Your screenshots
don't stay here
This is the whole policy in plain English. The long legal version says the same thing with more commas.
Who we are
Wish Technologies, Thane, Maharashtra, India, runs whatdoitextback. Under India's Digital Personal Data Protection Act we are the Data Fiduciary for everything described on this page, which means we decide what is collected and why, and we are the ones answerable for it. Questions, requests and complaints about your data go to hey@whatdoitextback.com, and a person reads them.
What happens to an upload
The image goes straight to the AI model that writes the replies, and is discarded when the request ends. We never write it to disk, never back it up, and never keep a copy.
What the analytics sees
Two different things, and it is worth separating them. Our own counting keeps no identifier at all: a row says a quiz was finished or a checkout was opened, with nothing attached that could tie it to you or to any other row, so there is no profile of you to build and nothing to opt out of. Google Analytics, Vercel Analytics and Vercel Speed Insights are the ones that can recognise a browser, and none of them runs unless you agree to it, or at all if you have Do Not Track switched on. None is ever sent a message, an email address, or the id we use to count your free replies. Speed Insights measures only how fast pages load for you, which is a number about the page rather than a fact about you, but it still tells a third party that a visit happened, so it waits to be asked like the rest.
What we do keep
Your six style dials, your archetype, and how many replies you've used. That's the account. No names, no match names, no conversation history.
The messages we learn from
To make replies sound like you, we pull a handful of your own messages out of the screenshots you upload, up to 20 of them. Those stay on your device, not on our servers, and they go back to the model each time so it can match how you write. Two things worth knowing. We work out which side is yours by reading the layout, and we get that wrong often enough that a message from the other person can end up in there. And you can see all of them, and remove any or all of them, on your account page. Clearing site data removes them too.
Who else sees it
The AI model that writes the replies receives the screenshot itself, not a summary of it. That provider is outside India, in the United States, so your conversation leaves the country to be read. Indian law allows this: transfers are permitted anywhere the government has not specifically restricted, and it has restricted nowhere. Its provider deletes it within 30 days. The exception matters: if something you send trips their abuse checks, they keep it for as long as two years, and the score that flagged it for longer still. That is their policy, not ours, and it is the main reason not to upload anything you would mind a stranger reviewing. We only use providers that do not train on what we send. Payments go through Razorpay. Google Analytics and Vercel Analytics count which screens are used and where people give up, and Vercel Speed Insights records how quickly each page loaded, all only if you agree to it; none is sent message text, an email address or any identifier of ours, and all three receive the page path with the query string removed. Nobody else.
Other people in your screenshots
The person you are texting has not agreed to anything with us. That is exactly why the image is discarded rather than stored, and why we do not build a profile of anyone but you. Don't upload conversations someone asked you to keep private.
Your rights
Under India's Digital Personal Data Protection Act you can ask for a copy of your data, ask us to correct or complete it, ask us to erase it, nominate someone to act for you, and withdraw consent at any time. Most of it you can do yourself. Clearing site data removes the copy on that device; if you have an account, the account keeps one too, and Start over on your account page forgets both.
Deleting everything
Settings, then Delete my data. Two taps, gone in seconds, no confirmation email chain. Your dials, archetype, usage and account go, and any subscription is cancelled. We do not keep a copy "for analytics". The one thing that stays is the payment record itself, which sits with Razorpay and which the law requires us to keep.
Why we are allowed to hold any of it
Your consent, given before your first reply, and nothing broader. It covers running the service you asked for and nothing else. Agreeing to analytics is a separate question with its own banner, and saying no there changes nothing about the replies. You can withdraw consent whenever you like, and withdrawing it is the same button as deleting your data, because in practice they are the same thing.
Age
This service is for adults. You must be 18 or over, and we ask you to confirm it before your first reply rather than later. We do not knowingly process data belonging to anyone under 18, and we refuse to generate replies for conversations that appear to involve a minor.
All of it, as a list
The same thing the sections above describe, itemised, because a list is harder to hide something in.
Your six style dials and archetype
To write replies that sound like you rather than like anyone else
The quiz, and every reply
Messages lifted from your screenshots
To match your rhythm and punctuation more closely than the quiz can
Your device only, and removable on your account page
How many replies you have used
To know when the free ones run out and what your plan allows
The free allowance and the paywall
A random device id
To count free replies for somebody with no account
Free replies, before you ever sign in
Your IP address, stored only as a one-way hash
To stop one person exhausting the service for everybody
Rate limiting. Cleared after 30 days
Your email address, and the date you confirmed you are 18
To sign you in, to send receipts, and because this is an adult service
Accounts and payments
Your email address, if you ask us to email your archetype card
To send you that card, and nothing else unless you ticked the box asking for more
Kept until you ask us to delete it
The screenshot itself
To read the conversation and write a reply to it
Sent to the AI model, never written to our disk
Your payment record
The law requires us to keep proof of a sale
Held by the payment provider, not by us