Privacy

Willow is built to know as little about you as possible.

What is end-to-end encrypted

Signal content (emoji, title, message text) and voice recordings are encrypted on your iPhone with keys created when two phones pair in person. Those keys never reach our servers, and we cannot read or listen to this content. Encrypted content lives on our servers only so it can be delivered and synced.

What the service can see

Account records (your Apple sign-in identifier, chosen first name, and email if you shared it), who you are paired with, message timing and delivery state, urgency level, and your device's push token. This metadata is required to deliver notifications.

What we do not do

No ads, no analytics resale, no tracking across apps, no contact-book upload. Willow has no way to discover people; pairing is physical.

Deleting your account

Delete your account inside the app (Account → Delete account). This permanently removes your account, devices, pairs, signals, messages, and voice recordings from our servers, and revokes Willow's Sign in with Apple grant.

Reports

If you report a contact, the report you submit can include content you chose to attach as evidence, decrypted by your device. We use it only to act on the report.

Contact

Questions: support@willowforhome.com.