WsChat Privacy Policy (Universal Version)

Last updated: October 28, 2026

Effective date: October 28, 2026

Lumora (“we,” “us,” or “our”) operates WsChat. We value your privacy and the security of your personal data. This Policy explains how we access, collect, use, store, share, and protect data when you use WsChat, and how you can exercise your rights.

Please read this Policy carefully before using WsChat. We process data only as necessary for the relevant features. The existence of a feature does not itself cause us to process its associated data when you have not enabled or used it. For permissions requiring your authorization or processing beyond ordinary expectations, we will explain the purpose through in-app notices before processing and obtain the necessary authorization.

1. Scope

This Policy applies to WsChat downloaded through the Apple App Store or Google Play and its account management, third-party account connections, message management, AI assistance, translation, speech-to-text, notifications, memberships, AI credits, customer support, and related services.

Available features and service configurations may differ by system version. The corresponding processing descriptions in this Policy apply only to the features you actually use and the processing those features require.

When you use app stores, third-party messaging platforms, or other independently provided services, those providers also process data under their privacy policies. We remain responsible for our own processing and processing for which we are legally accountable. Using third-party services does not relieve us of those obligations.

2. Data We Process

2.1 WsChat Account Data

WsChat supports email sign-in only. When you register, sign in, or manage an account, we may process:

  1. Account ID;
  2. Email address and verification status;
  3. Sign-in credentials, authentication tokens, and account security records;
  4. Sign-in times, devices, and unusual sign-in records; and
  5. Language, notification, account label, and other preferences you set.

This data is used to create and manage accounts, verify identity, protect account security, synchronize settings, and provide continuing services.

2.2 Third-Party Account Connection Data

When you choose to connect a third-party messaging account, we may process the following as necessary to establish and display that connection:

  1. Third-party account identifiers, profile images, names, numbers, or nicknames you set;
  2. Connection, authorization, and online status and linked device information;
  3. Labels such as work, personal, family, or custom labels;
  4. Conversation lists, contact or group names, unread counts, and message status; and
  5. Session tokens or other technical credentials needed to establish and maintain the connection.

Connection credentials are used to verify authorization and maintain the connection. We will restrict access and will not use them for purposes unrelated to the services you request. After you disconnect an account or delete your WsChat account, connection information and credentials are handled under Section 7.

We will not ask you to provide third-party account passwords, verification codes, or backup keys through customer support or feedback channels. You can disconnect third-party accounts through the options provided in the application.

2.3 Messages and Communications Data

When you view, manage, or send messages through WsChat, we may process the following depending on the features you use:

  1. Sender, recipient, conversation, or group identifiers;
  2. Text, images, voice messages, videos, files, and other message content;
  3. Message times, sending status, read status, and necessary synchronization information;
  4. Content you have entered but not sent; and
  5. Translation, transcription, or AI-generated results.

This data is used to display and synchronize conversations, send messages, handle attachments, and provide assistance features you choose to use. Synchronization, sending, or external assistance services may require content to be transmitted and processed between your device, WsChat, and relevant service providers. We process only the content necessary for the feature. Before sending personal data to external AI, translation, or speech providers, we will provide the explanations and obtain the permissions required under this Policy. Providing communication tools does not give us ownership of your message content.

Messages may include other people’s personal data. You must have authority to process and send the content through WsChat and must not upload or distribute data you are not authorized to process.

2.4 AI Assistance Data

When you choose to use smart replies, AI conversation starters, or other AI features, we may process:

  1. Goals, prompts, modification requests, and feedback you enter;
  2. Current messages or limited conversation context necessary to understand the request;
  3. Suggested replies, conversation starters, and revised results generated by AI; and
  4. Feature usage, generation counts, and AI credit consumption records.

This data is used to generate requested results, maintain feature safety, calculate allowances, and troubleshoot issues. Before sending your personal data to a third-party AI provider, we will explain the recipient, data categories, and purpose and obtain your express permission. Where separate consent is required by law, we will obtain it separately. Accepting this Policy or connecting a messaging account does not mean you have agreed to send all chat history to an AI provider.

You may refuse the sharing or stop using AI features without affecting other features that do not depend on that processing. Review generated content before sending it. Do not submit personal data you are not authorized to process, passwords, payment credentials, or other highly sensitive information to AI features.

2.5 Translation Data

When you use manual or automatic translation, we may process selected message text, source and target languages, and translation results. Automatic translation operates only within the accounts and language settings you select.

If an external provider is needed, we will explain the recipient, data categories, and purpose and obtain your consent where required. We send only content necessary to complete the translation and restrict use for unrelated purposes. You may turn off automatic translation to stop further automatic translation processing.

2.6 Voice and Transcription Data

When you use voice message or transcription features actually provided in the application, we may process:

  1. Voice messages or recordings you select for transcription;
  2. Audio duration, language, and necessary technical parameters;
  3. Transcription results and your revisions; and
  4. Feature status and language preferences.

We request and use microphone permission only when you record audio or use features requiring live audio capture. Playing existing audio or transcribing an existing audio file does not itself require microphone access. We will not continuously use the microphone on behalf of a feature when you are not using that feature to capture sound. If system speech recognition requires permission, we will explain and request it when used. Before sending audio to an external provider, we will explain the recipient, data, and purpose and obtain the required consent.

2.7 Device, Log, and Diagnostic Data

To maintain application operation, analyze usage, fix faults, and prevent abuse, we may process:

  1. Device model, operating system name and version, application version, language, and time zone;
  2. Application instance or installation identifiers, push tokens, and necessary device identifier information;
  3. IP address, network type, access times, and feature usage events;
  4. Crash times, crash stacks, thread and process status, and error logs;
  5. CPU architecture, memory, disk space, application status, and performance data; and
  6. Application identifiers (package name or Bundle ID), version numbers, and other information needed to diagnose compatibility issues.

Accepting this Policy does not authorize tracking across applications or websites. See Section 5.6 for attribution data and applicable permission and consent requirements.

2.8 Purchase and Membership Data

When you purchase memberships or credits through the app store, we may receive and process:

  1. Transaction identifiers, original transaction identifiers, product identifiers, purchase times, transaction status, and credentials needed to verify purchases;
  2. Membership status, validity, renewal status, and benefit records;
  3. Credit acquisition, usage, adjustment, and balance records; and
  4. Refund, reversal, and abnormal transaction records.

This data is used to verify purchases, issue and synchronize benefits, calculate credits, handle refunds, and prevent payment fraud. The app store processes store account and payment information. We do not receive your store account password or full payment card details; see Section 5.3.

2.9 Customer Support Data

When you contact support or submit appeals, technical feedback, or deletion requests, we may process account details, contact information, problem descriptions, screenshots, order receipts, communications, and other information you provide that is necessary to resolve the issue.

Do not include account passwords, verification codes, full payment card numbers, or unrelated sensitive information in feedback.

3. Device Permissions

3.1 Camera

Camera access is used to scan QR codes, connect accounts, or use photography features you select. Refusing permission does not affect unrelated features.

3.2 Microphone

We request and use microphone permission only if the feature you use needs recording or sound capture. We do not access the microphone merely to play existing audio or transcribe an existing audio file.

3.3 Photos, Videos, or Files

These capabilities are used to select and send images, videos, or files you specify. When using a system picker, we receive only the items you choose to provide. If a feature requires photo library permission, we will explain its purpose and request authorization separately. Receiving permission does not cause us to process unselected content unrelated to the feature.

3.4 Notifications

Notifications display new messages, account status, security reminders, and service notices. You can disable them in device settings.

3.5 Speech Recognition

If a feature needs system speech recognition authorization, we will explain its purpose and request permission before use according to that system’s requirements, to convert selected speech into text. You may refuse or revoke permission without affecting other features that do not depend on it.

3.6 Managing Permissions

Find WsChat in your device’s system settings to manage permissions for the camera, microphone, photos, speech recognition, notifications, and other available options. Settings paths and labels may vary by system version or device.

Withdrawing a permission restricts future access and may affect features that depend on it, but does not affect other features. To request deletion of data already processed, contact us under Section 9.

4. Purposes of Use

We use data as necessary to:

  1. Create, sign in to, and manage WsChat accounts;
  2. Connect, display, and manage authorized third-party accounts;
  3. Synchronize, display, send, and manage messages;
  4. Provide AI replies, conversation starters, translation, and transcription;
  5. Provide memberships, credits, order handling, and after-sales support;
  6. Send notifications and retain feature preferences;
  7. Analyze product use and improve performance and compatibility;
  8. Identify abnormal activity and prevent fraud, spam, and account abuse;
  9. Handle inquiries, complaints, appeals, refunds, and data rights requests; and
  10. Meet applicable legal requirements and protect the lawful rights and interests of users, us, or third parties.

We do not sell personal data obtained through WsChat to third parties or use message content for advertising unrelated to the described services.

5. Third-Party Services and Data Sharing

5.1 Sharing Principles

We share data with service providers acting on our behalf or other lawful recipients only as necessary to provide requested features, maintain security, complete transactions, or meet legal obligations. Through contracts, access controls, or other reasonable methods, we require providers to process data for agreed purposes and use appropriate security measures.

5.2 Authentication, Notifications, and Diagnostics

We use Firebase services provided by Google LLC for authentication, notifications, usage analysis, crash diagnostics, and remote configuration. The features and configurations you use determine the data involved:

  1. Firebase Authentication supports account authentication and sign-in, processing necessary account information, authentication status, and security information;
  2. Firebase Cloud Messaging supports message and service notifications, processing push tokens, installation information, and data needed for notifications. Remote notifications on iOS also involve Apple Push Notification service (APNs);
  3. Firebase Analytics analyzes application usage, processing feature usage events, application interactions, instance or installation identifiers, and device and application environment information;
  4. Firebase Crashlytics diagnoses application faults, processing crash stacks, error logs, and relevant device and application environment information; and
  5. Firebase Remote Config delivers feature parameters and configurations, processing configuration requests and instance and environment information needed to supply configurations.

See Firebase Privacy and Security for Firebase processing information and the Apple Privacy Policy for Apple information.

5.3 App Store Transactions and System Services

When you download the application, purchase services, or manage subscriptions through an app store, the store processes the relevant account and transaction data. We receive only the information necessary to verify orders, synchronize benefits, and provide after-sales support. We do not receive store account passwords or full payment card details. For the store’s own data practices, see the Apple Privacy Policy or Google Privacy Policy.

When you use system photo or file selection, speech recognition, or similar features, the device system or service provider may also process relevant data under its own rules. Where permission or consent is required, we will explain the purpose and obtain only the data needed for the feature you choose.

For Apple users, we comply with Apple's Standard End User License Agreement (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/.

5.4 AI, Translation, and Speech Services

To provide AI generation, translation, or speech recognition, we may send necessary inputs, limited conversation context, or audio to external technical providers. We will explain within the relevant feature what will be sent, to whom, and why, and obtain the required express permission before sending it. We will not provide unrelated data for this purpose and will restrict the purposes and scope of processing.

The data involved in assistance features includes:

  1. AI replies and conversation starters: prompts and limited conversation context needed to generate the requested result;
  2. Translation: selected text and source and target languages; and
  3. Transcription: selected audio, language, and necessary technical parameters.

Content you submit to AI, translation, or speech assistance features and the corresponding outputs are not used for model training. Third-party processing is limited to the requested feature and necessary service purposes described in this Policy. Personal data sharing must follow the required disclosures and permissions.

You may refuse sharing, turn off automatic translation, or stop using the relevant feature. Other features that do not depend on this processing remain available.

5.5 Third-Party Messaging Platforms

When you choose to connect or use a third-party messaging account, relevant account, conversation, and message data is transmitted between WsChat and that platform according to your actions. This processing supports the connection, synchronization, and sending features you request.

5.6 Adjust Attribution Services

WsChat integrates Adjust attribution services to analyze relationships between promotional sources, application installations, and subsequent use, and assess promotional effectiveness. These services may involve installation or instance identifiers, device and application environment information, IP addresses, and events such as installation, application opening, or purchases. Personal data processing must be limited to attribution needs.

Attribution processing must comply with applicable law, device privacy settings, and app store rules, including required notices and consent. Processing on iOS that constitutes tracking as defined by Apple also requires App Tracking Transparency (ATT) permission, which you can manage in system settings. Refusing optional tracking does not affect other features that do not depend on it. See the Adjust Privacy Policy.

5.7 Legal Requirements and Protection of Rights

We may lawfully provide necessary data in response to lawful requests by competent authorities, or where genuinely necessary to protect personal safety or property, investigate fraud or security incidents, or establish or exercise legal rights. We will review the legality of requests and limit disclosure as permitted by law.

6. International Data Transfers

WsChat may serve users in different countries or regions. Depending on your location, connected platforms, and infrastructure used by cloud, Firebase, AI, translation, or speech providers, data may be processed outside your country or region.

For international transfers, we will follow applicable legal procedures, limit the scope, use secure transmission, and apply appropriate data protection terms or other safeguards. Where separate notice or consent is legally required, we will provide it before transfer. You can use the contact details in Section 12 to ask about safeguards applicable to your data transfers. International transfers will not change the purposes described in this Policy.

7. Retention and Deletion

7.1 Retention Principles

We retain data only for as long as necessary for the purposes in this Policy, maintaining accounts and services, resolving disputes, ensuring security, and meeting legal obligations. We consider the data type, purpose, account status, security risks, and applicable legal requirements when determining retention.

7.2 Retention by Data Type

  1. Account information and settings are generally retained while the account exists;
  2. Third-party connection information is generally retained until you disconnect the account or delete your WsChat account;
  3. Message caches and translation and transcription results are retained as needed for the feature and handled through the relevant deletion process after content deletion, disconnection, or account deletion;
  4. AI generation and credit usage records are retained as needed to provide features, handle complaints, and prevent abuse;
  5. Crash, analytics, and security logs are retained as needed for analysis, fraud prevention, and security;
  6. Necessary order and transaction records may be retained for financial, refund, anti-fraud, or legal obligations; and
  7. Customer support and appeal records are retained as needed to complete handling, resolve disputes, and meet legal obligations.

Where no single fixed number of retention days applies, we use the shortest period necessary to complete the service, address unresolved issues, and meet legal obligations. Data no longer needed will be deleted or irreversibly anonymized.

7.3 Account Deletion

Currently, deleting a WsChat account requires contacting customer support. Use in-app Customer Support, Help and Feedback, or [email protected], state that you wish to delete the account, and provide necessary information such as your account ID or registered email. We will process deletion after necessary identity verification, explanation of the consequences, and your confirmation. You may still apply by email if you cannot sign in or have uninstalled the application.

See the WsChat Account Deletion Instructions for the information required, steps, and consequences. We will not require payment, unrelated documentation, or a reason for deletion as a mandatory condition.

After deletion, we will stop providing the relevant services and delete or anonymize account-associated data. Data necessarily retained for transactions, security, fraud prevention, disputes, or legal obligations will be restricted and deleted or anonymized when retention purposes end. Signing out, disconnecting third-party accounts, or deactivating an account is not equivalent to deleting a WsChat account.

If backup copies exist, they may take longer to clear for technical or security reasons. During that time, the data will not be restored for ordinary business processing and will be overwritten or deleted within the backup update cycle.

Account deletion usually takes approximately five business days. We will perform necessary identity verification and inform you of the result. If security incidents, disputes, or legal obligations prevent immediate completion, we will explain the reason and subsequent arrangements. Where applicable law specifies a deadline, we will comply with it.

Deleting a WsChat account does not automatically cancel subscriptions, delete third-party accounts, or recall messages received by others. Before deletion, use the store account used for purchase to cancel unwanted renewals. Management links are provided in the WsChat Account Deletion Instructions. Deletion, refunds, and unfulfilled paid benefits follow the WsChat Terms of Service, app store rules, and applicable law.

8. Data Security

We will use technical and organizational measures appropriate to the risks of personal data processing to prevent unauthorized access, disclosure, alteration, or loss, and restrict use by personnel and service providers.

No network or storage system can guarantee absolute security. If a data security incident may affect your rights or interests, we will take remedial steps required by law and, where necessary, notify you through in-app notices, email, or other reasonable methods.

9. Your Data Rights

Depending on applicable law, you may have the right to:

  1. Understand how we process your data;
  2. Access or obtain data relating to you;
  3. Correct inaccurate or incomplete account information;
  4. Delete data or your account;
  5. Withdraw consent or disable optional features;
  6. Restrict or object to certain processing;
  7. Receive a portable copy of data where applicable; and
  8. Complain or appeal about processing.

You may manage relevant options through account and feature settings actually provided in the application and your device’s permission and notification settings. For account deletion, access, export, correction, data deletion, or other rights, contact in-app support or [email protected]. To protect accounts and other people’s data, we may reasonably verify identity before handling access, export, correction, or deletion requests. We will not discriminate against you for lawfully exercising data rights.

10. Children and Minors

WsChat is not directed at children below the age at which they may independently use services of this kind in their country or region. Minors should use the services under a parent’s or legal guardian’s guidance.

If we discover that children’s personal data has been processed without appropriate authorization, we will take reasonable steps to stop the processing and delete the data. Guardians who believe a child has provided data to WsChat may contact us.

11. Policy Updates

We may update this Policy to reflect changes to features, processing, laws and policies, or third-party services.

For updates involving new sensitive data, changed purposes, important new recipients, or other material effects on your rights or interests, we will notify you through in-app prompts, page notices, or other reasonable methods and obtain your consent again where applicable law requires.

An updated Policy applies from its publication or notification date and does not retroactively change processing already completed and lawfully established before the update.

12. Contact Us

For questions, complaints, or requests about this Policy, data processing, or your data rights, contact us through:

We will promptly verify requests and respond and handle them within the deadline set by applicable law, or within a reasonable period if no specific legal deadline applies. If we cannot meet a request, we will explain why and describe available next steps.