Privacy Policy

# Privacy Policy — Status Saver for WhatsApp

**Effective date:** 28 May 2026

**Last updated:** 28 May 2026

## 1. Who we are

This privacy policy applies to the mobile application "**Status Saver for WhatsApp**" (the "App"), published on the Google Play Store by **Noxoro** ("we", "us", "our").

The App is **not affiliated with, endorsed by, or sponsored by WhatsApp Inc. or Meta Platforms, Inc.** "WhatsApp" is a trademark of Meta Platforms, Inc.

**Contact for privacy questions:** jay.noxoro@gmail.com

## 2. Summary — what you need to know

- The App processes your WhatsApp status media **entirely on your device**. We do not upload, copy, or transmit your media files to our servers or any third party.

- We collect **anonymous usage analytics** and **crash diagnostics** to improve the App. You can disable this any time in **Settings → Privacy → Send anonymous usage data**.

- We display **advertisements** (via Google AdMob) to free users. If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, you will see a consent dialog the first time you open the App.

- We do **not** collect your name, email address, phone number, contacts, precise location, or any directly identifying personal information.

## 3. Data we collect

### 3.1 Data we collect automatically

|---|---|---|---|

| **App interaction events** | Counters and timestamps for actions like saving a status, completing onboarding, sharing, opening the Pro screen, purchasing Pro | Understand how features are used | Google Firebase Analytics |

| **Device diagnostics** | App version, device model, operating system version, language, country (derived from IP, generalized) | Compatibility analysis; localization | Firebase Analytics (auto-collected) |

| **App instance identifier** | A pseudonymous, app-scoped identifier generated by Firebase on first install | Tie events to a single installation without identifying you | Firebase Installations |

### 3.2 Data you grant access to (processed locally only)

|---|---|---|---|

| **WhatsApp .Statuses folder URI** | The Storage Access Framework grant you provide to read WhatsApp's status folder | Read the status files you want to save | **Local only** — never leaves your device |

| **Vault items** | Files you optionally move into the encrypted private vault | Encrypted at rest using AES-256-GCM with a key in the Android Keystore | **Local only — encrypted** |

| **App lock PIN** | Your 4-digit PIN | Optionally lock the App | **Local only** — stored as a PBKDF2 hash with a per-install random salt; the plain-text PIN is never persisted |

### 3.3 Data we do NOT collect

- Your name, email address, phone number, or postal address

- Contents of your saved photos or videos

- Your contacts or address book

- Precise or coarse location data (we only see the generalized country from your IP, via Firebase)

- Browsing history outside the App

- Audio, microphone, or camera content

- Your WhatsApp messages, chats, or contacts list

## 4. Legal basis for processing

| Processing | Legal basis |

|---|---|

| Showing advertisements (EEA/UK/CH users) | **Consent** — obtained via the in-app Google User Messaging Platform (UMP) dialog. You may withdraw at any time via **Settings → Privacy choices**. |

| Analytics and crash diagnostics | **Legitimate interests** (improving the App), subject to your right to object — exercisable via **Settings → Send anonymous usage data**. |

| Processing your in-app purchase | **Performance of a contract** — to provide the Pro features you purchased. |

| Storing your app-lock PIN locally | **Consent** — you choose whether to enable the lock. |

For users in India, processing is based on your consent under the Digital Personal Data Protection Act, 2023.

## 5. Who we share data with

We share data only with the third-party processors listed below. We do not sell, rent, or trade your personal data.

|---|---|---|---|

| **Google LLC** — Firebase Analytics | Event and engagement measurement | Anonymous interaction events, app instance ID, device diagnostics | https://firebase.google.com/support/privacy |

| **Google LLC** — AdMob | Serving advertisements | Advertising ID, ad-interaction events; user-consent state per Google Consent Mode v2 | https://policies.google.com/technologies/ads |

We forward your consent signals to Google via **Google Consent Mode v2** so that Google's processing respects your choice.

## 6. International data transfers

Google's services process data in the United States and other countries. These transfers rely on Standard Contractual Clauses approved by the European Commission and Google's certification under the EU-U.S. Data Privacy Framework.

## 7. Data retention

| Data | Retention period |

|---|---|

| Firebase Analytics events | Up to **14 months** per Firebase's default retention setting |

| Firebase Crashlytics crash reports | Up to **90 days** |

| AdMob ad-interaction data | Per Google's retention schedule (typically up to **14 months**) |

| Purchase records | Retained by Google for the duration of your Google account |

| **All local data** (SAF URI, vault, PIN hash, preferences) | Retained on your device until you uninstall the App, clear App data via system settings, or delete individual items in-App |

When you uninstall the App, all local data is deleted by Android.

## 8. Your rights

You have the right to:

1. **Access** the personal data we process about you

2. **Rectify** inaccurate data

3. **Request erasure** of your data

4. **Restrict** or **object** to processing

5. **Data portability** — receive your data in a portable format

6. **Withdraw consent** at any time, without affecting prior lawful processing

### How to exercise your rights

- **For analytics and crash data:** disable collection at any time via **Settings → Privacy → Send anonymous usage data** in the App.

- **For ads consent (EEA/UK/CH only):** revisit your choice via **Settings → About → Privacy choices**.

- **For complete data deletion** of server-side records held by Google on our behalf: email us at **jay.noxoro@gmail.com** with the subject "Data deletion request" and we will action it within 30 days.

## 9. Children's privacy

The App is **not directed at children under 13** (or under 16 in some EEA jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided data to us, please contact us and we will delete it.

## 10. Security

We protect your data with industry-standard safeguards:

- **Encryption at rest** — vault items use AES-256-GCM via the Android Keystore (hardware-backed where supported)

- **Encryption in transit** — all communication with Firebase and AdMob uses TLS

- **PIN hashing** — your app-lock PIN is stored as a PBKDF2 hash with a 16-byte random salt and 10,000 iterations of HMAC-SHA-256; plain text is never persisted

- **No personally identifying server-side storage** by us — we operate no servers that store your personal data

No method of transmission or storage is 100% secure. If we become aware of a personal data breach affecting you, we will notify you as required by applicable law.

## 11. Permissions the App requests

| Permission | Why |

|---|---|

| **Storage Access Framework grant** (`OpenDocumentTree`) | Read the WhatsApp .Statuses folder you select |

| `READ_EXTERNAL_STORAGE` / `WRITE_EXTERNAL_STORAGE` (only on Android 8–9) | Legacy fallback for saving to gallery on older Android versions |

| `INTERNET` and `ACCESS_NETWORK_STATE` | Show advertisements and send anonymous analytics |

| `com.android.vending.BILLING` | Process the optional Pro purchase via Google Play |

| `com.google.android.gms.permission.AD_ID` | Use the Advertising ID for ad delivery (you can reset or limit this in Android Settings → Privacy → Ads) |

| `USE_BIOMETRIC` | Optionally unlock the App or vault with your fingerprint or face |

We do **not** request: contacts, location, microphone, camera, SMS, call logs, or media library access (other than the specific SAF grant you provide).

## 12. Advertising

The App displays banner advertisements and occasional interstitial / rewarded advertisements through Google AdMob. Pro users see no advertisements.

If you are in the EEA, UK, or Switzerland, you will see a consent dialog the first time the App requests an ad, where you can choose whether to receive personalized advertising. You can change this choice any time via **Settings → About → Privacy choices**. We forward your consent state to Google via Google Consent Mode v2, so AdMob respects your decision in real time.

For more information about how Google uses ad-related data, see https://policies.google.com/technologies/ads.

## 13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be notified via an in-App notice on next launch or a revised effective date on this page. Continued use of the App after a change constitutes acceptance of the revised policy.

## 14. Contact

For any privacy-related question or rights request:

- **Email:** jay.noxoro@gmail.com

- **Developer:** Noxoro

- **Play Store developer page:** https://play.google.com/store/apps/dev?id=5522634002596273429

Page updated

Google Sites

Report abuse