ChatWrapped
Privacy Policy
Last updated: April 2026
ChatWrapped ("we", "us", "our") is operated by David Crymble & Sons Ltd. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.
1. What data we collect
- Chat export files: When you upload or send a WhatsApp export (.txt or .zip), we process the text content to generate your analysis. Files are processed in memory and are never permanently stored on our servers.
- Phone number: If you sign in via WhatsApp OTP, we store your mobile number as your account identifier.
- Email address: If you sign in via email magic link.
- Saved reports: If you choose to save a report, the analysis data (not the raw chat) is stored securely in our database linked to your account.
- Payment information: Payments are processed by Stripe. We do not store card details.
- Usage data: We log anonymous API usage (token counts) for cost monitoring. No personal data is included.
2. How we use your data
- To generate and display your chat analysis and health score
- To send you your login code via WhatsApp
- To save your reports to your account (only if you choose to save)
- To process your payment via Stripe
- To send you trial nudge messages and product updates via WhatsApp (you can opt out at any time by replying STOP)
3. WhatsApp messaging
When you message our WhatsApp bot (+1 570 572 8625), your phone number and message content are processed solely to analyse your chat export and reply with your results. We do not share this data with third parties.
4. Data sharing
We do not sell your data. We share data only with:
- Anthropic (Claude AI): Anonymised conversation samples are sent to Claude to generate insights. See Anthropic's Privacy Policy.
- Supabase: Our database and authentication provider.
- Stripe: Payment processing.
- Meta: WhatsApp Business API for bot messaging.
5. Data retention
- Raw chat files: deleted immediately after analysis (never stored)
- Saved reports: retained until you delete them or close your account
- Account data: retained until you request deletion
- OTP codes: automatically expired and deleted after 10 minutes
6. Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data. To exercise these rights, contact us at [email protected].
7. Cookies
We use only essential cookies for authentication (Supabase session). We do not use advertising or tracking cookies.
8. Contact
David Crymble & Sons Ltd
Email: [email protected]
Website: www.chatwrapped.uk