WhalePhone Privacy Policy
Version 1.0 · updated 2026-10-10 · effective 2026-10-10
See also WhalePhone User Agreement
WhalePhone ("we") is an assistant that works your phone for you. It works by seeing your screen, so this page says what it reads, where that goes and how long it is kept. Please read it before you start. Tapping "Agree and continue" on first run means you have read and agree to this policy and the User Agreement.
1. Who we are
The personal-information handler under this policy is Whaletech AI. Contact details are in section 9.
2. What we collect and why
We collect information only for the functions below, each with its purpose.
1. Account. When you sign in, the sign-in service gives us your account identifier (and the nickname and avatar you chose to share there). Purpose: to identify your account and attach your task records to it.
2. Screen content, while a task runs. Whale reads the screen it is working on (text and layout) through the system accessibility service, takes a screenshot of it, and sends both to WhalePhone's cloud, where a model decides the next step. Purpose: to carry out the task you gave. This is the app's core function; without the accessibility service Whale cannot work.
3. Task records. When a task ends, a record of it (the steps, timings, the model's decisions and some screenshots) is uploaded to WhalePhone's private storage. Purpose: to diagnose problems and improve WhalePhone. Only the WhalePhone team can see it.
4. Notification content. Whale sees notifications only after you allow "read notifications" in system settings, and acts on them only when you have set a rule (for example "for the next hour, reply to anyone who messages me on WeChat"), and only for the app that rule names. A "watch for … and tell me" rule sends that app's notification text to the cloud for one judgement of whether it is what you are waiting for. Purpose: to carry out the rule you set.
5. Voice. When you hold to talk, the recording goes to a speech provider to become text; when the companion voice is on, what Whale says is synthesised in the cloud. Purpose: voice input and spoken updates. Both can be switched off in Settings.
6. Location. Navigation tasks use your approximate location after you allow it. Purpose: the starting point of a route.
7. Device and diagnostics. Device model, system version, app version and technical logs of a task run. Purpose: diagnosing problems and shipping updates.
We do not collect your contacts, SMS, photos or call log.
3. Permissions
| Permission | Purpose | When it is asked |
|---|---|---|
| Accessibility service | Read and operate the screen being worked on (core function) | During first setup, switched on by you in system settings |
| Read notifications | Let the rules you set see the relevant app's messages | When you set your first rule |
| Microphone | Hold to talk | The first time you hold to talk |
| Location | The starting point of a navigation task | The first time you ask Whale to navigate |
| Overlay | Show progress and questions while a task runs | During first setup |
| Post notifications | Tell you when a task ends or a rule fires | On first run |
| Network | Talk to WhalePhone's cloud | At install (no prompt) |
Refusing any permission affects only the function that needs it.
4. Third-party SDKs and services
WhalePhone includes the third-party SDKs below. Each handles information under its own rules; we use each one only for the purpose given in the table.
| SDK | Provider | Purpose | Personal information it collects | Its rules |
|---|---|---|---|---|
| WeChat Open SDK | Shenzhen Tencent Computer Systems Co., Ltd. | Sign in with WeChat | Whether WeChat is installed on the device; your WeChat avatar and nickname after you authorise sign-in | https://support.weixin.qq.com/cgi-bin/mmsupportacctnodeweb-bin/pages/RYiYJkLOrQwu0nb8 |
| Google ML Kit text recognition | Google LLC | Recognising the text on the screen, on the phone. Recognition runs on the device; screen images are not sent to Google | Device information (manufacturer, model, system version), app information (package name, version), an installation identifier not meant to identify you or your device, performance and usage metrics of the feature, error codes; used for diagnostics and usage statistics | https://developers.google.com/ml-kit/android-data-disclosure |
Third parties we share information with. To provide the functions below, WhalePhone's cloud sends information to these providers over encrypted connections. Each handles it under its own rules.
| Provider | What it does for WhalePhone | Information it receives | Its rules |
|---|---|---|---|
| DeepSeek ("杭州深度求索人工智能基础技术研究有限公司") | The model that decides a task's next step, and judges whether a notification matches a rule you set | The task you give, the conversation, and the screen while a task runs (text, layout and screenshots); for a "watch for … and tell me" rule, that app's notification text | https://cdn.deepseek.com/policies/zh-CN/deepseek-privacy-policy.html |
| Volcano Engine, Doubao speech ("北京火山引擎科技有限公司") | Speech recognition and speech synthesis | The recording while you hold to talk; when the companion voice is on, the text of what Whale says | — |
| Amap Open Platform ("北京高德图强科技有限公司") | Turning a navigation destination into a place on the map | The destination's name or address; never your location | https://lbs.amap.com/pages/privacy/ |
5. Storage
Task records and screenshots are stored in a private space within mainland China, accessible to the WhalePhone team only to diagnose problems. They are kept for as long as the purposes above require and as laws and regulations prescribe; when you cancel your account we delete the task records attached to it. Conversations, rules and settings on the phone stay on the phone; uninstalling the app deletes all of them.
6. Security
All transfers use TLS; cloud storage is a private space that needs credentials; sign-in credentials are stored encrypted on your phone. No internet transfer is perfectly secure; if a security incident occurs we will inform you as the law requires.
7. Your rights
At any time you can:
- Access and correct: see your account and every switch in Settings.
- Withdraw consent: turn any permission off in system settings; turn voice and notification reading off in Settings.
- Delete: uninstall the app to delete everything on the phone; contact us to delete task records in the cloud.
- Cancel your account: contact us; we handle it within 15 working days.
- Complain or suggest: through the channel in section 9. We reply within 15 working days.
8. Minors
WhalePhone is not for children under 14. If we learn we have collected a child's information without a guardian's consent, we delete it promptly.
9. Contact us
Email hello@whaletech.ai (also under Settings → About → Contact us in the app). We reply within 15 working days.
10. Changes
When this policy changes we tell you prominently in the app and ask you to read it again; a material change also carries a new version number and effective date.