Two honest answers. What AI does with your data: almost nothing. Protected password and identity fields use zero-knowledge encryption, so we do not hold the keys needed to read them. How we use AI to build the product: a lot, and a human is always accountable.
We don't profit from your data, and we built WIGGWIGG so we can't read the parts that matter most.
Your messages, contacts, and identity details are never used to train machine-learning models. We don't do it, and the providers we rely on are contractually barred from using your data for their own ends.
WIGGWIGG staff don't routinely read your texts or listen to your calls. We choose to run narrow automated safety filters. When review is needed, authorized staff may inspect safety-filter flags, abuse reports, appeals, and information you submit to support. Confirmed-illegal matches carry legal preservation and reporting duties. Other harmful matches are preserved by our choice and reported only if review concludes they are criminal in Canada.
We don't build a profile of you, target ads, or sell anything to data brokers. There's no surveillance business here to feed.
Vault entries and protected identity details are encrypted on your device before they ever reach us. We hold no key to read those fields, so no AI of ours can either. Contacts use the same protection unless contact recognition for calls is enabled. Your messages pass through our servers briefly to be delivered and safety-checked. Under our current method, eligible stored copies are then sealed to the account communication key so we cannot read the sealed copy. A small set retained from the private beta and the named exceptions remain readable by our servers.
Naming what isn't zero-knowledge matters. We choose to run a few narrow, automated safety checks: none of them is AI we built to learn about you, and none reads the words in your messages. Confirmed-illegal matches carry legal preservation and reporting duties. Other harmful matches are preserved by our choice and reported only if review concludes they are criminal in Canada. We set out the checks, what stays readable on our servers and for how long on the pages below.
WIGGWIGG is built independently, with AI assistance. A person stays accountable for every change, anything security-sensitive gets extra review, and none of it ever touches your data or weakens encryption.
The AI that helps us write WIGGWIGG works on our source code, not your account. Your vault is encrypted with keys derived on your device. Under our current method, your stored messages are sealed to the account communication key, which a supported client opens after sign-in and unlock. Our build tools do not see your actual data. A small set retained from the private beta remains readable by our servers under older encryption until a separate re-sealing process.
Development and testing run on local, made-up data, never your real account. Vault entries and protected identity details are encrypted with your key, so direct access to our production database would reveal only ciphertext for those fields. Contacts follow the same protection unless contact recognition for calls is enabled. For eligible communications protected by our current method, the stored copy is sealed separately. A small set retained from the private beta and the named exceptions remain readable by our servers.
AI is a tool we own the output of, not an excuse. Nothing ships without a person reviewing it and taking responsibility for it. There is no "the AI did it."
Anything that touches encryption or sensitive data gets an explicit zero-knowledge and security review, including adversarial "red-team" checks, before it's released.
AI also drew our mascots and wrote part of our public copy: marketing, blog, social posts, newsletters. As with the code, a person reads it over and approves it before it goes out. For Patch and the Wiggs we looked for an illustrator first, did not find one, and started with AI instead. We still intend to hire someone for that work when the project can pay for it. None of it touches your data.
Our line in the sand
AI helps us build WIGGWIGG. It never gets to weaken the zero-knowledge guarantee. If a faster path required us to read your data, we don't take it.
Exactly what we check on calls and messages, and what we keep.
Communications PrivacyHow protected password and identity fields are encrypted on your device, so we do not hold the keys needed to read them.
Zero-Knowledge EncryptionLast updated September 2026