privacy notice

The Void is owned and operated by Bear Hug Wellness. For the personal data we collect through this service, we act as the data controller.

• Whispers and voice notes you submit, plus optional mood tags. These are never linked to your real identity.
• An anonymous device key stored in your browser, which lets us show your past whispers and any responses without you logging in.
• Basic technical data needed to deliver the service: IP address, browser/device info, request logs.
• For Echo Premium subscribers: an email address used only for billing receipts, and a Stripe customer/subscription ID.
• Responder accounts: email and login credentials for the humans who write back. This is separate from whisper-sender data.

• To deliver The Void and show you your own past whispers — performance of contract.
• To pass whispers to a responder who may write back — performance of contract.
• To bill and manage subscriptions — performance of contract.
• To prevent fraud, abuse, and security incidents — legitimate interests.
• To comply with legal obligations where required — legal obligation.

• Stripe — our Merchant of Record for Echo Premium subscriptions. Stripe handles payment, billing, tax compliance, invoicing, and customer service for orders. See Stripe's privacy notice.
• Hosting and infrastructure providers who store the database and serve the application on our behalf.
• Responders we work with — they read whispers in order to write back, under confidentiality.
• Authorities, where we are legally required to disclose information.

Whispers and responses are kept while your device key is active so you can see them. If you clear your device key (or your browser storage), you can no longer reach them. Subscription records are retained while your subscription is active and for the period required by tax and accounting law (typically up to 7 years after the last invoice). Technical logs are kept for a short rolling window.

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. Because The Void is anonymous by design, the simplest way to exercise erasure is to clear your device key. For subscription data, email support@the-void.life. If you are in the UK or EEA you also have the right to lodge a complaint with your local supervisory authority.

Our hosting and Stripe's infrastructure may store data outside your country, including in the United States and the EU. Where personal data leaves the UK/EEA, we and our providers rely on appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions).

We use appropriate technical and organisational measures — encryption in transit, access controls, row-level security on the database — to protect your information. No system is perfectly secure, but we take it seriously.

The Void uses local browser storage to keep your anonymous device key. We don't use advertising or tracking cookies. Stripe's checkout may set its own cookies as described in its policy.

For privacy or subscription-related questions, email support@the-void.life.