Privacy: what we can and cannot see

WaChat is designed so that we could not read your chats even if we wanted to. It is not a policy promise; it is how the data flows.

We can see

• That an account exists (your Google account id) and when it last signed in
• Your subscription state: plan, expiry date, price group, and where it was bought
• If you link a browser through the app: an encrypted token that lets that browser read your Drive app folder — revocable from the app
• If analytics is on: generic events such as "chat opened" or "import finished", with no content

We cannot see

• Any message, contact name or phone number
• Any photo, video, voice note or document
• Your 64-digit key or your passphrase
• The other files in your Google Drive (we only have the drive.appdata scope)

Where your data actually is

1. On your device: in the browser's private storage or inside the Android app.
2. Optionally in the hidden app folder of your own Google Drive.
3. In the browser that reads from Drive, fetched directly with your own token.

There is no copy on our servers at any step. The full technical description — including the linking protocol and the encryption parameters — is on the security page.