Privacy Policy
Effective date: May 2, 2026
Who we are
WhereIsX is operated by Raygio LLC, a California limited liability company. When this policy says "we," "us," or "our," it means Raygio LLC. When it says "the app," it means the WhereIsX mobile application and the website at whereisx.app.
Mailing address: Raygio LLC 2108 N St, STE N Sacramento, CA 95816 USA
For privacy questions, write to privacy@whereisx.app.
What we collect
We collect only what's needed to make the app work.
Account information. When you sign in, we receive your email address (or, if you use Sign in with Apple, an Apple-relayed email). We use this to identify your account across devices.
Items you save. When you save an item, we store the item's name, the location you specified, any descriptive notes, and timestamps. This is your data — we treat it as private to you and your household members.
Voice input. When you speak to the app, we transcribe your speech to understand what you said. The audio is sent to Google's Gemini API for transcription and language understanding, then discarded after the response is returned. We do not retain raw audio recordings.
Photos. If you take a picture of a drawer or cabinet so the app can catalog its contents, the image is sent to Gemini for processing. We retain the resulting text descriptions in your account; we do not retain the original image after processing unless you choose to attach it to an item.
Subscription information. If you subscribe to WhereIsX Pro, Apple or Google process the payment. We receive a subscription receipt and the entitlement status (active or expired) — never your card number.
Device and usage information. We collect basic device information (device type, OS version, app version) and aggregated usage events (e.g., feature-usage frequency) to debug crashes and improve the product.
How we use it
- To deliver the core features of the app (saving items, answering questions about where things are)
- To enforce subscription entitlements
- To debug crashes and improve features
- To respond to support requests
- To comply with legal obligations
We do not sell your personal information. We do not use your saved items, voice input, or photos to train AI models — neither ours nor third parties'.
Who we share with
| Provider | Purpose | What they receive | |---|---|---| | Supabase | Database hosting | Account data, items, locations | | Google (Gemini API) | AI transcription and understanding | Voice or text input, photos when applicable | | Apple | Sign in with Apple, in-app purchases | Auth identifier, subscription transactions | | RevenueCat (when WhereIsX Pro launches) | Subscription management | Subscription receipts, anonymous user ID | | Vercel | Website hosting (whereisx.app) | Standard web request data |
These providers process data on our behalf under their own privacy and security obligations.
Data retention
- Active accounts: we retain your data for as long as your account exists.
- Deleted accounts: when you delete your account from the app's Settings, we permanently delete your account data within 30 days. Backup snapshots may persist for up to an additional 30 days before they roll off.
- Voice input: audio is discarded immediately after transcription. The text transcription persists only as long as the resulting item record persists.
- Logs: operational logs (errors, request metadata) are retained for 30 days for debugging.
Your rights
You can:
- See your data — view all items in the app
- Edit your data — modify or delete any item in the app
- Delete your account — in the app's Settings, or by emailing privacy@whereisx.app
- Export your data — email privacy@whereisx.app and we'll send you a JSON export within 30 days
If you live in the EU, EEA, or UK (GDPR) or in California (CCPA / CPRA), you have additional rights:
- Right to access — request a copy of the personal data we hold about you
- Right to rectification — correct inaccurate data
- Right to deletion — what the in-app deletion already does
- Right to data portability — the JSON export above
- Right to object — opt out of any processing not strictly required for the service
- Right to non-discrimination — we treat all users the same regardless of which rights you exercise
To exercise any of these, email privacy@whereisx.app with your account email. We'll respond within 30 days.
Children
WhereIsX is for users 13 years and older. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact us at privacy@whereisx.app and we will delete the account.
International users
We are based in California, USA. By using WhereIsX, you consent to your data being processed in the United States. We rely on Standard Contractual Clauses (or equivalent transfer mechanisms) when receiving data from the EU, EEA, UK, or Switzerland.
Security
We protect your data with industry-standard practices:
- All connections are encrypted in transit (TLS).
- Data at rest in Supabase is encrypted.
- Access to production systems is restricted to a small number of authorized engineers.
No system is 100% secure. If we discover a breach affecting your data, we will notify you in accordance with applicable law.
Changes to this policy
We may update this policy from time to time. The "Effective date" at the top will reflect when the latest version took effect. For material changes, we'll notify you in the app before the changes take effect.
Contact
Privacy questions: privacy@whereisx.app
Mailing address: Raygio LLC 2108 N St, STE N Sacramento, CA 95816 USA