Understand the access before you connect.
Sharing a message and linking an account give different kinds of access. Here's how those routes work, where processing happens and what to check before joining the pilot.
This page describes the pilot service as reviewed on 16 October 2026. We update it when the service changes.
Different routes. Different access.
Text and files you add
When you paste text or upload a supported file, you choose what to submit. That material is processed to identify the relevant details and tasks. It may include information about other people, so share it thoughtfully.
A linked WhatsApp account
WhatsApp's Linked Devices connection grants account-wide access. Choosing groups inside ikr limits the groups selected for processing; it does not narrow WhatsApp's underlying permissions to those groups.
The connection service receives and decrypts incoming messages in memory, then discards private chats and unselected-group message content before anything is passed to the application or AI. It does not download message history. Connection records still contain contact and group identifiers, and individual contact updates pass through memory.
Messages from people who do not use ikr can still appear in selected groups. How those messages are handled depends on the pilot's sender rules. Group selection and sender opt-out rules are separate controls.
Forwarding messages to ikr
PlannedWe're preparing a separate WhatsApp number for forwarding individual messages to ikr. That route would not require linking your personal WhatsApp account. It is not currently offered here as an available feature.
Direct platform integrations
Being exploredA school or provider integration would have a defined scope and authorization process. We would describe the information shared before that connection is enabled.
Processing happens beyond the phone.
ikr uses external services for the WhatsApp connection, hosting, AI interpretation and notification delivery.
Service list
| Service | What it does |
|---|---|
| Fly.io | Hosts the WhatsApp connection service, its connection credentials, technical records and volume backups |
| Cloudflare Workers and D1 | Run application processing and store accounts, items and related records |
| Cloudflare AI Gateway | Routes AI requests and responses and can keep logs of their content; those logs are listed in the retention schedule |
| Anthropic | Interprets selected message content and attachments, generates structured information and supports translation |
| Apple APNs and Google FCM | Deliver notifications that can contain an item title or summary |
Information sent for AI processing can include message text, supported attachments, source or sender details and context needed to interpret the update. It is not limited to anonymous text, and it is not processed exclusively on your device.
What is retained depends on the information.
Disconnecting a source, deleting an item and deleting an account are different actions. Backups can also remain recoverable after information is removed from the active service.
Retention schedule
| Category | Retention |
|---|---|
| Private-chat and unselected-group message content | Discarded by the connection handler; not saved as application messages or sent to AI |
| Original text attached to published items | Original field cleared after 30 days; the extracted item can remain |
| Short-term group context | 1 day |
| Held message bodies | Cleared after 48 hours; the remaining row can persist |
| Published attachments | No automatic expiry |
| Extracted items and translations | Retained with the item; shared-item handling differs from private items |
| Processing traces | AI-generated explanations are kept with the item; no automatic expiry |
| WhatsApp connection records | Retained while connected; records can include identifiers for contacts and groups |
| Fly volume snapshots | Up to 5 days |
| Cloudflare D1 recoverable history | Up to 30 days |
The complete category-specific schedule, including enquiry records, notification payloads and provider-side copies, belongs to the privacy policy.
What your controls do.
Disconnect WhatsApp
Ends ikr's linked connection. Items already created are not removed by disconnecting, and backup copies follow their own expiry periods. You can also revoke the device through WhatsApp's Linked Devices settings.
Delete an item
Removes the item according to the product's deletion rules. For shared items, removal from one person's view and deletion for everyone are different operations.
Delete your account
Removes the account and its associated private data under the full deletion policy. Shared records and recoverable backups require separate handling, described in that policy.
Ask a question
If you want to understand a particular source or record before connecting, ask us. You can also enquire about trying ikr with sample material.
Security starts with limiting what is kept.
The hosting setup uses encrypted storage for the WhatsApp connection volume. That protects stored data, but it does not make a running server or its administrators unable to access information processed there.
A linked account remains a sensitive connection. No service can promise that a compromise is impossible. Limiting retained content reduces what is available to steal; protecting credentials, controlling administrative access and responding to incidents matter as well.
The full documents.
The privacy policy and pilot terms explain the operating entity, processing purposes, applicable rights and complete retention rules.
Ask before you connect.
You should be able to understand the information flow before deciding whether it suits you. If you want to understand a particular source or record first, ask us.