Privacy Policy

Draft of 2026-10-14. To be reconciled with the legal text in docs/publish/ and reviewed before the store listing.

WhosApp is run by Remoteflow Inc., Cambridge, Ontario, Canada. Contact: tanzeel@devflovv.com.

What we never see

Your messages are end-to-end encrypted on your phone. Our server never sees message content or your groups. It does not record who sent a stored message, and it never receives your contacts' phone numbers in readable form.

What our relay server stores

• Account ids, random ids that identify your account.
• Push tokens, so your phone can be woken for new messages.
• Public keys, so others can start an encrypted chat with you.
• Discovery tokens, only if you turn on "find friends from my contacts". Your phone scrambles each number with a secret key that our server holds before anything is sent, so we never receive the numbers in readable form. Whoever holds that key could still work a number out by trying every possible one, so we limit how many lookups each account can make.
• Undelivered messages, as encrypted data we cannot read, for up to 30 days, then deleted. Delivered messages are removed.
• Encrypted attachments (photos, files, voice notes), as data we cannot read, for up to 30 days.
• Connection times, when your phone last connected.
• A scrambled copy of your phone number (a keyed hash, not the number itself), linked to your account id, so you can sign in again on a new phone.
• A two-step PIN check value, only if you set a PIN. It lets us check your PIN without storing it.
• Reports you send us about another account, including any messages you choose to attach.

Phone verification

You sign up with your phone number. Google's Firebase Phone Authentication sends you a text with a code and checks it; Google processes your number to do that. Right after the check our server deletes your record in our Firebase project, so the number is not kept there. Our server keeps only the scrambled copy listed above. You can also connect with friends through an invite link or a QR code.

Your choices

• Delete your account in the app (Settings, Account). We then delete your account data from the relay at once. Encrypted attachments you sent are not linked to your account, so we cannot find them to delete early; they expire on their own within 30 days.
• Contact discovery is off until you turn it on, and you can turn it off again.

Sharing, security, children

We do not sell data and do not run ads or analytics trackers. To wake your phone for new messages we use Apple Push Notifications (iPhone) and Google's Firebase Cloud Messaging (Android). They receive only a device token and an empty wake-up signal, never your messages. The app is not for children under 13. Questions or requests: tanzeel@devflovv.com.