# Google Play Data safety answers

> How to answer the Google Play Data safety form when your Android app uses the Whisperr React Native or Flutter SDK.

Answers for **Play Console → App content → Data safety** when your Android app uses the Whisperr React Native or Flutter SDK. They come from [what the SDKs send](/privacy/sdk-data/). You own your app’s answers: also declare the data that the rest of your app collects.

## Data collection and security

| Question                                                              | Answer                                                                                                                              |
| --------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------- |
| Does your app collect or share any of the required user data types?   | Yes                                                                                                                                 |
| Is all of the user data collected by your app encrypted in transit?   | Yes for Whisperr. The SDKs send to `https://api.whisperr.net` over HTTPS.                                                           |
| Do you provide a way for users to request that their data is deleted? | Your app’s answer. To erase a user’s Whisperr data, call [`DELETE /v1/users/{external_id}`](/api/data-subjects/) from your backend. |

## Which data types do I declare?

Mark each type as **Collected**, not **Shared**. Whisperr processes the data for you, and Google does not count a transfer to a service provider as sharing. Whisperr stores the data, so it is not processed ephemerally.

| Data type                              | When to declare it                                                                                                                            |
| -------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
| App activity → App interactions        | Always (app opens, screens, your events)                                                                                                      |
| Device or other IDs                    | Always (the random `anonymous_id`, and the push token when you send one)                                                                      |
| Personal info → User IDs               | You call `identify()`                                                                                                                         |
| Personal info → Name                   | You send `first_name` or another name trait                                                                                                   |
| Personal info → Email address          | You send an email address in `identify()`                                                                                                     |
| Personal info → Phone number           | You send a phone number in `identify()`. Whisperr does not send SMS today, so you don’t need to send a phone number.                          |
| Financial info → Purchase history      | Your events carry purchases (plan, amount)                                                                                                    |
| App info and performance → Crash logs  | Your app uses React Native 0.7.0 or Flutter 0.8.0 or later (`app_crashed`)                                                                    |
| App info and performance → Diagnostics | Same versions (`app_error`: error type and fingerprint)                                                                                       |
| Location → Approximate location        | Decide for your app: Whisperr derives the country from the IP address of each event request and stores it with the event as `context.country` |

Event properties and traits carry whatever your code puts in them. If they hold another data type, declare it too.

## Which purposes do I select?

For each data type above except the App info and performance rows, select:

- **Analytics**
- **Developer communications** (Whisperr sends your retention messages)
- **Advertising or marketing** (retention messages can include offers)
- **Personalization**

For Crash logs and Diagnostics, select **Analytics** and **App functionality**, the purposes the Swift SDK’s manifest gives the same data on iOS.

## Is the collection required or optional?

That depends on your app. If users can turn off analytics in your app, call `optOut()` when they do, and mark the collection optional. After `optOut()` the SDK sends nothing until `optIn()`, except requests that opt this device’s push token out.

## Common questions

### Is data sent to Whisperr shared or collected in the Data safety form?

Collected. Whisperr processes the data for you as a service provider, and Google does not count a transfer to a service provider that processes data on your behalf as sharing.

### Can users delete the data that Whisperr holds about them?

Yes, through you. When a user asks, call DELETE /v1/users/{external_id} from your backend with the server key.

Source: https://docs.whisperr.net/privacy/google-play/