Google Play Data safety answers
Last updated
Answers for Play Console → App content → Data safety when your Android app uses the Whisperr React Native or Flutter SDK. They come from what the SDKs send. You own your app’s answers: also declare the data that the rest of your app collects.
Data collection and security
Section titled “Data collection and security”| Question | Answer |
|---|---|
| Does your app collect or share any of the required user data types? | Yes |
| Is all of the user data collected by your app encrypted in transit? | Yes for Whisperr. The SDKs send to https://api.whisperr.net over HTTPS. |
| Do you provide a way for users to request that their data is deleted? | Your app’s answer. To erase a user’s Whisperr data, call DELETE /v1/users/{external_id} from your backend. |
Which data types do I declare?
Section titled “Which data types do I declare?”Mark each type as Collected, not Shared. Whisperr processes the data for you, and Google does not count a transfer to a service provider as sharing. Whisperr stores the data, so it is not processed ephemerally.
| Data type | When to declare it |
|---|---|
| App activity → App interactions | Always (app opens, screens, your events) |
| Device or other IDs | Always (the random anonymous_id, and the push token when you send one) |
| Personal info → User IDs | You call identify() |
| Personal info → Name | You send first_name or another name trait |
| Personal info → Email address | You send an email address in identify() |
| Personal info → Phone number | You send a phone number in identify(). Whisperr does not send SMS today, so you don’t need to send a phone number. |
| Financial info → Purchase history | Your events carry purchases (plan, amount) |
| App info and performance → Crash logs | Your app uses React Native 0.7.0 or Flutter 0.8.0 or later (app_crashed) |
| App info and performance → Diagnostics | Same versions (app_error: error type and fingerprint) |
| Location → Approximate location | Decide for your app: Whisperr derives the country from the IP address of each event request and stores it with the event as context.country |
Event properties and traits carry whatever your code puts in them. If they hold another data type, declare it too.
Which purposes do I select?
Section titled “Which purposes do I select?”For each data type above except the App info and performance rows, select:
- Analytics
- Developer communications (Whisperr sends your retention messages)
- Advertising or marketing (retention messages can include offers)
- Personalization
For Crash logs and Diagnostics, select Analytics and App functionality, the purposes the Swift SDK’s manifest gives the same data on iOS.
Is the collection required or optional?
Section titled “Is the collection required or optional?”That depends on your app. If users can turn off analytics in your app, call
optOut() when they do, and mark the collection optional. After optOut()
the SDK sends nothing until optIn(), except requests that opt this device’s
push token out.
Common questions
Is data sent to Whisperr shared or collected in the Data safety form?
Collected. Whisperr processes the data for you as a service provider, and Google does not count a transfer to a service provider that processes data on your behalf as sharing.
Can users delete the data that Whisperr holds about them?
Yes, through you. When a user asks, call DELETE /v1/users/{external_id} from your backend with the server key.