Privacy

1. Local processing

• Your .txt or .zip file is read in your browser. It is never uploaded to a server.
• From a .zip we only read the chat’s .txt; photos and videos are never opened.
• Every stat, leaderboard, award, emoji, word and phrase is calculated by code running on your device.
• The full report, the Wrapped, sharing and the PDF are free and are generated without sending anything anywhere.
• Once the analysis is done, the original text is thrown away. Only the aggregated stats and the pseudonymized version for the AI remain, in memory, until you close the page.
• We never store your chat’s content in a database or in your browser’s storage.
• The "Who said it?" game is only created if you ask for it: you choose which messages appear, and they travel compressed inside the link (after the #), which never reaches any server. Anyone with the link can read those messages and who wrote them, so you must confirm you have the group’s permission.
• Sharing the Wrapped with a link works the same way: the stats, the names and, if you choose, the AI analysis (with real quotes) travel compressed inside the link and are not stored on any server. Anyone with the link can see it, so you must confirm you have the group’s permission.

2. Phone numbers

• Participants who show up as a phone number are displayed as “Contact 1”, “Contact 2”…
• Phone numbers written inside messages are removed before any analysis.

3. What is sent to the AI (only if you turn it on)

The AI analysis is optional: a profile of each person (role, superpower, kryptonite, catchphrases and best quote), the group’s big moments with dates, made-up awards backed by the quote that proves them, broken promises, eternal debates, the group dictionary, plus topics, your story, emotions and relationships, inside jokes, quotes, “if the group were…” and predictions. It’s generated by an AI model (Gemini, by Google) and only runs if you tick the box and buy me a coffee (3 €), because every AI analysis costs me money. To do it, the AI reads the chat text, which is prepared in your browser before anything is sent:

• Names are replaced with pseudonyms (P1, P2…), including when they show up inside messages. The mapping back to real names never leaves your browser.
• Phone numbers, email addresses and links are removed. Deleted messages are skipped.
• No photos, videos, voice notes or documents are sent: just a “<media>” marker where one used to be.
• For huge chats the text is capped at 400,000 characters: whole days are kept, spread across the entire history, plus the busiest days. Most group chats fit in full.
• We also send a few short snippets (at most 36, of up to 10 messages each) to measure topics and emotions, plus aggregated stats using pseudonyms (messages per period, busiest days, who replies to whom) so the AI never has to make up a number.
• Every quote we show is checked against the chat: it is always a real message, never something the AI made up.
• The emotions and relationships reading is just for fun: it describes the tone of the conversations, makes no psychological diagnosis and doesn’t assume romantic relationships.
• Responsibility of the uploader: before turning on the AI you must confirm that you upload the chat under your own responsibility and that you have permission from every member of the group to analyze it with AI. Without that confirmation, the AI analysis does not run.
• Our server doesn’t store the data it receives: it only forwards it to the model and returns the result.
• Google processes it to generate the response and may keep it for a limited time for abuse detection, but does not use it to train models (these are Gemini’s paid-service terms, which apply in the European Economic Area).

You can see the exact text that is sent to the AI. If you don’t turn it on, nothing leaves your browser: topics are estimated with a local method and the story is built from the stats alone.

4. Payment

• The coffee is paid through Stripe, which handles payment data as an independent controller. We never see or store your card details.
• Stripe gives us the email address you provide so we can send you the invoice and meet our tax obligations.
• The payment is not linked to the content of your chat and covers a single analysis: no “unlock” is stored.

5. Cookies and ads

• To keep the app free, Google AdSense ads are shown inside the app (not on the landing or legal pages) when the AI analysis is not turned on.
• Google and its partners may use cookies and identifiers to serve and measure ads and, if you agree, to personalise them. Before that, Google shows you its consent message (certified under the IAB TCF standard), where you can accept, reject or choose purposes.
• Ads never receive the content of your chat: there is only an ad space on the page. More on how Google uses data: policies.google.com/technologies/partner-sites.
• A technical preference may also be stored in your browser. If you reject cookies, the app works exactly the same.

6. Data controller

• [NOM SL], Tax ID (NIF) [CIF], [DOMICILI]. Contact: [EMAIL].
• You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to that address, and lodge a complaint with the Spanish Data Protection Agency (aepd.es).

7. What we don’t do

• We don’t connect to your WhatsApp account or its API.
• We don’t try to identify anyone beyond the name that appears in the file.
• We make no psychological diagnoses and don’t infer sensitive information.