apps they share, their guests, their content, or their use of the services in breach of these Terms or applicable law.

13. Governing law & venue
These Terms are governed by Swiss law (without regard to conflicts rules). Exclusive venue is the courts of Zürich, Switzerland, except that consumers may bring claims in their local courts where mandatory law provides.

14. Contact

support@wispers.dev

Scheidegger Technology GmbH
Im Büelhältli 13
8704 Herrliberg
Switzerland

Last updated: 2026-07-22

Who we are — Wispers is provided by Scheidegger Technology GmbH, Im Büelhältli 13, 8704 Herrliberg, Switzerland. We act as the data controller for the personal data described here. Contact: privacy@wispers.dev.

Scope — This Policy covers our websites, apps, and the Wispers services, including Wispers Files, Wispers Connect, and Wispers Access (collectively, the "Services"). It applies to all of them. If we link to a separate policy for a specific feature, that policy applies to it.

Data you transfer — Wispers connects your own devices so they can exchange data with each other over an end-to-end encrypted connection. We do not store the content you transfer — whether files, streams, or other data — and we cannot read it. Our Hub helps your devices find and connect to each other but never receives that content; where devices need a relay to reach each other across networks, any data passing through it stays end-to-end encrypted, unreadable to us, and is never stored. Your devices authenticate each other using device pairing and a cryptographic roster that they sign themselves and verify independently of the Hub, so a compromised Hub cannot impersonate your devices or add a rogue device to your account. Your data stays yours, end to end.

Data we collect

• Account data: email, name, preferences, communications with us.
• Device data: device names and configurations needed to register your devices and connect them to each other.
• Connection metadata: records of connections between your devices — device identifiers, timestamps, and transport type — used to operate, route, and secure the Services. We do not log the content exchanged.
• Product & usage data: actions in the Services, features used, logs, crash reports, performance metrics.
• Device/technical data: IP address, device identifiers, browser/OS, timezone, language, referrer.
• Support & feedback: issue reports, screenshots or files you choose to share with us.
• Payment data (if/when applicable): handled by our payment processor.
• We do not collect or store the content you transfer between your devices.

Sources — Directly from you; automatically from your devices; from service providers (e.g. email).

How we use data (purposes & legal bases)

• Provide and secure the Services (create accounts, authenticate, run features, prevent abuse, debug).
  • Legal bases: contract; legitimate interests in running secure Services.
• Communicate with you (operational emails, security/transactional notices).
  • Legal bases: contract; legitimate interests.
• Improve the Services (analytics, research, feature development, quality).
  • Legal bases: legitimate interests; consent for non‑essential cookies/analytics.
• Bot & spam protection (gate support messages on captchas).
  • Legal bases: legitimate interests.
• Legal/compliance (comply with laws, enforce terms, defend claims).
  • Legal bases: legal obligation; legitimate interests.

Cookies & tracking — We use only essential cookies for our sites to work.

Sharing your data

• Service providers (processors): hosting, analytics, email delivery, customer support, logging. They act under contract and only on our instructions.
• Business operations: professional advisors, auditors, insurers.
• Legal / safety: to comply with law, enforce terms, or protect rights, property, or safety.
• Changes in control: in a merger, sale, or reorganization, data may transfer under appropriate safeguards.

We do not sell your personal data.

International transfers — We are based in Switzerland and may process/store data in Switzerland, the EEA, the UK, and other countries. Where transfers go to countries without an adequacy decision, we use appropriate safeguards (e.g., Standard Contractual Clauses) and implement supplementary measures where relevant. You can request a copy of relevant safeguards.

Retention — We keep personal data only as long as needed for the purposes above, then delete or anonymize it. Typical periods:

• Account data: kept while your account is active; deleted or anonymized after closure (contact privacy@wispers.dev). (The content you transfer isn't stored, so there's nothing to retain there.)
• Connection, account & product logs: up to 12 months for analytics and security logs (aggregated thereafter).
• Support requests: 12 months, unless required longer for legal or technical reasons.

Your rights — Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, data portability, and to withdraw consent at any time. You can also lodge a complaint with the FDPIC (Switzerland) or your local data protection authority (EEA/UK). Contact us at privacy@wispers.dev to exercise your rights. We may need to verify your identity.

Children — The Services are not directed to children under 16 (or as defined by local law). We do not knowingly collect such data. If you believe we have, contact us to delete it.

Automated decisions — We do not make decisions with legal or similarly significant effects based solely on automated processing. If this changes, we will explain the logic involved and your rights.

Security — We use administrative, technical, and organizational measures appropriate to the risk (e.g., encryption in transit/at rest, access controls, logging, vulnerability management). No method is 100% secure.

Data breaches — If we become aware of a personal‑data breach that is likely to result in a high risk to you, we will notify the competent authority and the affected individuals as required by law.

Contacts

privacy@wispers.dev

Scheidegger Technology GmbH
Im Büelhältli 13
8704 Herrliberg
Switzerland

Changes to this Policy — We may update this Policy from time to time. We will post the new version here and update the "Last updated" date. Material changes will be notified via email or in‑app notice.

Last updated: 2026-06-22

We use only essential cookies for operating the Wispers services, such as those necessary to allow users to log into their account. Accordingly, we show no cookie consent banner.

Last updated: 2026-06-22

We appreciate security research. If you believe you've found a vulnerability in wispers.dev (including *.wispers.dev), please email security@wispers.dev (PGP) with steps to reproduce and affected URLs or apps; test only with your own accounts, avoid accessing others' data, and do not perform denial-of-service, spam, social engineering, or physical testing. We'll acknowledge within 72 hours, share a status update within 7 business days, and request coordinated disclosure while we remediate. Safe harbor: If you make a good-faith effort to follow this policy, we won't pursue legal action or report you to authorities for your research. Third-party services we don't control are out of scope; please don't run automated scans that degrade service or report non-impactful best-practice findings.

Wispers is operated by Scheidegger Technology GmbH.

CH-ID: CH-020-4088779-4
UID: CHE-425.697.643-4

Postal address
Scheidegger Technology GmbH
Im Büelhältli 13
8704 Herrliberg
Switzerland