DualProfile does not read or modify your WhatsApp messages — ever. Our extension operates as a visual overlay that only manages profile photo assignments. We have zero access to your chat content, message history, or conversation data.
What Data We Collect
We collect:
- Hashed phone numbers (SHA-256, irreversible)
- Profile photos users assign
- Assignment timestamps (for sync logic)
- Basic usage metadata required for functionality
We DO NOT collect:
- Message content
- Chat history
- WhatsApp contacts list (beyond local processing)
- Raw phone numbers
- Device identifiers unrelated to functionality
How We Use Data
Data is used strictly to:
- Match users for peer-to-peer profile photo display
- Synchronize assigned profile photos across devices
- Maintain system integrity and performance
Data Storage & Security
- Phone numbers are hashed locally before leaving your device
- No raw phone numbers are stored on DualProfile servers
- Profile photos are stored using Cloudinary
- Backend infrastructure is powered by Convex
- All data transmission occurs over encrypted HTTPS connections
Data Sharing
We do NOT sell, rent, trade, or share user data with third parties.
Data is processed only to enable DualProfile functionality.
User Control
Users can:
- Assign or remove profile photos at any time
- Permanently delete assignments
- Uninstall the extension to stop all syncing
How to Delete Your Data
You have three methods to delete your data:
1. Clear All Data in Settings Tab
Open the DualProfile extension settings and use the "Clear All Data" button to immediately delete all your assignments and photos.
2. Unassign Contacts Individually
Select specific contacts in the extension and remove their profile photo assignments to delete only that data.
3. Email for Full Server-Side Deletion
Email edwin.dualprofile@gmail.com with subject "Delete My Data" for complete server-side deletion within 7 days.
Security
- All communication uses HTTPS encryption
- Phone numbers are SHA-256 hashed before leaving your device
- Profile photos are served through Cloudinary's secure infrastructure
- Backend runs on encrypted AWS infrastructure
- No raw phone numbers or message content are ever stored
Third-Party Services
DualProfile uses:
- Convex (backend infrastructure)
- Cloudinary (image hosting)
- Lemon Squeezy (payment processing, if user upgrades to Pro)
These providers process data solely to enable service functionality.
Extension Scope Clarification
DualProfile operates as a visual overlay for WhatsApp Web and does not modify WhatsApp's servers or core systems.
Data Retention
Data stored on our servers is retained until the user deletes their account or requests deletion via email. Uninstalling the extension stops all syncing but does not automatically delete server-side data.