The change clause is one short paragraph and it is weak. WhatsApp reserves the right to amend the policy and promises notice only "as appropriate", which leaves it to WhatsApp to decide when you hear about a change, and it then puts the duty on you to re-read the page from time to time. There is no advance notice period, no re-acceptance requirement, and nothing saying changes apply only going forward, which matters because this is the document governing what happens to data already collected. The redeeming features are a dated effective date, a link to archived versions, and a described practice of sending in-app notifications when the Terms are updated.
There are no prices, billing cycles, renewal terms, cancellation steps or refund rules anywhere in this document. Subscriptions are mentioned only twice and only to explain what data Meta receives when you sign up for one and that encrypted backups are kept while a subscription is active. The score is neutral because the category is genuinely not covered.
This document contains no liability cap, no warranty disclaimer, and no exclusion of damages of any kind, because those clauses live in the separate Terms of Service. It does make affirmative security and encryption statements, but it attaches no remedy if those statements fail. The score is neutral because the category is genuinely not covered here.
Account rules appear only as a side effect of describing data processing, so there is no notice period, no appeal route, and no cure period for a ban in this document. What is here is mixed: you can delete your account yourself at any time and export your data in-app, but WhatsApp deletes accounts after about 120 days of inactivity and states outright that you are not warned before it happens. Bans for breaching the Terms are mentioned without any process attached.
There is no indemnification clause in this document at all, and no obligation for you to defend, indemnify or hold WhatsApp harmless. It also contains no reciprocal protection from WhatsApp. The score is neutral because the category is genuinely not covered here and any indemnity would be found in the Terms of Service.
The document states plainly which legal entity serves you based on where you live and that the policy covers all WhatsApp services, and it acknowledges that guests and supplemental product policies exist. It never describes how you accept anything, because acceptance mechanics sit in the separate Terms of Service. Scope is somewhat diluted by supplemental privacy policies stored elsewhere and by frequent cross-references to help centre pages, so the full picture is not in one place.
This document does not grant WhatsApp any content licence, claim ownership of your messages, or set out any intellectual property terms, because those belong in the Terms of Service. It only mentions your content in privacy terms, noting that encrypted content cannot be read by WhatsApp while profile pictures, group names and descriptions can be. The score is neutral because the category is genuinely not covered here.
There is no arbitration clause, class action waiver, venue selection or governing law provision in this document, because those sit in the Terms of Service. What it does give you is a real regulatory route, namely the right to complain to the UK Information Commissioner's Office, and it names which WhatsApp entity is responsible for you based on your region. The score is neutral with a small lift for that named regulator, and confidence is low because the dispute terms themselves are elsewhere.
On message content this is among the strongest policies you will read, because end to end encryption means WhatsApp says it cannot see your messages, calls, media, status or the location you share in chats, and delivered messages are removed from its servers. On everything surrounding the content it is far weaker, since WhatsApp collects your phone number, uploaded contacts, device and network identifiers, IP address, estimated location and detailed timing and frequency of your activity, then shares that across the Meta companies and with law enforcement and industry partners. Your legal rights and the legal basis for each processing purpose are documented in unusual detail, and specific retention periods are given for several categories, but most retention is decided case by case with no outer limit.