Privacy Policy

Effective date: July 22, 2026

Who we are

WhereisX is operated by Raygio LLC, a California limited liability company. When this policy says "we," "us," or "our," it means Raygio LLC. When it says "the app," it means the WhereisX mobile application and the website at whereisx.app.

Mailing address: Raygio LLC 2108 N St, STE N Sacramento, CA 95816 USA

For privacy questions, write to privacy@whereisx.app.

What we collect

We collect only what's needed to make the app work.

Account information. When you sign in, we receive your email address (or, if you use Sign in with Apple, an Apple-relayed email). We use this to identify your account across devices. If you join a household, your email address, display name, and profile photo are visible to the other members of that household.

Items you save. When you save an item, we store the item's name, the location you specified, any descriptive notes, and timestamps. This is your data — we treat it as private to you and your household members. To interpret what you said or typed, item names and location descriptions are sent to Google's Gemini API for processing (see "Who we share with").

Voice input. When you speak to the app, your device's built-in speech engine (Apple or Google speech recognition, depending on your device) converts your speech to text on the device — the audio itself never leaves your device, and we never receive or store audio recordings. Only the resulting text is sent to our servers and to Google's Gemini API to understand what you said; the text is discarded after processing, and only the resulting item record is kept.

Photos. If you take a picture of a drawer or cabinet so the app can catalog its contents, the image is sent to Gemini for processing. We retain the resulting text descriptions in your account; we do not retain the original image after processing.

Subscription information. If you subscribe to WhereisX Pro, Apple or Google process the payment. We receive a subscription receipt and the entitlement status (active or expired) — never your card number.

Device and diagnostic information. We collect crash reports and performance diagnostics through Sentry — device type, OS version, app version, and IP address — to debug crashes and keep the app reliable. We do not use advertising identifiers, and we do not track you across other companies' apps or websites.

How we use it

• To deliver the core features of the app (saving items, answering questions about where things are)
• To enforce subscription entitlements
• To debug crashes and improve features
• To respond to support requests
• To comply with legal obligations

We do not sell your personal information. We do not use your saved items, voice input, or photos to train AI models — neither ours nor third parties'.

Who we share with

| Provider | Purpose | What they receive | |---|---|---| | Supabase | Database hosting | Account data, items, locations | | Google (Gemini API) | AI language understanding and photo recognition | Item names and locations, voice input as text, photos when applicable | | Apple | Sign in with Apple, in-app purchases | Auth identifier, subscription transactions | | RevenueCat | Subscription management | Subscription receipts, your account identifier | | Sentry | Crash and performance monitoring | Crash reports, performance data, device info, IP address; in-app feedback you submit includes your account email | | Vercel | Website hosting (whereisx.app) | Standard web request data |

These providers process data on our behalf under their own privacy and security obligations.

Data retention

• Active accounts: we retain your data for as long as your account exists.
• Deleted accounts: when you delete your account from the app's Settings, we permanently delete your account data — profile, items, locations, and feedback — within 30 days. Anonymized billing records (subscription events with all account identifiers removed) are retained for accounting, refund handling, and other legal and financial obligations. Backup snapshots may persist for up to an additional 30 days before they roll off.
• Voice input: audio is discarded immediately after transcription. The text transcription persists only as long as the resulting item record persists.
• Logs: operational logs (errors, request metadata) are retained for 30 days for debugging.

Your rights

You can:

• See your data — view all items in the app
• Edit your data — modify or delete any item in the app
• Delete your account — in the app's Settings, or by emailing privacy@whereisx.app
• Export your data — email privacy@whereisx.app and we'll send you a JSON export within 30 days

If you live in the EU, EEA, or UK (GDPR) or in California (CCPA / CPRA), you have additional rights:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — correct inaccurate data
• Right to deletion — what the in-app deletion already does
• Right to data portability — the JSON export above
• Right to object — opt out of any processing not strictly required for the service
• Right to non-discrimination — we treat all users the same regardless of which rights you exercise

To exercise any of these, email privacy@whereisx.app with your account email. We'll respond within 30 days.

Children

WhereisX is for users 13 years and older. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact us at privacy@whereisx.app and we will delete the account.

International users

We are based in California, USA. By using WhereisX, you consent to your data being processed in the United States. We rely on Standard Contractual Clauses (or equivalent transfer mechanisms) when receiving data from the EU, EEA, UK, or Switzerland.

Security

We protect your data with industry-standard practices:

• All connections are encrypted in transit (TLS).
• Data at rest in Supabase is encrypted.
• Access to production systems is restricted to a small number of authorized engineers.

No system is 100% secure. If we discover a breach affecting your data, we will notify you in accordance with applicable law.

Changes to this policy

We may update this policy from time to time. The "Effective date" at the top will reflect when the latest version took effect. For material changes, we'll notify you in the app before the changes take effect.

Contact

Privacy questions: privacy@whereisx.app

Mailing address: Raygio LLC 2108 N St, STE N Sacramento, CA 95816 USA