Privacy Policy

Last updated: 6 October 2026

WhatsUpp ("WhatsUpp", "we", "us") is a messaging and calling service for Android and the web, made by PhoTech. This policy explains what information we handle when you use WhatsUpp, why, how long we keep it, and the choices you have. We don't sell your information and we don't show ads.

• Information you provide
• Information collected automatically
• Permissions
• How we use information
• Service providers and sharing
• Reports and safety
• Retention and deletion
• Your choices and rights
• Security
• Children
• Changes
• Contact

Information you provide

• Phone number — to create and verify your account by SMS code. It is stored encrypted, with a one-way keyed hash used for lookups. People you chat with can see your number, as on other messengers.
• Profile — your name, "About" and optional profile photo. Who can see your photo and About is set in Settings → Privacy.
• Messages — the server keeps a message only until it has been delivered to the recipient's devices, then deletes it. End-to-end encryption is being rolled out: messages between up-to-date phones are encrypted on the sender's phone so only the recipient's devices can read them. Until that rollout is complete for all devices (including WhatsUpp Web), some messages are protected in transit (TLS) rather than end to end, and are still deleted from our servers after delivery.
• Photos, videos, documents and voice messages — encrypted on your device before upload. We store only the encrypted file, which we cannot open, and delete it after 30 days.
• Status updates — text, photos or videos you post to Status are shown for 24 hours to people you chat with (minus anyone you've blocked), then deleted.
• Calls — voice and video calls are connected peer to peer when possible, otherwise relayed through our servers. Calls are encrypted in transit and never recorded. We keep a short call log (who called whom, when, how long) so it appears in your Calls tab.
• Chat backup — your chats are backed up so you can restore them when you log in again. The backup is encrypted on your phone before upload; its key is stored protected on our servers and released only to your signed-in phone.
• Contacts — only if you allow access. Phone numbers from your address book are sent to our servers to find which contacts use WhatsUpp, and are not stored after the check.
• Location — only when you choose to share your location in a chat. It is sent to the people in that chat as a message; we don't keep a record of it and WhatsUpp never tracks your location in the background. The map picture is loaded through our server, so map providers don't see who is viewing it.
• Stickers you create — made on your phone from a photo you pick. Cutting out the subject happens on your device; the photo is not uploaded. A sticker you send is sent like any other image.
• Messages to us — if you use the contact form or report someone (see below).

Information collected automatically

• Device information needed to run the service: device model, operating system, app version, and a device security key created on your phone.
• Connection data (IP address, timestamps) kept briefly for security, abuse prevention and rate limiting.
• Last seen and online status, shown to others according to your privacy settings.
• Usage totals — daily counts such as number of active users, total time spent in the app, and numbers of messages and calls. These are totals for the whole service; they are not linked to the content of anything you send.
• Push token — an identifier from Google Firebase Cloud Messaging so we can wake the app when a message arrives.

Permissions

Contacts — find friends on WhatsUpp (optional). Location — share where you are in a chat, only when you tap Location (optional, while using the app only). Camera — photos, video calls and scanning the WhatsUpp Web QR code. Microphone — voice messages and calls. Notifications — new messages and calls. Photos and files — only what you choose to send. Phone/SMS — WhatsUpp reads only its own verification SMS (via Android's SMS Retriever, which needs no SMS permission).

How we use information

Only to provide, secure and improve WhatsUpp: creating your account, delivering messages and calls, notifications, backups, keeping accounts secure, preventing spam and abuse, handling reports, answering your questions, and complying with law. We do not use your information for advertising or sell it to anyone.

Service providers and sharing

We use a small number of providers that process information on our behalf:

• Hosting — our servers and databases.
• SMS delivery — an SMS gateway sends your verification code to your phone number.
• Google Firebase Cloud Messaging — delivers a wake-up signal to the app. It carries no message content or sender information.

We may also share information when required by law, or when necessary to protect the safety of users or the public.

Reports and safety

You can report a contact, group or message in the app (Contact info → Report, Group info → Report group, or long-press a message → Report). When you report, your phone sends us the last 5 messages from that chat (or the reported message and the 4 before it) together with the reported account, so we can review it. The person or group is not notified. Accounts that break our Terms may be suspended.

Retention and deletion

• Undelivered messages: until delivered (deleted afterwards).
• Media files: 30 days. Status: 24 hours.
• Security logs: up to 90 days.
• Reports and contact messages: as long as needed to handle them and to keep WhatsUpp safe.
• Your account information: until you delete your account.

You can delete your account at any time in the app (You → Delete account) or on the web at whatsupp.in/delete-account. Deleting your account logs out all your devices and removes your profile, privacy settings, blocked list, chat backup and any undelivered messages. Messages you already sent remain on the recipients' devices.

Your choices and rights

You can change who sees your last seen, online status, profile photo and About, turn read receipts off, block people, and delete your data by deleting your account. Depending on where you live, you may have rights to access, correct or delete your information, or object to its use. To ask, use the contact form.

Security

We use encryption in transit, encryption on your device for media and backups, encrypted storage for sensitive data, device-bound login keys and strict access controls. No system is perfectly secure, but we work hard to protect your information.

Children

WhatsUpp is not intended for children under 13 (or the minimum age required in your country).

Changes

If we change this policy, we'll update the date above, and for important changes we'll let you know in the app.

Contact

Questions about privacy or your data: use the contact form and choose "Privacy".