Privacy Policy

Effective date: October 25, 2026

Who we are

WhereisX is operated by Raygio LLC, a California limited liability company. When this policy says "we," "us," or "our," it means Raygio LLC. When it says "the app," it means the WhereisX mobile application and the website at whereisx.app.

Mailing address: Raygio LLC 2108 N St, STE N Sacramento, CA 95816 USA

For privacy questions, write to privacy@whereisx.app.

What we collect

We collect only what's needed to make the app work.

Account information. When you sign in, we receive your email address (or, if you use Sign in with Apple, an Apple-relayed email). We use this to identify your account across devices. If you use Sign in with Google or Sign in with Apple, we also receive the name and, where the provider supplies one, the profile photo on that account, which become your display name and picture. You can change your display name at any time. If you sign in with an emailed code, our email provider delivers that code to your address (see "Who we share with"). If you join a household, your email address, display name, and profile photo are visible to the other members of that household.

Items you save. When you save an item, we store the item's name, the location you specified, any descriptive notes, and timestamps. This is your data — we treat it as private to you and your household members. To interpret what you said or typed, item names and location descriptions are sent to Google's Gemini API for processing (see "Who we share with").

Voice input. What happens to your voice depends on the device you speak to.

On iPhone and Android, your device's built-in speech engine (Apple or Google speech recognition) converts your speech to text on the device. The audio never leaves your device and we never receive it. Only the resulting text is sent to our servers and to Google's Gemini API to understand what you said.

On Apple Watch, there is no speech engine available to apps, so the recording itself is sent to our servers and on to Google's Gemini API, which transcribes it and interprets what you asked in a single step. We do not store the recording: it exists for the duration of that request and is discarded when the response comes back.

In both cases the transcribed text is discarded after processing. What we keep is the resulting item record and, when the app answers out loud, the cached audio of that answer described next.

Spoken replies. When the app answers you out loud, the sentence it speaks — for example, "Your keys are in the kitchen drawer." — is sent to DeepInfra, which turns it into audio using an open-source voice model. DeepInfra receives only that sentence, which can include the names and locations of your items. It does not receive your name, your email address, or any account identifier. So that a repeated answer plays instantly, we keep the resulting audio clip in a private cache on our servers. Clips are stored under a one-way fingerprint of the sentence, and the same clip is reused for anyone whose answer is word-for-word identical. We keep a record of which households use each clip, so that we can delete it when they no longer do (see "Data retention"). A copy is also kept in the app's cache on your device.

Photos. If you take a picture of a drawer or cabinet so the app can catalog its contents, the image is sent to Gemini for processing. We retain the resulting text descriptions in your account; we do not retain the original image after processing.

Subscription information. If you subscribe to WhereisX Pro, Apple or Google process the payment. We receive a subscription receipt and the entitlement status (active or expired) — never your card number. Subscription events are also reported to Meta and Google to measure our advertising (see "Advertising measurement").

Device and diagnostic information. We collect crash reports and performance diagnostics through Sentry — device type, OS version, app version, and after a purchase the plan and trial end date — to debug crashes and keep the app reliable. We have configured Sentry not to collect IP addresses.

How you respond to in-app offers. The app sometimes shows offers and questions of its own: an invitation to upgrade to WhereisX Pro, or a question about whether you're enjoying the app. To learn which of these are helpful and which get in the way, we keep with your account a record of which ones you were shown, where in the app they appeared (for example after the tour, when you reach the free plan's item limit, or when you tap the camera), whether you chose to upgrade, open the subscription screen, or dismiss them, and whether a subscription followed. We sometimes test different versions of the app, for example showing an upgrade offer to some new accounts and not others; we keep which version your account was given. This includes the introduction shown before sign-up, for which the app sends a random install identifier that we link to your account if you sign up. None of this includes anything you saved, said, or typed, and none of it is sent to Meta, Google, or other advertising platforms. It is deleted with your account.

Advertising measurement. We advertise WhereisX on Facebook and Instagram, and on Google. To learn which ads lead people to install and use the app, and to help these advertising platforms show our ads to people likely to find it useful, the app reports a small number of events to Meta and to Google.

Meta. The app reports these events to Meta through Meta's software development kit: that the app was installed, that it was opened, that an account was created (once, when you create yours), and the usage milestones described below. Each event carries a random identifier that Meta's kit generates for your installation of the app (a reinstall gets a new one), together with your device model, operating system version, language and region settings, time zone, app version, and, as with any internet request, your IP address. If you subscribe to WhereisX Pro, our subscription provider RevenueCat also tells Meta when a free trial starts and when a subscription is purchased or renewed, with the product and its price, under that same random identifier. To make this possible, RevenueCat stores that identifier alongside your subscription record.

Google. The app reports events to Google through Google Analytics for Firebase, Google's app measurement kit: that the app was installed (first opened), opened, and updated, how long it is used and which of its screens are shown, that your device's operating system was updated, purchases made in the app through the App Store (with the product and its price), that an account was created (once, when you create yours), and the usage milestones described below. Each event carries a random identifier that Firebase generates for your installation of the app (a reinstall gets a new one), together with your device model, operating system version, language and region settings, app version, and, as with any internet request, your IP address, which Google says Google Analytics does not log or store. If you subscribe to WhereisX Pro, RevenueCat also tells Google when a free trial starts and when a subscription is purchased or renewed, with the product and its price, under that same random identifier, which RevenueCat stores alongside your subscription record. We have turned off Google Analytics' optional settings for sharing this data with Google for its own purposes, such as improving Google's products or benchmarking.

Usage milestones. So that our ads can reach people who go on to use the app, not just install it, the app also tells Meta and Google, once each, when you reach certain milestones: for example that you saved your third item, came back to the app a second time, looked an item up for the first time, returned a week after signing up, or reached the free plan's item limit. A milestone says only that it was reached, sometimes with a number (such as "3" for the third item). It never includes the name of an item, a place, what you said or typed, or anything else you wrote. To know when you reach one, we keep with your account a count and the times of your visits to the app and your item lookups; it is deleted with your account. Which milestones are reported can change over time, but always within these limits.

Neither Meta nor Google receives your name, your email address, your account identifier, or anything you save in the app. The app does not collect your device's advertising identifier (the IDFA on iPhone, the advertising ID on Android), and it never asks for permission to track you. On iPhone, that means Meta receives these events marked as not permitted for tracking, and Google receives them without an advertising identifier. What we see in return is aggregate counts, not individual people. We do not track you across other companies' apps or websites. Test and development versions of the app do not report to Meta or Google; only the version distributed through the app stores does.

Website analytics. When you visit whereisx.app, we count the visit with Vercel Web Analytics. It sets no cookies, stores nothing on your device, and uses no advertising or cross-site identifiers. For each page view Vercel records the page path, the site that referred you, any campaign parameters in the link you followed (such as utm_source), your approximate location derived from your IP address (country, region, city), your device type, and your browser and operating system versions. Your IP address itself is not stored. Page views within one visit are tied together by a hash derived from the request, which is discarded after 24 hours. What we see is aggregate counts: we cannot tell that a particular visit was you, and we cannot connect a visit to the website with your account in the app. This applies to the website only — the app does not use it.

Feedback you send us. If you use the in-app feedback form, we receive the message you wrote along with your account email, the category you picked, and your app version, so we can follow up.

How we use it

• To deliver the core features of the app (saving items, answering questions about where things are)
• To enforce subscription entitlements
• To debug crashes and improve features
• To measure and improve our advertising
• To respond to support requests
• To comply with legal obligations

We do not sell your personal information. We do not use your saved items, voice input, spoken replies, or photos to train AI models — neither ours nor third parties'.

Who we share with

These providers process data on our behalf under their own privacy and security obligations. Meta also uses the events it receives under its own terms and privacy policy, and Google under its own terms and privacy policy.

Data retention

• Active accounts: we retain your data for as long as your account exists.
• Deleted accounts: when you delete your account from the app's Settings, we permanently delete your account data — profile, items, locations, and feedback — within 30 days. If you share a household with other people, the items in it stay with the household. Anonymized billing records (subscription events with all account identifiers removed) are retained for accounting, refund handling, and other legal and financial obligations. Backup snapshots may persist for up to an additional 30 days before they roll off.
• Voice input: iPhone and Android audio never reaches us — transcription happens on your device. Apple Watch audio reaches us only for the length of the request that transcribes it, and is never written to storage. The resulting text persists only as long as the item record it created.
• Spoken-reply audio: cached clips are deleted along with the household that uses them. For most people that is when you delete your account; if you share a household, its clips stay with it, like its items. A clip that is word-for-word identical to another household's answer is kept until the last household using it is gone. We do not delete clips on a timer, because an answer is prepared when you save an item so that it is instant whenever you ask, even years later. Clips made before we began recording which household uses them, and that we could not match to one afterwards, are not removed by account deletion. Clips cached on your device are removed when you delete the app or your device clears the app's cache.
• Photos: never stored. An image sent for identification exists only for the duration of that request.
• Website analytics: the per-visit hash that links page views together is discarded after 24 hours. What remains is aggregate counts with nothing identifying attached to them, which we keep for as long as we run analytics on the site.
• Advertising measurement: we do not keep copies of the events sent to Meta and Google. We do keep, with your account, the counts and times of your visits and item lookups that usage milestones are worked out from, and a record of which milestones were reported; these are deleted with your account. Meta and Google keep the events they receive under their own retention rules. The random identifiers stay on your device until you delete the app, and RevenueCat keeps a copy with your subscription record.
• In-app offers and tests: the record of which offers you were shown and how you responded, and which test version your account was given, are kept for as long as your account exists and deleted with it; an introduction record for an install that never signs up is deleted after 90 days.
• Logs: operational logs (errors, request metadata) are retained for 30 days for debugging.

Your rights

You can:

• See your data — view all items in the app
• Edit your data — modify or delete any item in the app
• Delete your account — in the app's Settings, or by emailing privacy@whereisx.app
• Export your data — email privacy@whereisx.app and we'll send you a JSON export within 30 days

If you live in the EU, EEA, or UK (GDPR) or in California (CCPA / CPRA), you have additional rights:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — correct inaccurate data
• Right to deletion — what the in-app deletion already does
• Right to data portability — the JSON export above
• Right to object — opt out of any processing not strictly required for the service
• Right to non-discrimination — we treat all users the same regardless of which rights you exercise

To exercise any of these, email privacy@whereisx.app with your account email. We'll respond within 30 days.

Children

WhereisX is for users 13 years and older. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact us at privacy@whereisx.app and we will delete the account.

International users

We are based in California, USA. By using WhereisX, you consent to your data being processed in the United States. We rely on Standard Contractual Clauses (or equivalent transfer mechanisms) when receiving data from the EU, EEA, UK, or Switzerland.

Security

We protect your data with industry-standard practices:

• All connections are encrypted in transit (TLS).
• Data at rest in Supabase is encrypted.
• Access to production systems is restricted to a small number of authorized engineers.

No system is 100% secure. If we discover a breach affecting your data, we will notify you in accordance with applicable law.

Changes to this policy

We may update this policy from time to time. The "Effective date" at the top will reflect when the latest version took effect. If we make a significant change, we'll notify you, for example by email or with a notice in the app.

Contact

Privacy questions: privacy@whereisx.app

Mailing address: Raygio LLC 2108 N St, STE N Sacramento, CA 95816 USA