What we store, and what we never touch.

What we store

• Your account: email address, display name, a salted and peppered hash of your password, and the address and browser of each sign-in. If you sign in with Google, the identifier and email address Google gives us.
• Each linked number: its linked-device credentials, the label and color you gave it, its sync state and whether WhatsApp has restricted its sending.
• Messages and media for the numbers you link, so your history is there when you sign in and identical on every device. This includes messages sent from the phone outside MobileB, and messages the other side later deleted or edited, which stay on your copy and are labeled; whether your plan shows them to you is a display setting, not a storage one. WhatsApp normally sends linked devices only a marker for view-once content, so MobileB records that marker and cannot show the withheld payload; if WhatsApp does deliver the payload, MobileB retains and labels it. Disappearing messages are stored as ordinary messages because MobileB does not honor WhatsApp's disappearing timer, and the people you talk to should know a record is kept.
• Private contact names, tags, wallpapers and preferences you set inside MobileB. Private names never reach WhatsApp.
• Shares you create or accept, and their audit trail: who was invited, who accepted or declined, who replied, and every permission change, with time, IP address and device.
• Agent activity: for every request an agent makes, the tool, the time, the outcome, what it searched for and references to the messages it touched. Kept for 90 days, then deleted. The log stores references, never message text.
• Contact messages: if you use the form on this site, your name, email address, message and any company or team-size details you add are sent through our mail relay to the support mailbox and kept there as needed to answer and support the conversation.
• On-demand transcripts: when you or an agent you authorized asks to transcribe a voice note, audio message or video soundtrack, the resulting text and detected language are stored with the source media until the account is deleted. Repeating the request reads that stored result instead of processing the file again.
• Push subscriptions for the devices where you allowed notifications.
• Short operational logs used for reliability and abuse prevention, rotated by size, without message bodies or tokens. The ledger of events received from the WhatsApp session is kept for 14 days.
• A notice of your registration reaches the operator by email, push or a WhatsApp message to the operator's phone, carrying your email address, so new accounts can be approved and supported.

What we never do

• No selling or sharing of your data with advertisers or data brokers.
• No third-party analytics, tracking scripts, fonts or images, on this site or in the app. The content policy loads scripts, styles, fonts and images from our own origin only. The exceptions are the ones you start yourself: signing in with Google, and any assistant you connect.
• No reading or classifying your conversations for anything except delivering, storing and showing them to you and to the people and agents you explicitly grant.
• No forwarding of your address to the services we use on your behalf. Place searches and map tiles are requested by our servers from OpenStreetMap, so OpenStreetMap sees our address and the place you typed, never yours.

Who else can see a conversation

Our own systems first: ordinary conversations are decrypted and stored on our managed servers in order to deliver them to you, as the processing section below describes. Beyond that, only who you allow, in two ways, both revocable:

• Shares. A conversation, a category, a number or everything you share is visible to the MobileB user who accepted it, view only or with the right to reply, until the share expires or either side ends it.
• Agents. An assistant you connect sees the numbers and categories you chose on the consent screen, read only or with the right to send, until the date you chose or until you revoke it. Conversations shared to you by others are never visible to your agents.

Conversations you do not tag are invisible to any grant limited to a category. No administrator screen shows a user's chats, messages or media.

Advanced security

When you and another MobileB user enable advanced security in a conversation, its messages and files are encrypted on your devices with keys that exist only there. Our servers store and relay the encrypted form and hold no key for it. They know which conversations have it turned on and who turned it on, and nothing more. We cannot read the content, search it, share it or show it to an agent, and neither can anyone who obtains a copy of our database.

Where processing happens

Connections from your devices end at our managed servers. The sessions that talk to WhatsApp are linked-device sessions, joined through the same mechanism WhatsApp Web uses, and they run on those servers; that is why, for the MobileB session, WhatsApp sees our address rather than your device's (your phone still talks to WhatsApp as it always did), and why, like every linked device, our session decrypts messages in order to show them to you. Message content is handled only to deliver, store and display it to you and to the people and agents you granted. On-demand transcription runs on our own managed worker: the audio stays on our servers and is not sent to an outside speech service.

The few outside parties that touch any data, and what reaches them, are listed on the subprocessors page.

Retention and deletion

• Unlinking a number blocks new activity immediately and removes its linked-device credentials, with retries until WhatsApp confirms. Its stored history stays. Unlinking is not a deletion request.
• Single messages can be deleted for yourself. A single conversation cannot be deleted on its own today; whole-account deletion is the removal path.
• Deleting your MobileB account is requested by writing to us from the account's address. Access is blocked at once and a durable, asynchronous deletion begins: sessions, agent grants, shares, scheduled messages and push subscriptions are revoked; database records are removed; media that nothing else references is deleted after a safety period. A minimal completion record without content, email, phone number or identifiers is kept for audit and support.
• Logging MobileB out from WhatsApp's Linked devices on your phone ends our session as soon as WhatsApp reports it. The stored history remains until the account is deleted.
• Agent activity is deleted after 90 days. Expired sign-in sessions are removed by a routine cleanup within a week of expiring.

Your rights

You can ask for a copy of the data held for your account, or for its correction or deletion, by writing to hello@mobileb.net from the email address on the account; we may ask you to confirm it is you. We acknowledge within one business day and complete the request within one month, and within 45 days for requests under California law. There is no self-serve export yet; when there is, it will be listed here.

If you are not a MobileB user but a MobileB user has messaged you, we hold your messages inside their account, as WhatsApp does on their phone. Write to the same address and we will help you reach the account holder or, where the law requires it, act on your request ourselves.

Changes

If this policy changes in a way that matters, we will say so here with a new date, before the change takes effect.

• 21 August 2026: rewritten for the new site. Advanced security, shares, agent activity and deletion described as built; the earlier paragraph about an organization seeing shared conversations removed, because no organization feature exists; transport-cipher wording removed.
• 9 August 2026: first version.

MobileB is an independent product and is not affiliated with, endorsed by or supported by WhatsApp or Meta. Messages you exchange remain subject to WhatsApp's own terms.