Privacy Policy

The short version

• There is no account. The app never asks for your name, email address or phone number.
• Your chat is read and counted on your phone.
• To write the report’s sentences, a limited, redacted sample is sent to our server. We don’t keep that sample.
• No ads, no tracking, and we don’t sell data.

What stays on your phone

• The WhatsApp export you import. It is parsed on the phone, and every count, percentage and date in your report is computed there.
• Screenshots. They are read on the phone with text recognition. The images are never uploaded.
• Your reports. They are stored on the phone. Deleting a report removes it from the phone, and deleting the app removes all of them.

What is sent to write your report

The report’s sentences are written by a language model on our server. For each report, the app sends:

• The facts it counted: mostly numbers, plus your most-used emojis and, when nothing in it needs removing, the chat’s first message.
• A sample of the conversation: at most 360 messages and 24,000 characters, with each message cut to 200 characters. It gives the sentences the chat’s voice; the analysis itself still reads every message, on the phone.
• A list of words you both use often; from an export, without your two names.
• The language, the relationship and the question you picked.
• A fingerprint of the file (a SHA-256 hash), used to recognise the same report again. The file can’t be rebuilt from it.

Before the sample leaves the phone, links, email addresses and any number six digits or longer, such as a phone number, are replaced with placeholders. From an export, the two people’s names are also replaced with {you} and {other}.

Redaction has limits. Names of other people mentioned in the messages, and nicknames, are not detected and can remain in the sample. Screenshots don’t tell the app anyone’s name, so names in screenshot text, including the one at the top of the chat, can’t be removed.

From version 1.0.1 the app explains this and asks before it sends anything for the first time. If you close that screen, nothing is sent and no analysis starts. If you later turn off “AI-written sentences” in iPhone Settings → WholeThing, nothing is sent: the report keeps every number and is written in the app’s own plainer sentences.

Where it goes and how long it’s kept

• The request goes to a function hosted by Supabase, which also hosts our database.
• The sentences are written by Google’s Gemini model on Google Cloud Vertex AI, which processes the request under Google Cloud’s terms.
• We don’t store the sample or the word list.
• The written sentences are kept for 30 days, stored against the file’s fingerprint and the request rather than against you, so reopening a report or trying again doesn’t do the same work twice. One of them may quote the chat’s first message word for word. After 30 days they expire and are deleted.
• Our server logs record whether a request failed and how, never what it contained.

The device key

The app creates a random ID on your phone and keeps it in the keychain, so it can outlast reinstalling the app for as long as the keychain keeps it. It is sent with each request to our server: when a report is written, and each time the app opens, to check for invite credits. It is used for:

• Counting how many requests a phone makes each day, so one device can’t run up unlimited requests. These daily counts are deleted after 30 days.
• Recording whether this phone has finished its first analysis, which decides whether it can still be invited.
• If you use invites: holding your invite code, the invites redeemed with it and the credits they earn.

The first-analysis and invite records are kept for as long as invites need them.

It is never joined to a name or to anything from your chats.

For invites, we also use Apple’s DeviceCheck to check that a phone hasn’t already claimed an invite reward. Apple stores two yes-or-no values per device for us.

Usage events

From version 1.0.1 the app sends anonymous usage events to TelemetryDeck, an analytics service built not to identify people: which screens are opened, which options are chosen (for example the relationship and the question picked before an analysis, or which purchase option is tapped), where the app is closed or a step is left, how long an analysis took in broad ranges, and whether a purchase completed. Each event also carries the app version, the iOS version and the type of device.

An installation is told apart from another by a scrambled code made from a random identifier, so we can count how many people do something — not who they are. Events never contain your messages, names, dates, words or anything from your chats. TelemetryDeck stores no IP addresses and does not use this for advertising. You can turn this off in iPhone Settings → WholeThing → “Anonymous usage”.

Purchases

Purchases are handled entirely by Apple. We never see your payment details.

What we don’t do

• No advertising.
• No tracking across other apps or websites, and no third-party SDK that follows you.
• No selling or sharing of data for anyone else’s use.

Age

WholeThing is not meant for anyone under 13.

This website

• If you join the waitlist, we store your email address, the language you chose (English or Turkish) and when you signed up. We use them to tell you when the app is out and, rarely, about what’s new in it after that. We keep them until you unsubscribe, with the link in every email or by writing to the address below.
• The site is hosted on Vercel.
• Its fonts come from Google Fonts, so your browser contacts Google to load them.
• It remembers the language you chose in your browser’s local storage. It sets no cookies.
• It counts visits with Google Analytics, set up not to store anything on your device: which pages are opened, where visitors came from, and their approximate location, language and type of device. Google processes this for us. It isn’t used for advertising or joined with other Google data.