Kebijakan privasi
Terakhir diperbarui 2026-09-06
1 · In one line
WaChat keeps your WhatsApp chats on your device and in your own Google Drive (the hidden app folder). Your messages, media and encryption key never pass through our servers and we cannot read them. This applies to the Android app and to WaChat Web in the browser.
2 · What is stored, and where
| Data | Where | Who can read it |
|---|---|---|
| Messages, media, reactions | Your device (in the browser: local browser storage) + the hidden app folder in your Google Drive if you choose | Only you |
Your WhatsApp backup file (msgstore.db.crypt15) and export files (ZIP/TXT) you import on the web |
Processed inside your browser only (Web Worker) and kept in this device's local browser storage | Only you — not a single byte is uploaded to our servers |
| WhatsApp 64-digit encryption key | Your device only: in the app wrapped with Android Keystore; in the browser a non-exportable derived key is stored locally only if you agree | Only the app or browser on your device — never uploaded, never logged |
| Google account name, email, photo (optional on the web) | Firebase Authentication | To sign you in, link your devices and enable Plus |
| Subscription state (Plus/free, plan, expiry, country and price group at purchase) | Firestore entitlements/{uid} |
You (read) — written by our server after verifying with Google Play or the web payment provider |
| Google Play purchase token (SHA-256 hashed) or the web payment provider's transaction id | Firestore | Our server only — to link the subscription to your account and handle support and refunds |
| Visitor country inferred from IP address (country code only; the address is not stored) | Used momentarily to pick language and prices; the country code is saved in the entitlement at purchase only | Our server |
Language cookie wa_lang and theme preference |
Your browser | To show the site in your language and theme |
| Web-to-app pairing codes | Firestore (hashed, expire within minutes) | Whoever knows the code; the payload is sealed with your browser's key |
| Crash and usage data (anonymised) | Firebase Crashlytics / Analytics | To improve the product — no messages, names or keys |
3 · Subscription (WaChat Plus)
- In the app: payment through Google Play. We never see your card details. We receive the purchase token and its state (active / cancelled / refunded) to enable Plus on your account.
- On the web: payment through a global payment provider acting as Merchant of Record, which handles card data, taxes and invoices. Your card details never touch our servers. From the provider we receive: subscription state, plan, currency, billing country and a transaction id.
- Country-based prices: your country is determined from your IP address on our server at purchase time and fixed in your subscription. We do not store the IP address itself. We may decline or refund a purchase where the connection country and the payment method's country conflict (see the Refund Policy).
- When a subscription ends nothing is deleted. Only the extras switch off.
4 · Permissions
- In the app: Drive (hidden app folder only), media / folder access (SAF) to read WhatsApp's backup, contacts (optional, on your device only), notifications.
- In the browser: access only to the files or folders you pick (backup file, media folder) and local browser storage (OPFS / IndexedDB). We do not ask for camera or location.
5 · Analytics
We log generic events (e.g. "import started", "subscription screen opened"). They never contain messages, names, numbers or keys. You can switch them off in Settings; a consent banner is shown where the law requires it.
6 · Deletion
- Web: Settings → Storage → "Erase all data" removes everything you imported in this browser immediately. Local data never existed on our side.
- Drive: deleting a chat in the app or on the web removes it from Drive if you choose; you can always revoke the app's access in Google Drive → Settings → Manage apps.
- Account: Settings → Account, or contact us. We delete your entitlement document and pairing codes within 30 days; billing records stay with the payment provider for the period the law requires.
7 · Children
The product is not directed at children under 13.
8 · Changes
We will notify you in the app and on the site of any material change.