Introduction
WipeChat ("Wipe", "we", "us") is a privacy-first messaging platform designed around anonymity, end-to-end encryption, and ephemeral communication. Protecting user privacy is our highest priority. This Privacy Policy explains what limited technical information the app processes, why it is processed, and what we never collect.
App-Generated Identifier
WipeChat does not collect IMEI, Android ID, serial number, MAC address, or any other hardware identifier.
- During the first installation, the app generates a random, app-specific UUID on the device.
- This identifier exists only for internal functions such as referral validation, preventing referral abuse, notification routing, and basic security.
- This identifier cannot personally identify the user.
- The identifier is not linked with a phone number, email address, or real identity.
End-to-End Encryption
- Messages are encrypted before leaving the sender's device.
- The server only relays encrypted packets.
- The server cannot read messages.
- Firebase cannot read messages.
- WipeChat developers cannot read messages.
- Only the intended participants can decrypt messages.
Your private conversations remain private. WipeChat is technically designed so that neither our servers, Firebase, nor our developers can read the contents of your encrypted chats. We cannot sell, inspect, or share conversations because we do not have access to them.
Firebase Services
WipeChat uses Google Firebase only for the following purposes:
- Firebase Cloud Messaging (push notifications)
- Firebase Crashlytics (crash reports)
- Referral validation
- Abuse prevention
- Premium Activation & Payment Verification (UTR records)
Firebase never receives:
- Message contents
- Decrypted chats
- Voice conversations
- Screenshots
- Room messages
- Encryption keys
Local Storage & Message Routing
- Messages are stored only on the user's own device when storage is required for app functionality.
- Temporary routing may occur in server memory only for the brief moment required for delivery.
- No permanent message database exists on our servers.
- Deleted messages are not intentionally retained.
- Your app-specific identifier, Decoy PIN, and Wipe Pro premium status are stored strictly locally on your device using encrypted storage. If you uninstall the app, this local data is wiped.
Walkie-Talkie Voice
- Live voice is transmitted in real time between participants.
- Voice is not permanently recorded by WipeChat.
- Voice conversations are not stored on the server.
QR Code Scanning
- Camera permission is used only to scan QR codes.
- WipeChat never records photos or videos.
Screenshot & Screen Recording Protection
- Screenshot detection is supported where technically possible.
- Screen recording protection is enabled where supported by Android.
- These protections help improve user privacy but cannot be guaranteed on every device.
Push Notifications
- Push notifications may be delivered through Firebase Cloud Messaging.
- Notification contents are designed to protect privacy.
- Sensitive message contents are not exposed through push notifications.
Referral System
The referral system uses the app-generated UUID only to:
- prevent self-referrals
- prevent duplicate referrals
- validate referral rewards
No personal identity is associated with referral records.
Crash Reports
Firebase Crashlytics collects technical crash diagnostics such as:
- app version
- operating system version
- crash stack trace
This information is used only to improve app stability. Crash reports do not include chat contents or encryption keys.
Permissions
- Camera — QR code scanning only.
- Internet — encrypted messaging and delivery.
- Notifications — message notifications.
- Microphone — Walkie-Talkie live voice.
- Storage (if applicable) — local app functionality only.
Payments & Wipe Pro Subscriptions
To activate Wipe Pro features, we use a manual UPI verification system.
- What we collect: We only collect the 12-digit UTR (UPI Reference Number), the date of the transaction, and your selected plan type. This is stored securely on Firebase solely to verify your payment and activate your premium status.
- What we NEVER collect: We do not collect, process, or store your Bank Account Numbers, UPI PINs, Credit/Debit Card details, or your real banking name. All transactions are securely handled by your own UPI app (like GPay, PhonePe, or IPPB).
Data We Never Collect
WipeChat does not collect:
- Phone number
- Contacts
- SMS messages
- Photos
- Videos
- Location
- Call logs
- Hardware IDs
- IMEI
- Android ID
- Advertising ID (unless explicitly enabled in the future)
- Chat contents
- Voice recordings
- Passwords
Information You Voluntarily Provide
The messaging service does not require a phone number or email address. The only information you voluntarily provide is the UTR number when you choose to upgrade to Wipe Pro, or a contact email if you reach out to our support team.
Our Privacy Promise
Privacy is not a feature—it is the foundation of WipeChat. Our architecture is intentionally designed to minimize data collection. We only process the minimum technical information required to operate the service securely and reliably. We cannot access your encrypted conversations, and we never sell your personal information.
Children's Privacy
WipeChat is not directed to children below the age of digital consent in their jurisdiction. We do not knowingly process information from such users.
User Responsibilities and Lawful Use
- You are solely responsible for the content you create and share.
- Wipe does not encourage or support illegal activities of any kind.
- Any misuse of the platform is the sole responsibility of the user engaged in that conduct.
- We may restrict access where our Terms of Service are violated.
- To the maximum extent permitted by law, Wipe and its developers are not responsible for damages resulting from unlawful or unauthorized use of the platform by users.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be highlighted in-product or on this page. Continued use of the Service after an update constitutes acceptance of the revised policy.