Privacy Policy

Your data stays on your phone.

This policy explains what WhatsAyX processes, what it never collects, and the few cases where data leaves your device because you asked it to.

Effective: 8 October 2026Last updated: 24 October 2026App: WhatsAyX (ayx.whatsapp)

No account

You never sign up with us. There is no WhatsAyX login.

No cloud by default

There is no WhatsAyX server that receives your messages or contacts. The only cloud feature is an optional, encrypted backup of your own settings to your own Google Drive — off unless you turn it on.

No tracking

No ads, no analytics SDKs, no profiling.

You're in control

Log out or uninstall and the local data is gone.

1. Who we are

WhatsAyX ("the app", "we") is an Android app developed by imayx, an independent developer. The app runs a WhatsApp automation gateway locally on your own device.

We do not operate a backend for the app. Because of that, we are not able to see your messages, contacts, or credentials.

2. Data processed on your device

To work, the app handles the following data locally. It is stored in the app's private storage and is not sent to us.

DataWhy it's needed
Session credentialsKeep your linked WhatsApp session connected. Stored in app-private storage excluded from backups.
Messages & media metadataShow chats, run auto-reply, scheduling, anti-delete and reactions.
Contacts & groupsDisplay names and groups synced from your linked session.
Rules & settingsYour keywords, replies, schedules, webhook URLs and preferences.
Local logsTroubleshooting inside the app. Sensitive values are redacted.

3. What we do not collect

  • We do not collect your name, phone number or location. If you use the optional Google Drive backup below, the app shows your Google account email on your device only — it never reaches us.
  • We do not receive your messages, contacts, media or session credentials.
  • We do not use advertising IDs, analytics or crash-reporting SDKs.
  • We do not sell, rent or share personal data, because we do not have it.

4. Third parties and data you choose to send

The app connects to outside services only for features you use:

  • WhatsApp servers. To send and receive messages, the app talks to WhatsApp's servers using the same protocol as a linked device. WhatsApp's own terms and privacy policy apply to that traffic.
  • AI providers (optional). If you enable AI auto-reply and add your own API key, the text of the incoming message is sent to the provider you picked to generate a reply. That provider's policy applies. Keyword auto-reply does not send anything out.
  • Webhooks (optional). If you add a webhook URL, incoming message events are sent to that URL. You are responsible for the server that receives them.
  • Updates and downloads. If a build offers an in-app link to download files, your device contacts that host directly.
If you turn on a feature that sends data to a third party, that data leaves your device at your request and is governed by that third party.

5. Google Drive backup (optional)

Settings → Sync offers an optional backup of your own app settings to your own Google Drive. It is off until you sign in and use it. If you never sign in with Google inside the app, no Google data is accessed at all.

  • Scope. The app requests only the drive.file scope, plus your basic account identity (email and profile name). drive.file means the app can see and manage only files it created itself — it cannot browse, read, or change anything else in your Drive.
  • What is created. One folder, "AyX Backup", holding two files: ayx-settings-backup.ayxbak — a backup of the settings you entered into the app (your own third-party AI API keys and prompts) — and ayx-backup-key.ayxkey, the encryption key for that backup, so you can still restore after a phone reset or a fresh install.
  • Encryption. The backup is encrypted on your phone (AES-256-GCM) before upload. What sits in Drive is ciphertext, and it travels directly between your phone and Google over HTTPS — it never passes through, and is never stored on, any server of ours. Because the key file sits in the same folder (that is what makes restore after a reset possible), anyone who gains access to your Google account could in principle decrypt the backup — protect that account with a strong password and 2-Step Verification.
  • Your email. Your Google account email is shown inside the app so you know which account the backup belongs to, and is stored only on your device.
  • Never backed up. No chats, messages, media, call history, contacts, or WhatsApp login/session data are ever sent to Google Drive.
  • Never shared. This data is never sold, shared with any third party, used for advertising or analytics, or read by any human at imayx.
  • Delete or revoke. Delete the "AyX Backup" folder in Drive to erase the backup permanently, or revoke the app's access any time from your Google Account → Security → third-party connections. You can also sign out inside Settings → Sync.
WhatsAyX's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Permissions

PermissionUsed for
InternetConnecting to WhatsApp, and to AI providers or webhooks you configure.
Foreground serviceKeeping the gateway running in the background, shown by a notification.
NotificationsShowing the service status notification.
Run at startup (if enabled)Optionally resuming the gateway after a reboot.

The app does not request access to your SMS, call logs, camera, microphone or location.

7. Storage and security

  • The gateway listens only on 127.0.0.1 (your device), so other devices on your network cannot reach it.
  • Credentials are kept in private app storage that is not included in Android backups.
  • Secrets are redacted from the in-app logs.

No system is perfectly secure. Keep your phone locked, avoid installing the app from untrusted sources, and do not share exported data.

8. Your control

  • Log out a session in the app to remove its credentials.
  • Clear data in Android settings, or uninstall the app, to delete everything the app stored.
  • Unlink the device from WhatsApp → Linked devices to revoke access at the source.
  • Drive backup: sign out in Settings → Sync, delete the "AyX Backup" folder in Google Drive, or revoke access from your Google Account.

Since we hold no copy of your data, we cannot export or delete it on your behalf. You can do both directly on your device.

9. Unofficial app notice

WhatsAyX is independent and is not affiliated with, authorized by or endorsed by WhatsApp LLC or Meta Platforms, Inc. WhatsApp is a trademark of its owner.

Using unofficial clients or automation can violate WhatsApp's terms of service and may lead to account restrictions or bans. You use the app at your own risk and are responsible for complying with applicable laws and the terms of the services you connect to. Do not use it for spam or unsolicited bulk messaging.

10. Children

The app is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children.

11. Changes to this policy

If this policy changes, we will update the date at the top of this page. Material changes will be reflected here before they take effect.

12. Contact

Questions about this policy? Email raju@imayx.in, or visit the developer page.