Judging by the fact that it's not a telepathy plugin, it's privacy is probably similar to official whatsapps. If it was a telepathy plugin we could use ssl or some form of encryption.