Download for Windows

Is iMazing safe? What the vendor's own policy actually says

Published 21 September 2026 · Krzysztof Kowalski

Yes. iMazing is made by a named Swiss company, it does not upload your messages, and nothing in its own published policy suggests otherwise. If you arrived here because a forum post made you suspicious, you can stop worrying about that particular question.

The question worth more of your time is the second one, and almost nobody asks it: safe against what? Malware is one risk. A licence that lives in somebody else’s account, attached to a document you may have to explain in two years, is a different one, and the answer there is less comfortable.

Who actually makes iMazing?

DigiDNA Ltd., at Boulevard des Tranchees 4, 1205 Geneva, Switzerland. The company is named on its own privacy policy with a street address, checked on 21 September 2026.

That matters more than it sounds. A named company with a registered address is the thing you have recourse against if the product does something you did not agree to, and it is the first thing to look for in any program you are about to point at your own backup. Here it is on the page, which is where it should be.

Does iMazing upload your messages?

No, and the vendor states it directly rather than implying it:

“We do not access, nor have access to, any user data handled by our apps: files are stored on our users’ own devices, none of these files nor their contents are ever uploaded to our servers, saved, retained or shared with us or any third party.”

imazing.com/privacy-policy, checked 21 September 2026

Read that sentence carefully, because it is precise and it is worth taking at face value. It is about user data handled by the apps: your backup, your messages, your photos. It is not a claim that nothing at all leaves your machine, and the same policy is open about what does.

What does leave your machine, then?

Three, on the side of the apps themselves, and the policy names them rather than leaving you to find out.

  • Anonymous usage data through Google Analytics, if you opt into what iMazing calls the Customer Experience Program. Opt-in, not opt-out.
  • Crash reports through Sentry, with optional comments you type yourself.
  • Your account and licence data, held encrypted on Google Cloud Platform in the United States, with authentication handled by Auth0.

Buying is a separate matter and the same page covers it: the order does not go through DigiDNA but through Paddle or FastSpring, which the policy calls its “online resellers and Merchants of Record”, and licence validation data sits on Google Cloud Platform. Support runs through Zendesk, the newsletter through Mailchimp, and the chatbot on the website through Google’s Gemini API.

None of that is your conversation. The account is the one to keep hold of, because it is where the interesting part of this question lives.

Where does the real risk sit?

In the licence, not in the software, and it is a risk about availability rather than about privacy.

Since June 2025 iMazing sells subscriptions only. The vendor says so in its own words: “In June 2025, we discontinued the device license and now only offer subscriptions.” The licensing policy also describes how devices attach to a licence, and the mechanics are worth knowing before you start: on the discontinued perpetual licences, “Device slots are not reusable; once linked, a device cannot be unlinked”, while on a personal subscription “Device slots become available again after 270 days of inactivity when a device hasn’t been connected to iMazing”.

So the vendor tracks which devices are linked to your licence, which is a normal way to run a subscription and an unremarkable thing on its own. It becomes a question when the document you produce has to survive a dispute: the tool that made it is now something you rent, tied to an account, on terms the vendor can change. That is not a safety problem in the malware sense. It is a continuity problem, and it is a different question from the one you came here to ask.

If the money rather than the mechanism is what you are weighing, the current iMazing pricing and what the June 2025 change did to it sets the figures out with their check dates.

What does this program do differently?

Three answers to the same three questions, so you can compare them rather than take my word for either product.

On uploads: ChatExport runs locally and offline. There is no cloud, no login, no subscription and no telemetry, which means there is no Customer Experience Program to decline and no account to hold your licence. That is a design decision rather than a promise, and the reason it is worth stating next to iMazing’s answer is that iMazing’s answer is also good: the difference between the two is the account, not the messages.

On the licence: the key is signed with a private key and verified inside the program without a network connection. The licence costs 34.99 USD once. Nothing has to phone anywhere for the program to open next year.

On what you can check before paying: the free version exports 50 messages with a watermark, and the whole thread is readable on screen first, one click past the newest 300. iMazing’s trial allowed 25 messages and 25 WhatsApp messages when that was last checked on 4 August 2026.

And the honest limit: this program is Windows only today, and iMazing runs on Windows and macOS. If you are on a Mac, the comparison ends there and iMazing is the one that works.

When is iMazing the right answer anyway?

When you manage phones rather than produce one document. iMazing does backup management, app handling, file transfer and device migration, and this program does none of that: it opens a backup, finds a conversation and produces a document you can hand to somebody. If you need the phone manager, buy the phone manager. The full comparison, which sets eleven programs against each other, is in the comparison of iPhone message export software.

Frequently asked questions

Is iMazing a virus?

No. It is commercial software from DigiDNA Ltd., a registered Swiss company in Geneva, sold through its own website with Paddle or FastSpring as the merchant of record.

Worth separating from that, because the two get confused: Windows SmartScreen shows a panel on the first run of an installer few people have downloaded yet, which counts downloads rather than inspecting the file. That is a reputation signal and not a detection. It is a thing this program’s own installer still does, signed or not, and nothing any source here says about iMazing.

Is the free version of iMazing safe to use?

The privacy policy quoted above covers the apps rather than a paid tier of them, so its answer about uploads does not change when you pay. What changes is quantity: when the trial limits were last checked on 4 August 2026 it allowed 25 messages and 25 WhatsApp messages.

Does iMazing store my backups in the cloud?

No. The vendor’s policy says files stay on the user’s own devices and that neither the files nor their contents are ever uploaded to its servers. Your backup sits in a folder on your computer. Where Windows keeps that folder, and what is inside it, is covered in where Windows stores iPhone backups.

Is iMazing safe to use for evidence?

Its export reads the same Apple backup that Decipher TextMessage, TouchCopy and this program read, so underneath those four the data is the same data. That is not true of the whole category: some programs take the messages off the phone over a cable instead of out of a backup.

What differs between programs is what the document says about itself: which timestamps it prints, whether it records the time zone, whether it names the source file and hashes it. Those are the questions an opponent will ask, and what a court actually needs to see in a message export goes through them one rule at a time.

Do I need an iMazing account?

The vendor’s licence and subscription handling runs through an iMazing Account, with the account data held encrypted on Google Cloud Platform in the US and authentication through Auth0. That is what the privacy policy describes, checked on 21 September 2026. This program has no account at all, because its licence key is verified offline.