Summary
This is WhatsApp's privacy policy — the legal document that explains what personal information WhatsApp collects about you and how it uses and shares that data. The most important thing to know is that WhatsApp shares your account information, phone number, usage data, and device identifiers with other Meta companies including Facebook and Instagram, which can use that data to show you targeted ads even though WhatsApp itself does not serve ads. EU and UK users have stronger rights to object to or restrict this data sharing, and all users can request deletion of their account data through the app's Settings menu.
Technical Summary
This document is WhatsApp's global Privacy Policy, governing the collection, use, and sharing of personal data by WhatsApp LLC (and WhatsApp Ireland Limited for EU/UK users) under a combination of contractual necessity, legitimate interests, and consent as legal bases under applicable law. The policy obligates WhatsApp to collect an extensive range of user data including account information, messages (metadata), contacts, usage logs, device identifiers, location data, payment information, and data from third-party Meta Companies, while committing to provide users with access, correction, portability, and deletion rights. Notably, the policy explicitly states that WhatsApp shares user data broadly across the Meta Companies family — including Facebook and Instagram — for infrastructure, safety, advertising improvement, and product development purposes, which deviates materially from user expectations of a private, end-to-end encrypted messaging service. The policy engages GDPR (EU 2016/679) and UK GDPR for European and UK users with WhatsApp Ireland Limited as the EEA data controller, CCPA/CPRA for California residents, and general FTC Act Section 5 consumer protection standards in the US; material compliance considerations include adequacy of consent mechanisms for cross-company data sharing, lawfulness of processing for Meta advertising ecosystem integration, and compliance with GDPR Chapter V for international data transfers.
Analyzed Changes
4 changes analyzed since monitoring began.
What changed
WhatsApp updated their WhatsApp Privacy Policy on April 21, 2026. Change detected: 1 sentence(s) removed, 1 sentence(s) modified. Document contained 189 sentences after update.
Consumer impact
WhatsApp removed the direct reference and link to its United States Regional Privacy Notice, making it harder for US residents to easily locate information about their consumer privacy rights. The advertising language was softened to a future commitment to update the policy before any new ad types are introduced, which is a minor transparency improvement but does not change current ad practices. You can search WhatsApp's website directly for the 'United States Regional Privacy Notice' to find the consumer privacy rights information that is no longer directly linked in the main policy.
Why it matters
US users can no longer find a direct path to their consumer privacy rights from WhatsApp's main privacy policy, making it harder to exercise rights like data access or deletion. The advertising language change signals a commitment to advance notice before new ad formats are introduced, which is a modest transparency gain.
What changed
WhatsApp updated their WhatsApp Privacy Policy on April 19, 2026. Change detected: 2 sentence(s) modified. Document contained 190 sentences after update.
Consumer impact
WhatsApp has removed its stated commitment to not introduce new ad formats, and now explicitly says users may see ads in Status and Channels — a material shift in the ad experience users were previously assured they wouldn't face. Additionally, the regional rights section has changed, meaning Thai residents no longer have a dedicated rights notice linked from the main policy, while US residents now have one. You can review the new United States Regional Privacy Notice linked from the updated policy to understand what consumer privacy rights may be available to you.
Why it matters
WhatsApp is walking back a longstanding assurance that it would not introduce new ad types, meaning users should expect ads in Status and Channels going forward. Thai users have also lost a direct pathway to their data rights within the main policy, which could leave them less informed about protections available under Thai law.
What changed
WhatsApp updated their WhatsApp Privacy Policy on March 23, 2026. Change detected: 1 sentence(s) added. Document contained 182 sentences after update.
Consumer impact
Thai WhatsApp users now have a dedicated section in the privacy policy that explains their rights under Thailand's Personal Data Protection Act (PDPA). This makes it easier for Thai residents to understand and act on their data privacy rights without having to search for this information elsewhere. You can click the link in WhatsApp's privacy policy under the new 'Information for Users in Thailand' section to learn how to exercise your rights under the PDPA.
Why it matters
Thai WhatsApp users now have a clear, accessible pathway within the privacy policy to understand and exercise their legal data rights under the PDPA. This improves transparency and empowers Thai residents to take control of their personal data.
What changed
WhatsApp updated their WhatsApp Privacy Policy on March 20, 2026. Change detected: 1 sentence(s) removed, 1 sentence(s) modified. Document contained 181 sentences after update.
Consumer impact
WhatsApp has reworded its advertising commitment so that instead of acknowledging other ad types may already appear in Status and Channels, it now promises to update the Privacy Policy before introducing new ads — this is a modest transparency improvement for ad-related disclosures. However, the removal of the direct link and reference to the United States Regional Privacy Notice means US users can no longer easily find guidance on their consumer privacy rights from the main policy. You can search WhatsApp's website directly for the 'United States Regional Privacy Notice' to find information about your consumer privacy rights.
Why it matters
US users can no longer find a direct reference to their consumer privacy rights (such as the right to know, delete, or opt out) from WhatsApp's main Privacy Policy, which may make it harder to exercise those rights. The ad language change is a minor transparency improvement but does not alter existing ad practices.