1. Introduction
WhatsRecover ("we", "our", "us") is a mobile application that helps you recover deleted messages and media from notification history on your Android device. This Privacy Policy explains what data we access, what we never access, how we protect your information, and your rights under GDPR, CCPA, and applicable laws.
By installing or using WhatsRecover you agree to this policy. If you do not agree, please uninstall the app and contact us at khokhartushar15@gmail.com to request deletion of any analytics data.
2. What We Do NOT Collect
- ❌ Message text or content of any kind
- ❌ Photos, videos, audio, or document files from your chats
- ❌ Contact names, phone numbers, or profile pictures
- ❌ Conversation history or metadata
- ❌ WhatsApp account credentials or session tokens
- ❌ Call logs or call recordings
- ❌ Precise location data
- ❌ Passwords or payment card numbers
3. What We Do Collect
We collect only the minimum data required to operate the app, display relevant advertising, and diagnose crashes.
| Data Category | Examples | Purpose | Retention |
|---|---|---|---|
| Crash diagnostics | Stack traces, device model, OS version, app version | Identify and fix bugs (Firebase Crashlytics) | 90 days |
| App usage events | Screen views, feature interactions, session length | Understand how users use the app; improve UX (Firebase Analytics) | 14 months |
| Ad interactions | Ad impressions, clicks, estimated revenue per impression | Serve and measure advertising (Google AdMob) | Per AdMob policy (up to 13 months) |
| Purchase events | In-app purchase token, product ID, purchase state | Verify premium subscription, remove ads (Google Play Billing) | Duration of subscription + 30 days |
| Remote Config fetch | Anonymous fetch request, Firebase Installation ID | Deliver app configuration and feature flags (Firebase Remote Config) | 180 days |
4. Permissions & Why We Need Them
Every permission declared in our Android manifest is listed below with a plain-language explanation of why it is required.
| Permission | Why We Need It |
|---|---|
INTERNET |
Load ads, send analytics events, and fetch remote configuration from Firebase. |
ACCESS_NETWORK_STATE |
Check whether the device is online before attempting network requests, reducing unnecessary failures. |
POST_NOTIFICATIONS (Android 13+) |
Show a notification when a new deleted message is captured, so you can view recovered content immediately. |
BIND_NOTIFICATION_LISTENER_SERVICE |
Core feature permission. Grants the app access to incoming notifications so it can detect when a message is deleted and save a local copy before it disappears. Only notification metadata and message text visible in the notification tray is captured — the app never accesses WhatsApp's internal database or encrypted message store. |
REQUEST_IGNORE_BATTERY_OPTIMIZATIONS |
Keeps the notification listener service running in the background. Without this, Android may kill the service and deleted messages will be missed. |
READ_EXTERNAL_STORAGE (Android ≤ 12) |
Read media files (status images and videos shared via WhatsApp) so you can save them to your gallery. |
WRITE_EXTERNAL_STORAGE (Android ≤ 9) |
Save downloaded status images and videos to your device gallery on older Android versions. |
READ_MEDIA_IMAGES (Android 13+) |
Access image files to display and save WhatsApp status photos. |
READ_MEDIA_VIDEO (Android 13+) |
Access video files to display and save WhatsApp status videos. |
READ_MEDIA_AUDIO (Android 13+) |
Access audio files to play recovered voice notes within the app. |
com.android.vending.BILLING |
Process in-app purchases via Google Play Billing to unlock the premium ad-free experience. |
5. Third-Party Services & Processors
WhatsRecover integrates the following third-party SDKs. Each receives only the data described below and is bound by its own privacy policy.
| Service | Provider | Data Received | Privacy Policy |
|---|---|---|---|
| Firebase Analytics | Google LLC | Anonymous usage events, session data, device model & OS version | firebase.google.com/support/privacy |
| Firebase Crashlytics | Google LLC | Crash stack traces, device model, OS version, app version | firebase.google.com/support/privacy |
| Firebase Remote Config | Google LLC | Anonymous fetch requests, Firebase Installation ID | firebase.google.com/support/privacy |
| Google AdMob | Google LLC | Advertising ID, IP address (coarsened), app interactions, ad impressions & clicks | policies.google.com/privacy |
| Google Play Billing | Google LLC | Purchase token, product ID, purchase state | Google Payments Privacy Notice |
6. How We Use Your Data
- Operate the app — Restore deleted messages and media from notification history, save status updates, manage your recovery library.
- Improve the app — Analyse aggregated, anonymised usage patterns and crash reports to fix bugs and add features.
- Serve advertising — Display relevant ads to free-tier users via AdMob. Premium subscribers see no ads.
- Manage subscriptions — Verify and honour in-app purchases through Google Play Billing.
- Deliver configuration — Fetch feature flags and ad settings remotely so we can update them without requiring an app update.
We do not sell your personal data. We do not use your data for profiling beyond what AdMob's contextual advertising requires.
7. Data Storage & Security
/data/data/com.recover.deleted.whatsapp.messages/),
which is accessible only by the app. It is never uploaded to any server.
Analytics and crash data is transmitted over HTTPS/TLS to Google's infrastructure. We implement the following technical safeguards:
- All network communication uses TLS 1.2 or higher.
- Local database (Room/SQLite) stores recovered message metadata; the file is protected by Android's app sandbox.
- No plaintext credentials are stored on-device.
- We follow Google Play's Data Safety requirements and declare data types accurately in the Play Console.
8. Children's Privacy (COPPA & GDPR-K)
WhatsRecover is not directed at children under 13 (or under 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact khokhartushar15@gmail.com and we will delete it promptly.
Google AdMob is configured with
RequestConfiguration.TAG_FOR_CHILD_DIRECTED_TREATMENT_FALSE. If your
jurisdiction requires child-directed treatment, please do not use this app.
9. Your Rights
Depending on your location, you may have the following rights:
| Right | How to Exercise |
|---|---|
| Access — request a copy of data we hold about you | Email khokhartushar15@gmail.com |
| Deletion — request erasure of analytics/crash data | Email us or use Firebase's user-deletion API; local data is deleted when you uninstall the app |
| Opt-out of personalised ads | Android Settings → Privacy → Ads → Opt out of Ads Personalisation |
| Reset Advertising ID | Android Settings → Privacy → Ads → Reset Advertising ID |
| Restrict analytics | Uninstall the app; analytics collection stops immediately |
| CCPA — Do Not Sell | We do not sell personal data. No further action required. |
| Lodge a complaint | Contact your local data protection authority (e.g. ICO in the UK, CNIL in France) |
10. Data Deletion on Uninstall
When you uninstall WhatsRecover, Android automatically deletes all locally stored data including recovered messages, images, and videos stored in app-private storage. Analytics and crash data held by Google (Firebase) will be retained for the periods stated in Section 3, after which they are automatically purged. To request earlier deletion, email khokhartushar15@gmail.com.
11. International Data Transfers
Analytics and crash data processed by Google Firebase and AdMob may be transferred to and stored in the United States or other countries where Google operates data centres. Google participates in the EU-U.S. Data Privacy Framework and uses Standard Contractual Clauses for transfers from the EEA/UK. See Google's Privacy Policy for details.
12. Changes to This Policy
We may update this policy to reflect changes in the app, legal requirements, or third-party services. When we do, we will update the "Last updated" date at the top of this page. Significant changes will be communicated via an in-app notice. Continued use of the app after a policy update constitutes acceptance of the revised policy.
13. Contact Us
Email: khokhartushar15@gmail.com
Publisher: Magic Makers
App: WhatsRecover – Recover Deleted Messages
Package: com.recover.deleted.whatsapp.messages
We aim to respond to all privacy requests within 30 days (72 hours for urgent data breach notifications under GDPR Article 33).