Privacy Policy
Visaya Business Systems
Effective Date: June 27, 2026 · Last updated: September 30, 2026
1. Introduction
WheresIt ("the App", "we", "us") is a home inventory application that helps you catalog and locate your belongings across multiple properties. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using WheresIt, you agree to the practices described in this policy.
2. Information We Collect
2.1 Account Information
When you register for WheresIt, we collect:
- Name and email address
- Password (stored in encrypted form)
- Site names and addresses you provide (e.g. "My House in Cebu")
2.2 Inventory Data
To provide the core service, we store:
- Location, sub-location, and container names you create
- Item descriptions and keywords generated from your photos
- Photographs of container contents that you upload
- Search history within your account
2.3 Usage Data
We may collect basic usage information such as login timestamps and feature usage to improve the App. We do not use third-party website analytics or advertising scripts (such as Google Analytics tags). Where we measure the performance of ads we run, we do so using the limited server-side method described in Section 2.4 and Section 4.3.
2.4 Advertising and Attribution Data
When you reach WheresIt through an online advertisement or campaign link, we collect identifiers and parameters contained in that link — including the Google click identifier (gclid) and campaign tags such as source, medium, and campaign name — along with the page you landed on and the site that referred you. We store this in a first-party cookie on your device (named wi_attrib) for up to 90 days and, if you create an account, associate it with your account. We use it only to understand which ads and campaigns lead to sign-ups and paid subscriptions. See Section 4.3 for how this information is shared with our advertising provider.
3. How We Use Your Information
We use the information collected to provide and improve WheresIt:
- To catalog your items and return accurate search results
- To enable family sharing and multi-user access within your sites
- To send your photos to our AI provider for item recognition (see Section 4)
- To allow you to search your inventory across one or all of your sites
- To send account-related emails (password reset, invite notifications)
- To measure whether ads we run lead to sign-ups and paid subscriptions (see Sections 2.4 and 4.3)
We do not sell or rent your personal data, and we do not share it with data brokers. The only advertising-related sharing we do is sending a click identifier back to our advertising provider to measure whether our own ads led to subscriptions, as described in Sections 2.4 and 4.3.
4. Third-Party Services
4.1 OpenAI API (AI Image Recognition)
When you photograph a container, the image is sent to OpenAI (openai.com) for AI-powered item recognition and description. OpenAI processes the image to identify and describe its contents, which are then stored in your WheresIt inventory. OpenAI's use of submitted data is governed by their own privacy policy and API terms, available at openai.com/policies. We send only the photo — no personally identifiable information is included with the image request.
4.2 Payment Processing
WheresIt offers paid subscription plans. Payments are processed by Stripe, Inc., a third-party payment processor. Your payment card details are entered directly with Stripe and are never stored on WheresIt's servers. We retain limited billing-related information such as your plan, billing interval, subscription status, and a Stripe customer and subscription identifier. Stripe's handling of your information is governed by its own privacy policy, available at stripe.com/privacy.
4.3 Advertising Measurement (Google Ads)
We advertise WheresIt through Google Ads. When you arrive from one of our ads, your browser includes a Google click identifier (gclid), which we store as described in Section 2.4. If you later subscribe to a paid plan, we may send that click identifier back to Google Ads — together with the fact that a subscription occurred and its value — so we can measure which ads lead to subscriptions. We share only this measurement information; we do not send Google your name, email, inventory, or photos. Google's use of this data is governed by its own privacy policy, available at policies.google.com/privacy.
4.4 Anthropic API (In-App Help Assistant)
WheresIt includes an in-app help assistant. When you send a message in the help chat, the text of that message is sent to Anthropic (anthropic.com) to generate a response. We do not send your inventory or photos to the help assistant. Anthropic's use of submitted data is governed by their own privacy policy and API terms, available at anthropic.com.
5. Data Storage and Security
Your data is stored on secured servers. We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, or disclosure. However, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.
6. Family Sharing and Invited Users
WheresIt allows you to invite family members or other users to access your site inventory. Invited users can view and search your inventory within the sites you grant them access to. You are responsible for managing who has access to your sites. You may revoke access to invited users at any time through the App.
7. Data Retention
We retain your data for as long as your account is active. If you delete your account, your data will be removed from our systems within 30 days, except where retention is required by law. You may request deletion of your account and all associated data at any time by contacting us.
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your account and data
- Export your inventory data in a readable format (where available)
To exercise any of these rights, contact us at the address in Section 10.
9. Children's Privacy
WheresIt is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Contact Us
If you have questions about this Privacy Policy or your data, please contact:
Visaya Business Systems
Email: privacy@wheresit.app
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or an in-app notice. Continued use of WheresIt after changes are posted constitutes acceptance of the updated policy.