WhisFai
Sign in to Meet

Privacy Policy

Last updated: October 15, 2026

1. Introduction

Tizfai Technologies AB ("WhisFai", "we", "us", or "our"), a company registered in Sweden, operates the WhisFai mobile application and the WhisFai Meet web conferencing application at meet.whisfai.com (together, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

The two products share one account but handle your data differently: message content in the mobile app is encrypted on your device and stored by us only as ciphertext, while WhisFai Meet is a conferencing product whose meetings can be recorded and transcribed. Section 6 explains what that encryption does and does not currently protect against, and Section 7 covers WhisFai Meet specifically — read it if you use meet.whisfai.com.

We are committed to protecting your privacy. WhisFai is designed as a privacy-first messaging application where your data belongs to you. You can create and use a WhisFai account without providing an email address or phone number. Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for your personal data is:

Tizfai Technologies AB
Sweden
Email: info@whisfai.com

3. Information We Collect

3.1 Information You Provide

  • Account Information: A username you choose and a password (stored only as a secure hash). These are the only details required to create an account — no email address or phone number is needed.
  • Email Address (optional): If you choose to sign up with an email address, or link one to your account later in Settings, we store it to verify your email, let you sign in with it, and help you recover your account or reset your password. Anonymous, email-free sign-up remains fully supported and is the default.
  • Profile Information (optional): A display name and a profile photo you may add, shown to your contacts. Profile photos are stored encrypted on our storage, but our servers process them in order to display them to your contacts — they are not end-to-end encrypted.
  • Communication Data: Messages, media files, and voice notes you send through the Service. These are encrypted on your device before upload and we store them only as ciphertext. Section 6.1 sets out the current limits on that protection.
  • Contact and Connection Data: Connection requests (including any optional introduction message you write), the custom names, favorites, and groups you assign to your contacts, and your block list (including any optional reason you enter).
  • Support Requests and Reports: Information you provide when contacting us for support or when reporting another user for abuse.

3.2 Information Collected Automatically

  • Device Information: Device type, operating system, and a device identifier (used for sign-in security, limiting abuse, and managing your devices).
  • Push Notification Tokens: Device tokens needed to deliver notifications, provided to us by Apple (APNs, including VoIP push for incoming calls) and Google (Firebase Cloud Messaging).
  • Connection Metadata: Timestamps, delivery and read status, message type, and relationship metadata (not message content) needed to deliver messages.
  • Call Metadata: Who called whom, call type (voice/video), start time, and duration. The content of calls is never recorded or stored.
  • Security Logs: IP address and browser/device information recorded when you register or perform significant account actions, kept for security, fraud, and abuse prevention.
  • Subscription Data: Your plan, product identifier, and transaction identifiers received from Apple, Google, or Stripe when you subscribe. We never receive or store your card details.
  • Presence: A last-active timestamp used to show your online status, which you can hide with invisible mode.

3.3 Information We Do NOT Collect

  • Phone numbers
  • Contact lists or address books from your device
  • Location data — we never read or store your GPS location. (On Android, the system requires the location permission to allow Bluetooth scanning; we use it only for that and no location is collected.)
  • Message content in readable form — messages are encrypted on your device before they reach us (see Section 6)
  • Your private encryption keys in plaintext
  • Advertising or analytics data — the app contains no advertising, analytics, or tracking SDKs and shows no ads

3.4 Bluetooth Nearby Discovery

WhisFai lets you add contacts by meeting them in person. While you have nearby discovery turned on, your device broadcasts a short Bluetooth identifier containing your user ID and username so that other WhisFai users physically near you can find you. That identifier does not currently rotate, so anyone within Bluetooth range who is listening could recognise the same device over time; we are replacing it with a short-lived, unlinkable token. This broadcast is local radio only — it is not sent to our servers, and no location is recorded. You control this feature: discovery runs only when you enable it, background availability is optional, and you can turn off discoverability in Settings at any time. Encryption keys for in-person connections are exchanged directly between the two devices during pairing.

4. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Create and manage your account
  • Verify your email address and help you recover your account, if you choose to add an email
  • Deliver messages and facilitate connections between users
  • Process subscription payments
  • Send push notifications for incoming messages and calls
  • Protect the Service against fraud, spam, and abuse
  • Improve and optimize the Service
  • Respond to customer support inquiries
  • Comply with legal obligations

5. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

  • Contractual Necessity: Processing necessary to provide the Service you requested (Article 6(1)(b)).
  • Legitimate Interest: Processing for securing the Service and preventing fraud and abuse, including security logs (Article 6(1)(f)).
  • Consent: Where you have given explicit consent, such as optionally adding an email address to your account (Article 6(1)(a)).
  • Legal Obligation: Processing required to comply with applicable laws (Article 6(1)(c)).

6. Encryption

WhisFai encrypts your messages on your device before they reach our servers. How each kind of content is protected:

  • One-to-one messages and attachments. Every one-to-one message is encrypted on your device by an Olm session (vodozemac, an open-source implementation) before it reaches us, and each message gets its own key. Photos, voice notes and files are encrypted with their own random key before upload, and that key travels inside the encrypted message. Our servers store this content only as ciphertext and cannot read it. The keys for these sessions are generated on your phone.
  • Direct Friends. Messages between Direct Friends, people you have met in person and verified with the 60-digit safety number both phones show, are additionally sealed under a key made when you meet, used inside the encrypted session and held only on your two phones. No key travels over Bluetooth or in the codes you scan.
  • Groups. Group messages and group media are encrypted on the sender's device with group keys that are sent to each member in encrypted form, and sealed under the meeting key for members the sender has met in person. Group encryption is our own design built on standard primitives (X25519 and XSalsa20-Poly1305) rather than a separately reviewed protocol, and it does not provide forward secrecy.
  • Calls. Voice and video calls travel over encrypted connections through our call servers, which process the media in order to route it, so calls are not end-to-end encrypted. Calls placed in the WhisFai mobile app are never recorded. Meetings in WhisFai Meet are described in Section 7.
  • Your keys and backups. Your account's identity key is generated on your device. Where its private part is stored with us, it is inside an envelope sealed with a key derived from your password using Argon2id, which we cannot open; someone who obtained a copy of our database could still try to guess a weak password, so a long, unique password matters. Your recovery backup is encrypted with a recovery key that only you hold. If you turn on the chat history backup and keep a copy with us, it is encrypted with a separate backup key that only you hold.

Some data is protected with server-side encryption rather than end-to-end encryption, because our servers need to process it to provide the Service: profile photos and the names and descriptions of group conversations, as well as message delivery metadata (see Section 3.2).

We do not describe WhisFai as having forward secrecy, post-compromise security or end-to-end encrypted calls, and our use of these libraries has not been independently reviewed.

6.1 What our encryption does not cover

We think you are entitled to know these limits rather than find them out later. None of them involves any evidence of misuse.

  • Accounts created before 9 September 2026. For these accounts the original identity key pair was generated on our server, and for many of them the server still holds its private key in a form we can read. That key does not protect one-to-one messages or attachments, which use keys made on your phone. It does protect the group keys exchanged between members who have not met in person, so for these accounts we would technically be able to read such group conversations. We do not do so. Accounts created since then by a current version of the app or WhisFai Meet generate their identity key on the device.
  • Groups.Group encryption does not provide forward secrecy: someone who obtained a member's group keys could read earlier group messages encrypted under them.
  • Calls. Our call server can process call audio and video in order to route it.
  • Notifications.A notification about a new message shows the sender's name (for a group, the group's name), never the message's content. Apple and Google deliver these notifications and can see who is writing to you. No notification is sent about a contact in your Contact Vault.
  • Older messages. Messages sent with an earlier version of our encryption can no longer be opened by the current app. They remain stored on our servers as ciphertext until deleted.

6.2 Contact Vault

Moving a contact or a group to the Vault removes it from Contacts, Chats, call history, mutual discovery, normal notifications and WhisFai-managed local data on that device. Selected incoming activity is held by WhisFai until you unlock the Vault with device authentication and your recovery code: we hold back the messages and call records we already store, rather than copying them, and the Vault gives us no access to message content. The other person keeps their own contact and history and is not told that you used the Vault.

7. WhisFai Meet (Web Conferencing)

WhisFai Meet at meet.whisfai.com uses the same account as the mobile app, but it is a conferencing product rather than a private messenger, and its privacy properties differ. Meeting audio, video and screen shares pass through our media server (a self-hosted LiveKit SFU) in a form our servers can process, unless the meeting is started as an end-to-end encrypted meeting. In an end-to-end encrypted meeting, audio, video and screen shares are encrypted in each participant's browser under a key our servers never receive. The host or a moderator hands that key to each participant admitted to the meeting, and the key is replaced when one of them removes someone. Live streaming, captions, transcription, AI notes and recording to our servers are not available in such a meeting. In every meeting, in-meeting chat, polls, the whiteboard and shared files are stored on our servers as described below. Please do not treat a Meet meeting as having the same privacy properties as a WhisFai mobile chat.

7.1 Recording and Transcription

  • Recording: A participant can record a meeting. Recordings are captured in that person's browser. If they choose to save the recording to the meeting, it is uploaded to our file storage and is available to the meeting's participants; if they save it locally, it never reaches us. In an end-to-end encrypted meeting, a recording can only be saved to the participant's own device. An on-screen indicator shows when someone is recording.
  • Transcription and AI meeting notes: If a participant turns on transcription, meeting audio is sent to OpenAI for speech-to-text (Whisper), and AI meeting notes are generated by sending the resulting transcript and participants' display names to OpenAI (GPT models). Transcripts and notes are stored on our servers in unencrypted form and are readable by us.
  • Access logs: When AI meeting notes are viewed, edited, or approved, we record who did so, together with their IP address and browser information.

Because any participant may start a recording or transcription, please assume a meeting may be captured, and ask the host if you need to know. If you do not want to be recorded or transcribed, do not join, or leave the meeting.

7.2 Meeting Content We Store

  • In-meeting chat: Stored on our servers in unencrypted form, unlike mobile app messages. It remains available to participants after the meeting.
  • Meeting details: Meeting titles, scheduled times, and per-participant join and leave times and durations.
  • Shared files and documents: Stored in our file storage under their original filenames and available to participants.
  • Whiteboards: Whiteboard drawings, including any images pasted into them, are stored on our servers in unencrypted form.
  • Polls and Q&A: Votes and questions are linked to the account that submitted them. Where a poll or question is shown as anonymous, this hides the name from other participants — it does not make the record anonymous to us.

7.3 Guests Joining by Link

You can join a meeting by link without a WhisFai account. In that case we collect the display name you type in and an identifier generated by your browser, so the host can admit or remove you. A record of who asked to join, who was admitted, and who was turned away is kept after the meeting as the host's account of what happened. We do not create an account for guests and do not store a guest's IP address.

7.4 Live Streaming and File Previews

  • If a host streams a meeting to an external platform (such as YouTube Live or Facebook Live, or another destination they configure), the meeting's audio and video are sent to that platform and are then governed by that platform's terms and privacy policy.
  • Previewing an Office document (Word, Excel, PowerPoint) shared in a meeting uses Microsoft's hosted document viewer, which retrieves the file in order to display it.
  • A host can create a shareable link to a meeting's files. Anyone holding that link can open those files without signing in, until the link expires or the host revokes it.

7.5 Meetings Provided Through a Partner

WhisFai Meet can be offered inside another company's product. Where that is how you reached us, that company decides who may use the service and supplies us with an identifier for you and your display name, and meeting outputs such as transcripts and notes may be returned to them. In those cases that company is responsible for your data as controller and we act on their instructions — please read their privacy policy, and contact them to exercise your rights.

8. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

  • Payment Processing: Apple (App Store) and Google (Google Play) process in-app subscription purchases; Stripe processes web subscription billing. Your card details stay with these providers and never reach our servers.
  • Push Notifications: Device push tokens are shared with Apple (APNs) and Google (Firebase Cloud Messaging) to deliver notifications to your device.
  • Infrastructure Providers: Encrypted message attachments, profile photos, and WhisFai Meet files are stored with our cloud storage provider (Wasabi), and transactional emails (such as verification codes) are delivered through our email provider. All providers are bound by data processing agreements.
  • Speech and AI Processing (WhisFai Meet only): When transcription or AI meeting notes are used, meeting audio and the resulting transcript are sent to OpenAI for processing, as described in Section 7.1.
  • Document Preview and Live Streaming (WhisFai Meet only): Microsoft, when an Office document shared in a meeting is previewed; and the streaming platform a host selects, when a meeting is streamed. See Section 7.4.
  • Anti-Abuse: Where sign-up protection is enabled, your IP address is sent to Cloudflare to verify that the request is not automated.
  • Legal Requirements: When required by law, legal process, or governmental request.
  • Business Transfers: In connection with a merger, acquisition, or asset sale, with continued protection of your data.

9. Data Retention

We retain your personal data only as long as necessary for the purposes set out in this Privacy Policy. Specifically:

  • Account Data: Retained while your account is active. When you request deletion, your account is deactivated immediately and personal data is removed in accordance with our account deletion process.
  • Messages: End-to-end encrypted messages are stored until delivered. You can enable automatic conversation deletion (24 hours to 90 days), and disappearing messages are deleted per your configuration.
  • WhisFai Meet content: Meeting recordings, transcripts, AI notes, in-meeting chat, shared files, and whiteboards are kept until they are deleted by a participant or by us on request — they are not removed automatically after a fixed period. If you want meeting content deleted, delete it in the meeting's files or contact us.
  • Security Logs: Limited security records (such as registration attempts and IP-based security logs) may be retained after account deletion where necessary for fraud and abuse prevention and legal compliance.

10. Your Rights Under GDPR

If you are in the European Economic Area (EEA), you have the following rights:

  • Right of Access: Request a copy of your personal data.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten").
  • Right to Restrict Processing: Request limitation of how we process your data.
  • Right to Data Portability: Request your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interest.
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@whisfai.com. We will respond within 30 days as required by GDPR.

11. International Data Transfers

Our servers and database are hosted in the European Union. Some data is processed outside the EEA: files and media are stored with our cloud storage provider in Singapore, and — for WhisFai Meet transcription and AI notes — audio and transcripts are processed by OpenAI in the United States. When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

12. Cookies and Browser Storage

This website sets no cookies and loads no analytics, advertising or other third-party trackers; its fonts and images are served from our own server. The only thing its public pages keep in your browser is a note that you closed the bar at the bottom of the page on a phone, held in session storage until you close the tab and never sent to us. WhisFai Meet (meet.whisfai.com) is a separate web application; it keeps your sign-in in your browser so that you stay signed in. The WhisFai mobile app itself contains no advertising or analytics trackers.

13. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover that a child under 16 has provided us with personal information, we will delete such information promptly.

14. Security

We implement industry-standard security measures to protect your data, including:

  • Client-side encryption of message content, with the limitations described in Section 6.1
  • Encrypted storage of sensitive data
  • Regular security review and updates. WhisFai has not yet completed an independent external cryptographic audit; we will say so here when it has.
  • Secure server infrastructure

However, no method of electronic storage or transmission is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Significant changes will be communicated through the app or via email.

16. Supervisory Authority

If you are in the EEA and believe our processing of your personal data violates GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or your local data protection authority.

17. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Tizfai Technologies AB
Email: info@whisfai.com
Website: www.whisfai.com