Two honest answers. What AI does with your data: almost nothing, and zero-knowledge means we can't read most of it anyway. How we use AI to build the product: a lot, and a human is always accountable.
We don't profit from your data, and we built WIGGWIGG so we can't read the parts that matter most.
Your messages, contacts, and identity details are never used to train machine-learning models. We don't do it, and the providers we rely on are contractually barred from using your data for their own ends.
WIGGWIGG staff don't routinely read your texts or listen to your calls. We choose to run narrow automated safety filters. When review is needed, authorized staff may inspect safety-filter flags, abuse reports, appeals, and information you submit to support. Confirmed-illegal matches carry legal preservation and reporting duties. Other harmful matches are preserved by our choice and reported only if review concludes they are criminal in Canada.
We don't build a profile of you, target ads, or sell anything to data brokers. There's no surveillance business here to feed.
Your vault (password manager) and identities are encrypted on your device before they ever reach us. We hold no key to read them, so no AI of ours can either. Your messages pass through our servers briefly to be delivered and safety-checked. Under our current method, they are then sealed to the account communication key so we cannot read the sealed copy. A small set retained from the private beta remains readable by our servers under older encryption until a separate re-sealing process.
Naming what isn't zero-knowledge matters. We choose to run a few narrow, automated safety checks: none of them is AI we built to learn about you, and none reads the words in your messages. Confirmed-illegal matches carry legal preservation and reporting duties. Other harmful matches are preserved by our choice and reported only if review concludes they are criminal in Canada. We set out the checks, what stays readable on our servers and for how long on the pages below.
WIGGWIGG is built independently, with AI assistance. A person stays accountable for every change, anything security-sensitive gets extra review, and none of it ever touches your data or weakens encryption.
The AI that helps us write WIGGWIGG works on our source code, not your account. Your vault is encrypted with keys derived on your device. Under our current method, your stored messages are sealed to the account communication key, which a supported client opens after sign-in and unlock. Our build tools do not see your actual data. A small set retained from the private beta remains readable by our servers under older encryption until a separate re-sealing process.
Development and testing run on local, made-up data, never your real account. Because your vault and identities are encrypted with your key, direct access to our production database would reveal only their ciphertext. For communications protected by our current method, the stored copy is also sealed. A small set retained from the private beta remains readable by our servers under older encryption until a separate re-sealing process.
AI is a tool we own the output of, not an excuse. Nothing ships without a person reviewing it and taking responsibility for it. There is no "the AI did it."
Anything that touches encryption or sensitive data gets an explicit zero-knowledge and security review, including adversarial "red-team" checks, before it's released.
AI also drew our mascots and wrote part of our public copy: marketing, blog, social posts, newsletters. As with the code, a person reads it over and approves it before it goes out. For Patch and the Wiggs we looked for an illustrator first, did not find one, and started with AI instead. We still intend to hire someone for that work when the project can pay for it. None of it touches your data.
Our line in the sand
AI helps us build WIGGWIGG. It never gets to weaken the zero-knowledge guarantee. If a faster path required us to read your data, we don't take it.
Exactly what we check on calls and messages, and what we keep.
Communications PrivacyHow your data is encrypted on your device, so we can't read it.
Zero-Knowledge EncryptionLast updated September 2026