Last Modified: June 19, 2018
Thank you for using Wickr Me! Wickr allows you to encrypt and send audio, video, voice, text messages and files, and conduct voice calls, so that you can communicate safely, securely, anonymously — and easily.
We work very hard to preserve your privacy and security, and we do our best to be as transparent as possible in explaining how we use your data in providing our Services. Not only is Wickr’s security architecture and proprietary encryption methodology designed to ensure that only users can gain access to their message content, we promise to never monetize your communications or personal information. Ever. Please contact us if you have any questions at firstname.lastname@example.org
Our Privacy Practices in Brief:
Wickr has to collect some information from you in order to provide our Services to you, but we do so in a highly limited, highly secure way.
What Information Does Wickr Collect and How Is It Used?
We are committed to limiting our collection of your information to what is necessary to provide you with our Services in accordance with applicable data protection and privacy laws.
The limited information we collect, receive, or have access to is used to provide the Service, to allow you to send and receive messages and files, to respond to your requests, and to improve the Service, in line with the legitimate interest we have in delivering the Services to you. It may also be shared under valid legal process and with third party service providers for the limited purposes described below.
What We Don’t Collect
Equally important to us is to share what information we don’t collect. We do not collect your location information or have access to the contents of the communications you send using the Wickr Me App. Remember, however, that if you send a Wickr message to another Wickr user, that message or related content might remain on their device even after you delete it from yours, depending on the value you set for the expiration or burn-on-read time of that message and whether the recipient took a screenshot of the message.
We collect some very limited information from you after you download the Wickr Me App in order to allow you to create a Wickr Me Account, and begin using the Wickr Me App.
Optional User-Provided Information
Within the Wickr Me App, we provide a few optional features for your convenience. Some of these features, described below, will ask for personal information. If you want to keep your use of Wickr Me as anonymous as possible, please read these sections carefully in order to understand how we associate information you provide with your Wickr Me account.
Automatically Collected Information
Wickr collects two types of information automatically during your setup and use of the Wickr Me App: Device Information, Aggregate Usage Data, and Crash Logs.
What Information Does Wickr Share with Third Parties?
We do not share any user information we have with third parties, with the exception of the third-party service with whom we share your phone number for the sole purpose of sending you an SMS confirmation if you choose to associate your phone number with your Wickr Me ID. Please note that the provision of a phone number is completely at the user’s discretion.
Please see our full Legal Process Guidelines, but here are the highlights:
We will always notify our users of any third party requests for their information unless we are legally prohibited from doing so. As soon as legally permissible, we will notify our users of requests for their information. We require a warrant before handing over the contents of communications; however, because of the nature of our technology, the contents of communications will be encrypted and undecipherable if obtained.
You Can Terminate Your Account
You can terminate your account at any time. Once terminated, your account will be irrevocably suspended, ensuring that nobody can use that Wickr ID again in order to prevent impersonation. If you wish to terminate your Wickr Me account, go to Settings, “Terminate Account” and verify by entering your password.
We Retain As Little Data As Possible, for the Least Time Possible
Data Retention on Wickrʼs Servers: Our servers store the encrypted messages that you send and receive for up to 6 days to ensure their reliable delivery to each device associated with your account and the accounts to which you transmit messages. We retain certain account data (i.e., types of messages sent and account settings changes) which contain no PII for up to 6 days.
Data Retention on Your Device: All messages are stored in encrypted form on end users’ devices. You choose your own retention policy for your messages by choosing how long a message is viewable before it is deleted (via the expiration or burn-on-read time for sent messages, recall ability and manual deletion for your device). In addition, Wickr’s “secure shredder” technology uses forensic deletion techniques to help reduce the risk of deleted messages and temporary data being recovered.
We Are Serious About Security
We are concerned about safeguarding the confidentiality of your information. We provide physical, electronic, and procedural safeguards to protect information we process and maintain. For example, we limit access to this information to authorized employees who need to know that information in order to operate, develop, or improve our Services. No sensitive information is in the clear: we take reasonable efforts (as described herein) to ensure that everything we store is not retrievable by us or anyone else.
However, as security experts, we know that no security system can prevent all potential security breaches. Therefore, we have limited the potential implications of such a breach by designing our system so that in the event of a breach, we would have the least possible information about you.
Wickr’s network infrastructure and services are maintained in highly secure, strategically located data centers managed by Amazon Web Services (AWS). Learn more about AWS security policies here.
Wickr is not directed to children under the age of 13. If we learn that we have allowed a child under 13 to access our Services, we will take appropriate steps to promptly remove such account and delete all information associated with such account.
If you live in any other country except those in the European Region, you must be at least 13 years old to register for the Services. If you live in the European Region, you must be at least 16 years old to register for and use our Services.
In an ongoing effort to improve our services and assist our customers with any questions they have about the use of the Wickr Me App, we have developed a comprehensive collection of the most commonly asked customer support questions and answers, which are available here. Any information provided to us by our users voluntarily when they request customer support (e.g., an email address, Wickr Me App version, or any other details related to user issue) will be used to respond to that individual request and may be logged as part of our effort to improve our customer service and solve any product-related issues. This user-provided information cannot be linked to our users Wickr Me accounts, unless users voluntarily include their Wickr Me account information in their customer service-related requests. We strongly discourage our users from disclosing their passwords to Wickr Me accounts to third parties.
A cookie is a small text file that is placed in visitors’ browsers to help us learn when users arrive at our site, how they use the site, when they leave, and when they come back. These cookies can never be used to identify user accounts within the Wickr App.
Here is an example of how we may use information collected via cookies: we may think that one of our new features would be very useful to the Wickr community, but cookies may tell us that very few users fully read that feature’s description on our site. That insight would help us to rethink the way we explain that product on our site or present it in an advertisement so that we can better communicate our services to our users.
We make every reasonable effort to minimize the information we collect. For example, we enforce IP masking for the website analytics purposes to conceal the last 4 digits of IP addresses which ensures that visitor’s full IP addresses are not collected via third party services such as Google Analytics.
To improve Wickr’s products, website, or marketing, we may engage with various outside partners that have access to the limited data users voluntarily share with Wickr via web forms, cookies, or customer support and sales inquiries. We carefully select each of our partners based on Wickr’s commitment to user privacy and security. Our security team meticulously vets each prospective partner to ensure its policies and practices are on par with Wickr’s standards.
Each of these companies has its own policies for handling user data. Please review the respective privacy policies for Zendesk, Twilio, Pardot, WP Engine, AWS, and Bugsnag for a more complete understanding of their practices.
If you have additional questions regarding our privacy protection practices, please email us at email@example.com.
Users Outside the US
If you use our Services, your information will be transferred to the U.S. and will be processed and stored under U.S. data protection and privacy regulations which may differ from those your country of residence. By using our Services and providing information to us, you consent to such transfer to and processing in the U.S. We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this policy. Please note that all user communications on the Wickr Service are protected between devices and are never stored unencrypted hence are undecipherable to Wickr or other third parties.
You are responsible for complying with any laws or regulations in your country that govern use of applications and services like Wickr Me.
Contact Us if You Have Questions or Account-Related Requests
If you have any questions regarding privacy while using our Services, or have questions about our practices, please contact us via email at firstname.lastname@example.org.
If you live in the European Region, please note the following:
Opt-out. You may contact us anytime to opt-out of:
Access. You may access the data we hold about you at any time within the application or by contacting us directly.
Amend. You can also contact us to update or correct any inaccuracies in your personal data.
Erase and forget. In certain situations, for example, when the data we hold about you is no longer relevant or is incorrect, you can request that we erase your data. Please note that only you can delete your Wickr Me account at any time form within the Service, due to privacy design of the Service, we are unable to delete Wickr Me accounts upon your request.
You may contact us at email@example.com on any questions you may have about your personal data and our use of such personal data under the GDPR.