Privacy Policy
1. Who we are and scope
HK MobiUnity Technology Limited ("we", "us") provides Dual Messenger and this product website. This policy explains information handled by the app, connected services, and website. Contact us at support@mobiunityhk.com about privacy or data requests.
2. Imported conversations and local information
When you choose to import a WhatsApp export, the app reads its messages, participant names, timestamps, and included media or files to display backups and calculate chat statistics. Imported files, groups, parsed records, statistics, app preferences, and AI conversation history are stored on the device. Backups and statistical analysis use files you choose to import, rather than automatically importing messages from WhatsApp Web. The app also stores an app/device identifier in secure storage; on iOS this is based on the vendor identifier or a generated identifier.
3. Optional AI analysis
AI analysis is an online feature. Before upload, the app asks for your consent to send the complete imported chat file to our application server and process it through Kimi’s official API. This may include participants’ names, messages, dates, and other personal information contained in that file. Your questions, the participant name selected for analysis, and a device-associated file reference are sent to support the session; answers are returned and may be saved in the local AI history. Submit only information you are entitled to share, and avoid unnecessary sensitive information. Declining the AI upload request prevents that upload and analysis; it does not itself delete files already imported or data submitted in a previous session.
4. WhatsApp Web sessions
If you use web chat, WhatsApp receives information through its own web service and linked-device login. Link only accounts you own or are authorized to manage. The first web session uses persistent website storage, including login-related website data; additional sessions use temporary website storage. Session previews are screenshots saved locally and may reveal visible chat information. Closing or switching a view does not unlink the account. Manage or sign out of sessions in WhatsApp Settings → Linked Devices. WhatsApp’s own terms and privacy practices apply to its service.
5. Usage analytics and technical information
The app records screen visits, actions, event times, session identifiers, app and system versions, subscription events, and associated diagnostic status. Our analytics endpoint receives an app/device identifier, IP address, approximate country/city information, and event-specific fields. Events that fail to send may be queued locally and retried. Firebase Analytics receives app events and processes app-instance identifiers, usage/session information, and device information according to the SDK configuration. On supported iOS versions, advertising identifier access depends on system authorization and availability. We use these services to understand usage, troubleshoot failures, and improve the product.
6. Attribution, purchases, and network lookups
Apple Ads attribution is used to understand installation sources. The app’s attribution service sends the app/device identifier, device model, operating system, app version, locale, IP-derived country/region/city and time zone, attribution tokens, and available attribution results to our backend. Purchase-related records may include product and transaction identifiers, original transaction identifiers, purchase dates, price, entitlement state, and cancellation status; Apple processes the payment. The app does not ask you to enter card details into our own purchase form. Network lookup providers may receive your IP address: ifconfig.me, icanhazip.com, checkip.amazonaws.com, and ip-api.com. IP-derived location is distinct from GPS location.
7. Support and diagnostics
If you submit in-app feedback, we receive your email address, subject, message, and app/device identifier. Email support receives the message, address, and any attachments you choose to send. Diagnostic reports can include device model, operating system, screen size, locale, app language/version, network type, IP address, and an error description. For chat date-format parsing failures, the unparsed date/time string may be included. Please do not send passwords or unnecessary private conversations to support.
8. Recipients and purposes
Information is received by our backend services for AI requests, analytics, attribution, subscription records, diagnostics, and support. Kimi receives information submitted for AI analysis. Google/Firebase receives analytics information. Apple handles App Store purchases and attribution services; WhatsApp/Meta handles linked web sessions. Network lookup services receive requests used for IP-based network/location information. Hosting and email providers process website requests and support communications. Applicable legal requests or necessary protection of users and service security may also require disclosure. Imported chat content is not automatically sent to Firebase merely because the analytics SDK is present; selecting AI analysis is a separate data flow.
9. Choices, deletion, and privacy requests
You can decline AI upload, manage app tracking permission in iOS Settings → Privacy & Security → Tracking, delete backups or analysis entries using the available app controls, and unlink sessions in WhatsApp. The app does not provide a general switch that disables every analytics and attribution request; denying tracking permission does not disable all operational network requests. Leaving an AI session requests deletion of its server-side session cache. An interrupted or offline request cannot confirm deletion, and a request is not proof that every provider copy has been erased. Deleting a local entry does not automatically remove server records, exported/shared copies, or device backups. Secure-storage identifiers and external copies may remain after uninstalling. Contact support@mobiunityhk.com to request access, correction, deletion, restriction, or other rights available under the law that applies to you. Please identify the app and describe your request; we may ask for proportionate verification. You may also contact your relevant data protection authority. Withdrawing consent does not invalidate processing that was lawful before withdrawal.
10. Security and service limitations
We use device access controls and the security mechanisms available in the app and its services, but no storage or transmission method is risk-free. WhatsApp’s in-service end-to-end encryption does not extend automatically to exported files or AI uploads. Some IP-location requests in the currently integrated dependency use HTTP; do not assume every network request is end-to-end encrypted. Protect your device, exported files, and linked accounts. Where applicable law requires consent, another lawful basis, or transfer safeguards, these requirements remain applicable to the relevant processing.
11. Website, children, and updates
This static product website does not embed an analytics tag, advertising script, or tracking cookie. Your browser and hosting service still process ordinary request information, such as IP address, browser details, URL, and access time. Following an external link subjects the destination visit to that service’s practices. The app is a general-purpose tool, not designed specifically for children; anyone unable to consent under applicable law should use it only with appropriate authorization and should not submit others’ information without permission. Contact support@mobiunityhk.com if you believe a child’s information was submitted improperly. We may update this policy as the service changes; the revision date identifies this text version, not a claim that an unpublished change is already in effect.
12. Third-party information
See Firebase privacy information, Google Analytics data collection, Apple’s privacy policy, and WhatsApp’s privacy policy. These notices supplement, rather than replace, our explanation of how the app uses each service.