WhatsBackUp
PRIVACY & DATA

Know where your data goes.

A local archive, with connections you choose. Here is what each feature reads, stores or sends.

FeatureWhere the data goes

WhatsApp connection

Reads enabled media and message data through your linked-device session. Saves the archive on your PC. Requires access to WhatsApp’s services.

ChatGPT and Gemini imports

Opens a separate browser profile for each source. You sign in directly, then the app reads available images from that source. Imported images join your archive.

Google Photos imports (preview)

Uses a separate local browser profile where you sign in with Google. Reads your main timeline and downloads photos and videos into your archive. Optional scheduled imports are off by default. It does not upload media or change your Google Photos library.

Cloud or network copies

Writes media to the destination folder you choose. Your cloud client or network storage controls onward upload and storage. Copy checks do not confirm remote upload completion.

Optional AI sorting

Sends selected images and sampled conversation text to the provider endpoint you configure using your API key. It stays off until you enable it and accept the data notice.

Optional Status Studio

Posts statuses to your WhatsApp account only after you enable live posting. AI writing uses your selected provider. Chat-aware writing can include recent message context when you enable that option.

App updates

Contacts GitHub for release information and update downloads. This does not upload your archive.

ON YOUR PC

Your files and your sign-ins.

Media is saved in the folders you choose. Message text, settings, logs and source browser profiles are kept in the app’s local data directory, normally %LOCALAPPDATA%\WhatsBackUp\.

Your message database is SQLite. You can export readable HTML transcripts. Images and videos remain normal files.

Treat browser profiles like passwords

WhatsApp, ChatGPT, Gemini and Google Photos profiles contain active sign-in sessions. Someone with access to these profiles may gain access to the connected accounts. Keep the app’s data folder private.

Provider keys

The Windows app uses Windows data protection to protect API keys on disk. Keys are used with the endpoint you configure. The diagnostic report is designed to omit secrets; review any report before sharing it.

YOUR CHOICE

Before you enable AI.

Saving and browsing do not require AI. If you enable sorting, requests go from your PC to the provider you select. Images may be sent with their source chat name, caption and direction; conversation sorting sends sampled message text and chat context.

The app provides a data preview and requires consent before the first use. Review this in Settings → Albums & projects, alongside the provider, model and budget. Free tiers and fallback providers have their own limits and data policies.

Media imported from ChatGPT, Gemini or Google Photos can be processed by the same optional sorting feature. Demo mode creates illustrative labels locally; it does not perform real image analysis.

MANAGE YOUR DATA

Disconnecting and removing copies.

  • Disconnect WhatsApp: unlink in the app and remove the device in your phone’s Linked devices list.
  • Disconnect an image source: use Forget this account to remove that source’s local browser profile. Saved images remain.
  • Remove AI organisation: use the labels and albums deletion action in Settings.
  • Remove the local archive: close the app, uninstall it, and remove the app data directory and any media folders you selected.
  • Remove other copies: also review cloud storage, network folders, exported transcripts, quarantine and your storage provider’s trash or version history.

Archiving does not grant permission to share someone else’s messages or media. Use exclusions and keep only what you need.

THIS WEBSITE

A small static site.

This website is hosted on GitHub Pages. It uses local fonts and assets, with no embedded advertising or third-party media players.

The download page asks GitHub’s release API for the latest installer. If that request fails or JavaScript is disabled, the published download link still works. Following a download sends you to GitHub.

Site analytics are currently disabled. The site includes no active analytics token. Hosting and download providers may process normal request data under their own policies.

The product tour uses sample data and an illustrative generated bakery photograph. It does not display private customer archives.

The homepage remembers your motion setting in this browser’s local storage. Sound is off on each visit until you turn it on. Its tones are generated on your device, with no audio downloads or microphone access, and stop when the page is hidden or closed.

Contact the project if something here is unclear.