Yes. Uploads are encrypted in transit, the conversion job runs on an isolated worker, and the original WebP plus the resulting ICO are deleted within an hour.
Yes. The converter is mobile-responsive and processes images server-side, so you can convert WebP to ICO from any iPhone or Android device without using local storage.