Privacy Policy for WeWe 3

Effective Date: October 7, 2026

WeWe 3 (“we”, “us”, “our”) is a private messaging application designed around data minimization. This Privacy Policy explains what data we process, why we process it, how long it is retained, and what rights you have.

1. Data We Process

1.1 Account, Device and Session Data

We store account information, device and session information to provide and maintain the service, for as long as your account exists:

1.2 Chat Records, Files and Key Material

We store chat records and uploaded files to provide and maintain the service, including delivering messages, calls and files to their recipients.

The backend stores public keys and client-provided chat key data. It also supports the temporary transfer of key material between your devices through the server, for example when you add a new device. Private keys used for encryption are generated on user devices.

1.3 Operational Logs

When the app connects to our servers, our backend may receive technical information such as IP address, request timestamp, User-Agent and connection information. Operational logs may contain request and response data, device information and user identifiers.

We process this information for security, abuse prevention, troubleshooting and to maintain the service. It is not used for advertising or behavioral profiling. See Section 6 for retention.

1.4 Diagnostic Data (Crash Data and Performance Data)

To detect and fix technical problems, the app may collect the following diagnostic data:

• Crash data: crash reports and error logs (error type, stack trace, app state at the time of the error).
• Performance data: technical performance indicators (for example, connection errors and response times).
• Technical context included in diagnostic reports: app version and build number, operating system and its version, device model.

Your choice. Sharing diagnostic data is voluntary. You decide whether to share crash and error data with us, and you can change this choice at any time in the app settings and, on iOS, in your device settings (Settings → Privacy & Security → Analytics & Improvements → Share with App Developers). If you choose not to share, the app works in full. This choice applies only to diagnostic data; the data in Section 1.1 is required for the app to work.

This data is used only to find and fix bugs and to improve the stability and performance of the app. It does not include the content of your messages, calls or files, and we do not use it for advertising, profiling or tracking. Diagnostic data is retained for 30 days and then deleted or anonymized.

2. Data We Do Not Collect

In the WeWe 3 app, we do not collect or sell:

• Real names, email addresses or phone numbers
• Location data
• Contacts, browsing history or advertising identifiers
• Analytics about how you use the app or whom you communicate with

3. Security and Data Storage

• Passwords are stored using Argon2 hashing and are never stored in plain text.
• Access control: access to authenticated functions is controlled through device-associated sessions and expiring access and refresh tokens.
• Encryption keys: private keys are generated on user devices; the server stores public keys and client-provided chat key data.
• Secure transport: connections to our servers use secure protocols designed to prevent unauthorized access.
• Data minimization: we process only the data necessary to provide, secure and maintain the service and to diagnose errors.

4. Device Permissions

The app may request the following permissions, which are used only for the functions described:

• Camera: to take photos and make video calls.
• Microphone: to make voice and video calls.
• Storage: to send and save files on your device.

You can grant or revoke these permissions at any time in your device settings. Data accessed through these permissions is not uploaded to our servers except when you choose to send it to another user, in which case it is processed as described in Section 1.2.

5. Service Providers

The WeWe 3 app does not use third-party advertising or behavioral analytics services, and we do not sell or share your data for marketing purposes. Analytics on our website is described in Section 10.

We use the following services for technical operation:

• Apple and Google: the service integrates with Apple and Google for push notifications (Apple Push Notification service, Firebase Cloud Messaging) and subscription verification. Notification delivery may involve sharing device push tokens and notification payloads with these providers.
• Licensing service: the server contacts a configured licensing service to verify its operating status.
• Firebase Crashlytics (Google): processes the diagnostic data described in Section 1.4 on our behalf, only if you choose to share it. See the Firebase Privacy and Security documentation.
• Apple crash reports: if you choose to share analytics data with app developers in your iOS settings, Apple provides us with anonymized crash reports through App Store Connect, under Apple’s Privacy Policy.

6. Logs and Data Retention

• Account, device and session data (Section 1.1) is retained while your account is active and deleted when you delete your account.
• Chat records and uploaded files (Section 1.2) are retained to provide and maintain the service and are deleted from our servers when your account is deleted, subject to Section 7.
• Operational logs (Section 1.3): local log rotation is configured to retain general logs for 14 days. Retention in other logging systems depends on deployment configuration.
• Diagnostic data is retained for 30 days and then deleted or anonymized.
• Backups: backup copies, if any, may be retained for a limited period for disaster recovery and security purposes and are not used for normal service operations. Their retention depends on deployment configuration.

7. Your Rights and Account Deletion

You may delete your account at any time in the app: Settings → Delete account. This action cannot be undone.

The service supports account deletion, session revocation and deletion notifications to your connected devices. Removal of data stored locally on a device depends on the client application receiving and processing those notifications. Remote deletion cannot guarantee the removal of offline copies, exports or backups.

Step-by-step instructions: How to delete data from the account.

8. Children’s Privacy

WeWe 3 is not intended for children under 13 (or the minimum legal age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has used the app, contact us and we will delete the related data.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in the app or legal requirements. Significant changes will be announced on our website or in the app. Continued use of WeWe 3 after an update constitutes acceptance of the revised policy.

10. Our Website

This section applies to our website weltwelle.com, not to the WeWe 3 app.

10.1 Google Analytics

Our website uses Google Analytics 4, a web analytics service provided by Google, to understand how visitors use the website and to improve it. Google Analytics uses cookies and similar technologies and may collect:

• Pages visited, time spent on pages, referring website and interactions such as clicks and downloads
• Browser type, operating system, device type, screen resolution and language
• Approximate location (country or city) derived from your IP address
• An online identifier stored in cookies (for example, _ga and _ga_*)

This data is processed by Google on our behalf and may be transferred to and stored on Google servers, including outside your country. It is retained according to the retention settings configured in Google Analytics. More information: Google Privacy Policy and Google Analytics data safeguards. You can block analytics cookies in your browser settings or with the Google Analytics Opt-out Browser Add-on.

10.2 Contact and Dealer Forms

When you submit a form on the website, we receive the information you enter (for example, email, company, country, organization size, optional phone number and message), together with your IP address, browser information and the site language. This information is delivered to our team through Telegram and is used only to respond to your request and to protect the forms against spam and abuse.

11. Contact Us

• Email: office@weltwelle.com
• Website: https://weltwelle.com/