Privacy Policy

1. Introduction

KaranLabs ("we", "us", "our") operates Whatsrapped ("the App"), an iOS application that turns a WhatsApp chat export into an eight-card animated story. This Privacy Policy explains what information the App handles, what stays on your device, and the very limited circumstances in which any information leaves your device. By using Whatsrapped, you agree to the practices described below.

2. Information Processed On Your Device Only

The following information is read and processed entirely on your iPhone and is never transmitted to us or to any third party:

• The WhatsApp chat export file you import (_chat.txt or the .zip that contains it).
• Message content — the text of every message in the chat.
• The names of the two people in the chat, as they appear in the export.
• Derived metrics — totals, daily and yearly counts, hourly distribution, sender balance, emoji counts, key phrases, longest streak, busiest day, media counts, and the other numbers used to build your eight story cards.
• The display labels you assign ("You" / a chosen name for the other person) during onboarding.
• Past analyses you choose to keep — stored locally in the App's own database (Apple SwiftData) on your device.
• Your entitlement balance — the number of remaining Wrapped analyses you have left from your purchases, stored locally in the iOS Keychain.

When you delete the App, all of this is removed from your device. We retain no copy of it because we never received one.

3. The Very Limited Information That Leaves Your Device

3.1 In-App Purchases (Apple)

Whatsrapped uses Apple's StoreKit to sell consumable packs (each pack unlocks two Wrapped analyses). When you buy a pack, the transaction is processed entirely by Apple. We do not see your payment method, your Apple ID, your email, or your name. Apple sends the App a cryptographically signed receipt confirming the purchase; the App verifies that receipt on your device and increases your local entitlement counter. Apple's handling of your purchase is governed by Apple's own privacy policy.

3.2 Anonymous Product Analytics (Optional)

To understand how people move through the App (for example, how many users finish an analysis after starting one), Whatsrapped may send a small number of anonymous product events to Amplitude (Amplitude, Inc.). These events describe what the user did, not what is in the chat. Specifically:

• We send events like import_started, parse_completed, paywall_shown, purchase_completed, wrapped_viewed, share_tapped.
• We never send message content, sender names, the chat file, the contents of any slide, or any text the user typed.
• We never send your name, email, phone number, Apple ID, IDFA, or precise location.
• Amplitude assigns a randomly generated, app-local identifier so that events from the same install can be grouped. This identifier is not linked to you as a person and is reset if you reinstall the App.
• Numeric metrics that may be sent (e.g. file size buckets, parse duration buckets, total-message count) are aggregate and cannot be used to reconstruct your chat.

If a build of the App ships without Amplitude linked, no analytics events are sent at all.

3.3 Apple's Built-In Diagnostics

If you have Share With App Developers enabled in iOS Settings → Privacy & Security → Analytics & Improvements, Apple may share crash reports and aggregate usage data with us through App Store Connect. These reports are provided by Apple in anonymized form and do not include the contents of your chats.

3.4 Saving or Sharing Your Cards

When you tap "Save to Photos" or use the iOS share sheet to send a slide elsewhere, the resulting image is rendered on your device and handed to iOS. From that point on, it is governed by iOS and by whichever app or person you share it with. We never see those images, and we do not upload them anywhere.

4. Information We Do Not Collect

For clarity, Whatsrapped does not collect any of the following:

• Your name, email, phone number, or any account information — there is no account system.
• The contents of your WhatsApp chats or any messages within them.
• Photos, videos, voice notes, stickers, or any media from your chats — the App only counts that they exist as numbers in the export.
• Your contacts, photo library, location, microphone, camera, calendar, or health data.
• Advertising identifiers (IDFA), device fingerprints, or cross-app tracking signals.

5. Children's Privacy

Whatsrapped is intended for users aged 13 and over. We do not knowingly process information from children under 13. The App contains no advertising and no social features.

6. Data Security

Because chat content never leaves your device, the strongest protection of your chat is iOS itself: device passcode, Face ID / Touch ID, and Apple's sandboxing. The App reads the export file you import, processes it in a temporary location, and deletes any unzipped temporary files when processing finishes or is cancelled. Past analyses you keep are stored inside the App's private sandbox and removed when you delete the analysis or the App.

For the few pieces of information that do leave your device (Section 3), transmission to Apple and Amplitude is over encrypted (TLS) connections.

7. Your Choices and Rights

• Delete a single analysis: Open the App, find the analysis in History, and remove it.
• Delete everything: Delete the Whatsrapped app from your iPhone. All locally stored analyses, the entitlement counter, and any cached data are removed with it.
• Manage purchases: Consumable purchases are non-refundable except where required by law and are handled by Apple. To request a refund, use Apple's reportaproblem.apple.com.
• Disable diagnostics: Turn off Share With App Developers in iOS Settings to stop Apple from sharing anonymized crash and usage reports with us.
• Access, correction, deletion, portability, objection: Because we hold no personal data about you on our servers, these requests are effectively self-served by managing the App on your device. If you believe we hold information about you and want us to confirm or remove it, email us at the address below.

8. International Users

Whatsrapped is offered globally and is localized into 30 languages. Because chat data is processed on your device, no cross-border transfer of your chat occurs. The limited information described in Section 3 may be processed by Apple and Amplitude on infrastructure located outside your country of residence; both companies operate under their own published privacy programs and applicable data-protection frameworks.

9. Not Affiliated With WhatsApp

Whatsrapped is an independent product made by KaranLabs. It is not affiliated with, endorsed by, or sponsored by WhatsApp Inc. or Meta Platforms. "WhatsApp" is a trademark of its respective owner; we use it only nominatively to describe the chat-export format the App accepts.

10. Changes to This Policy

We may update this Privacy Policy as the App changes — for example, if we add or remove a third-party service. Material changes will be announced in the App or on this page, and the "Last updated" date above will reflect the change. Your continued use of the App after a change constitutes acceptance of the updated policy.

11. Contact

Questions about this policy or our data practices? Reach us at:

[email protected]