Privacy Policy — DualProfile

Effective Date: March 1, 2026

Quick Summary:

We do NOT access or store your messages
We do NOT store raw phone numbers
We do NOT sell or share your data
Phone numbers are hashed locally before transmission
Data is used strictly for DualProfile functionality

DualProfile does not read or modify your WhatsApp messages — ever. Our extension manages profile photo assignments and, with your explicit confirmation, scheduled photo changes to your own account. We have zero access to your chat content, message history, or conversation data.

What Data We Collect

We collect:

Hashed phone numbers (SHA-256, irreversible)
Profile photos users assign
Assignment timestamps (for sync logic)
Basic usage metadata required for functionality

We DO NOT collect:

Message content
Chat history
WhatsApp contacts list (beyond local processing)
Raw phone numbers
Device identifiers unrelated to functionality

How We Use Data

Data is used strictly to:

Match users for peer-to-peer profile photo display
Synchronize assigned profile photos across devices
Maintain system integrity and performance

Data Storage & Security

Phone numbers are hashed locally before leaving your device
No raw phone numbers are stored on DualProfile servers
Profile photos are stored using Cloudinary
Backend infrastructure is powered by Convex
All data transmission occurs over encrypted HTTPS connections

Data Sharing

We do NOT sell, rent, trade, or share user data with third parties.

Data is processed only to enable DualProfile functionality.

User Control

Users can:

Assign or remove profile photos at any time
Permanently delete assignments
Uninstall the extension to stop all syncing

How to Delete Your Data

You have three methods to delete your data:

1. Clear All Data in Settings Tab

Open the DualProfile extension settings and use the "Clear All Data" button to immediately delete all your assignments and photos.

2. Unassign Contacts Individually

Select specific contacts in the extension and remove their profile photo assignments to delete only that data.

3. Email for Full Server-Side Deletion

Email edwin.dualprofile@gmail.com with subject "Delete My Data" for complete server-side deletion within 7 days.

Security

All communication uses HTTPS encryption
Phone numbers are SHA-256 hashed before leaving your device
Profile photos are served through Cloudinary's secure infrastructure
No raw phone numbers or message content are ever stored

Third-Party Services

DualProfile uses:

Convex (backend infrastructure)
Cloudinary (image hosting)
Lemon Squeezy (payment processing, if user upgrades to Pro)

These providers process data solely to enable service functionality.

Extension Scope Clarification

DualProfile operates primarily as a visual overlay for WhatsApp Web. Scheduled Photos is the one exception: with your explicit tap to confirm, it uploads your chosen photo through WhatsApp's own profile photo screen, the same action you would take by hand. Every other part of DualProfile, including per-contact photo assignment, never touches WhatsApp's servers at all.

Data Retention

Data stored on our servers is retained until the user deletes their account or requests deletion via email. Uninstalling the extension stops all syncing but does not automatically delete server-side data.

Contact Information

For privacy-related questions, contact:
edwin.dualprofile@gmail.com