Privacy Policy

Effective date: September 20, 2026

Who we are

WhereisX is operated by Raygio LLC, a California limited liability company. When this policy says "we," "us," or "our," it means Raygio LLC. When it says "the app," it means the WhereisX mobile application and the website at whereisx.app.

Mailing address: Raygio LLC 2108 N St, STE N Sacramento, CA 95816 USA

For privacy questions, write to privacy@whereisx.app.

What we collect

We collect only what's needed to make the app work.

Account information. When you sign in, we receive your email address (or, if you use Sign in with Apple, an Apple-relayed email). We use this to identify your account across devices. If you use Sign in with Google or Sign in with Apple, we also receive the name and, where the provider supplies one, the profile photo on that account, which become your display name and picture. You can change your display name at any time. If you sign in with an emailed code, our email provider delivers that code to your address (see "Who we share with"). If you join a household, your email address, display name, and profile photo are visible to the other members of that household.

Items you save. When you save an item, we store the item's name, the location you specified, any descriptive notes, and timestamps. This is your data — we treat it as private to you and your household members. To interpret what you said or typed, item names and location descriptions are sent to Google's Gemini API for processing (see "Who we share with").

Voice input. What happens to your voice depends on the device you speak to.

On iPhone and Android, your device's built-in speech engine (Apple or Google speech recognition) converts your speech to text on the device. The audio never leaves your device and we never receive it. Only the resulting text is sent to our servers and to Google's Gemini API to understand what you said.

On Apple Watch, there is no speech engine available to apps, so the recording itself is sent to our servers and on to Google's Gemini API, which transcribes it and interprets what you asked in a single step. We do not store the recording: it exists for the duration of that request and is discarded when the response comes back.

In both cases the transcribed text is discarded after processing. What we keep is the resulting item record and, when the app answers out loud, the cached audio of that answer described next.

Spoken replies. When the app answers you out loud, the sentence it speaks — for example, "Your keys are in the kitchen drawer." — is sent to DeepInfra, which turns it into audio using an open-source voice model. DeepInfra receives only that sentence, which can include the names and locations of your items. It does not receive your name, your email address, or any account identifier. So that a repeated answer plays instantly, we keep the resulting audio clip in a private cache on our servers. Clips are stored under a one-way fingerprint of the sentence, and the same clip is reused for anyone whose answer is word-for-word identical. We keep a record of which households use each clip, so that we can delete it when they no longer do (see "Data retention"). A copy is also kept in the app's cache on your device.

Photos. If you take a picture of a drawer or cabinet so the app can catalog its contents, the image is sent to Gemini for processing. We retain the resulting text descriptions in your account; we do not retain the original image after processing.

Subscription information. If you subscribe to WhereisX Pro, Apple or Google process the payment. We receive a subscription receipt and the entitlement status (active or expired) — never your card number.

Device and diagnostic information. We collect crash reports and performance diagnostics through Sentry — device type, OS version, and app version — to debug crashes and keep the app reliable. We have configured Sentry not to collect IP addresses. We do not use advertising identifiers, and we do not track you across other companies' apps or websites.

Website analytics. When you visit whereisx.app, we count the visit with Vercel Web Analytics. It sets no cookies, stores nothing on your device, and uses no advertising or cross-site identifiers. For each page view Vercel records the page path, the site that referred you, any campaign parameters in the link you followed (such as utm_source), your approximate location derived from your IP address (country, region, city), your device type, and your browser and operating system versions. Your IP address itself is not stored. Page views within one visit are tied together by a hash derived from the request, which is discarded after 24 hours. What we see is aggregate counts: we cannot tell that a particular visit was you, and we cannot connect a visit to the website with your account in the app. This applies to the website only — the app does not use it.

Feedback you send us. If you use the in-app feedback form, we receive the message you wrote along with your account email, the category you picked, and your app version, so we can follow up.

How we use it

• To deliver the core features of the app (saving items, answering questions about where things are)
• To enforce subscription entitlements
• To debug crashes and improve features
• To respond to support requests
• To comply with legal obligations

We do not sell your personal information. We do not use your saved items, voice input, spoken replies, or photos to train AI models — neither ours nor third parties'.

Who we share with

These providers process data on our behalf under their own privacy and security obligations.

Data retention

• Active accounts: we retain your data for as long as your account exists.
• Deleted accounts: when you delete your account from the app's Settings, we permanently delete your account data — profile, items, locations, and feedback — within 30 days. If you share a household with other people, the items in it stay with the household. Anonymized billing records (subscription events with all account identifiers removed) are retained for accounting, refund handling, and other legal and financial obligations. Backup snapshots may persist for up to an additional 30 days before they roll off.
• Voice input: iPhone and Android audio never reaches us — transcription happens on your device. Apple Watch audio reaches us only for the length of the request that transcribes it, and is never written to storage. The resulting text persists only as long as the item record it created.
• Spoken-reply audio: cached clips are deleted along with the household that uses them. For most people that is when you delete your account; if you share a household, its clips stay with it, like its items. A clip that is word-for-word identical to another household's answer is kept until the last household using it is gone. We do not delete clips on a timer, because an answer is prepared when you save an item so that it is instant whenever you ask, even years later. Clips made before we began recording which household uses them, and that we could not match to one afterwards, are not removed by account deletion. Clips cached on your device are removed when you delete the app or your device clears the app's cache.
• Photos: never stored. An image sent for identification exists only for the duration of that request.
• Website analytics: the per-visit hash that links page views together is discarded after 24 hours. What remains is aggregate counts with nothing identifying attached to them, which we keep for as long as we run analytics on the site.
• Logs: operational logs (errors, request metadata) are retained for 30 days for debugging.

Your rights

You can:

• See your data — view all items in the app
• Edit your data — modify or delete any item in the app
• Delete your account — in the app's Settings, or by emailing privacy@whereisx.app
• Export your data — email privacy@whereisx.app and we'll send you a JSON export within 30 days

If you live in the EU, EEA, or UK (GDPR) or in California (CCPA / CPRA), you have additional rights:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — correct inaccurate data
• Right to deletion — what the in-app deletion already does
• Right to data portability — the JSON export above
• Right to object — opt out of any processing not strictly required for the service
• Right to non-discrimination — we treat all users the same regardless of which rights you exercise

To exercise any of these, email privacy@whereisx.app with your account email. We'll respond within 30 days.

Children

WhereisX is for users 13 years and older. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact us at privacy@whereisx.app and we will delete the account.

International users

We are based in California, USA. By using WhereisX, you consent to your data being processed in the United States. We rely on Standard Contractual Clauses (or equivalent transfer mechanisms) when receiving data from the EU, EEA, UK, or Switzerland.

Security

We protect your data with industry-standard practices:

• All connections are encrypted in transit (TLS).
• Data at rest in Supabase is encrypted.
• Access to production systems is restricted to a small number of authorized engineers.

No system is 100% secure. If we discover a breach affecting your data, we will notify you in accordance with applicable law.

Changes to this policy

We may update this policy from time to time. The "Effective date" at the top will reflect when the latest version took effect. If we make a significant change, we'll notify you, for example by email or with a notice in the app.

Contact

Privacy questions: privacy@whereisx.app

Mailing address: Raygio LLC 2108 N St, STE N Sacramento, CA 95816 USA