Privacy Policy

Effective Date: 1 July 2026

1. Introduction

Ghosty (“we”, “our”, or “us”) is a WhatsApp companion app developed by Abdullahi Hassan Dan-Ali (CypherX Labs). We are committed to protecting your privacy. This Privacy Policy explains how we handle information when you use Ghosty.

Core Promise: Your personal content – messages, media, and creative designs – is processed entirely on your device. Nothing you type, create, or save ever leaves your phone without your explicit action (e.g., sharing).

2. Information We Do NOT Collect

Your WhatsApp messages, contacts, or media files.
Your phone number or WhatsApp account details.
Contents of your Privacy Vault or Status Saver downloads.
Location data, biometric data, or payment information.

All data stays local. We never upload, store, or share it.

3. Information That May Be Collected

3.1 Advertising & Ad Performance

Ghosty displays advertisements provided by Google AdMob and its mediation partners: Pangle, InMobi, and IronSource. These partners may collect device identifiers (such as the Android Advertising ID), IP address, and usage data to deliver, measure, and—where you have given consent—personalize advertisements.

You can manage ad personalization preferences through the Google consent form shown on first launch, or at any time via your device's Settings → Google → Ads menu. For more information, please review the privacy policies of the individual ad networks.

3.2 Crash Reporting

We use Firebase Crashlytics to collect crash reports when the app unexpectedly stops. These reports include stack traces, device model, OS version, and an anonymised installation ID. They help us fix bugs and improve stability.

3.3 On‑Device AI Features

Ghosty uses on‑device artificial intelligence to provide two features:

Translation: Google ML Kit downloads language models to your device to translate messages without sending content to any server.
Ghost Digest (Summarization): When you request a summary, Gemini Nano (an on‑device model) processes the selected messages locally to generate a brief overview. No messages leave your device during this process.

All AI models are stored and run entirely on your device. Your message content is never transmitted to us, Google, or any third party.

4. Notification Access

Ghosty offers features like Ghost Reader (viewing message history) and Ghost Reply (automated replies). These require the Notification Listener permission.

Local processing only: Incoming notification content is read and stored solely on your device. No message data is ever transmitted to remote servers.
Ghost Reply: If you enable this feature and set up rules, the app may send automated replies based on your configurations. All rule processing and message generation happens on‑device.
User control: You can disable notification access at any time from Android Settings → Apps → Ghosty → Notification access.

5. How We Use Your Information

To display ads (free version only) – via Google AdMob.
To analyse app stability and fix crashes – via Firebase Crashlytics.
To enable on‑device features (Status Saver, Ghost Reader, Ghost Reply, translation, etc.) – all processed locally.

Storage & Media Access: Ghosty requests storage permissions solely to save and retrieve statuses for the Status Saver and Privacy Vault features. These files remain on your device and are never uploaded to any server.

We do not sell, rent, or share your personal data with anyone. The only data that leaves your device is the anonymised ad and crash information described above.

6. Third‑Party Services

Ghosty uses the following third‑party services, which have their own privacy policies:

Google AdMob – for advertising. Privacy policy
Pangle – for advertising. Privacy policy
InMobi – for advertising. Privacy policy
IronSource – for advertising. Privacy policy
Firebase Crashlytics – for crash reporting Privacy policy
Google Play Billing – for in‑app purchases Privacy policy
Google ML Kit – for on‑device translation Privacy policy

7. Data Security

All local data is stored in a secure, sandboxed app directory. The Privacy Vault uses AES‑256‑GCM encryption via the Android Keystore when you enable it. Because no personal content is transmitted to external servers, the risk of a data breach is minimal.

8. Your Rights & Choices

Opt out of personalised ads: Use the consent dialog shown on first launch, or go to Android Settings → Google → Ads → Opt out of Ads Personalisation.
Delete local data: You can clear cached statuses, delete vault files, or clear Ghost Reader history from within the app. Uninstalling Ghosty removes all local data.
Crash reporting: You cannot opt out of basic crash reports as they are essential for app stability, but they contain no personal information.

Ghosty does not require user accounts. All data is stored locally on your device, and no personal content is retained on our servers. Because no cloud account exists, there is no remote account or data to delete. You can remove all local data by uninstalling the app or using the clear‑data options described above.

For any privacy requests, contact us at the email or phone number below.

9. Children’s Privacy

Ghosty is not intended for children under 13. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be posted at this URL. Material changes will be notified within the app.

11. Contact Us

Developer: Abdullahi Hassan Dan-Ali (CypherX Labs)

Email: privacy@cypherxlabs.com