Privacy Policy

WhereHouse ("WhereHouse," "we," "us," or "our") is currently operated by an individual, and is available to users worldwide. This Privacy Policy explains what information we collect when you use the WhereHouse application (the "Service"), how we use it, and the choices you have. If WhereHouse comes to be operated by a registered company in the future, this policy will be updated to reflect that change.

Information we collect

Account information

When you sign in with Google or Apple, we receive your name, email address, and profile picture from that provider. We do not receive or store your password for these providers — authentication is handled entirely by Google or Apple.

Content you provide

We store the information you enter into the Service: sites, storage locations, item categories, items, and any photos you upload. This content is yours, and it is only ever shown to you (or to anyone you explicitly choose to share it with, if and when a sharing feature becomes available).

Automatically collected information

Our hosting provider (Railway) and error-monitoring tooling may log standard technical information such as IP address, browser type, and request timestamps, for the purposes of operating and securing the Service. With your consent, we also use Statsig to automatically capture basic usage events (such as page views and clicks) to understand how WhereHouse is used. We do not use this information for advertising or sell it to anyone.

Cookies

WhereHouse uses a session cookie set when you sign in, which is strictly necessary for the Service to work (it keeps you signed in as you navigate between pages). With your consent, we also use an analytics cookie (Statsig) to understand how the Service is used -- we do not use advertising or tracking cookies. If you're browsing from the EU/EEA, UK, or Switzerland, we ask for your consent before any non-essential cookie runs; elsewhere, we simply let you know.

How we use your information

• To provide, maintain, and secure the Service.
• To authenticate you and keep your account and content private to you.
• To respond to support requests you send us.
• In the future, if you subscribe to a paid plan, to process and manage that subscription (billing itself would be handled by a third-party payment processor, not stored by us directly).

Third-party service providers

We rely on the following third parties to operate the Service. Each only receives the data necessary to perform its function:

• Google / Apple — authentication (sign-in).
• Backblaze B2 — storage of photos you upload.
• Railway — application hosting and database storage.

The Service is available worldwide, and these providers may process data in countries other than your own, including the United States. We only work with providers who maintain appropriate safeguards for personal data, and we do not sell your personal information to anyone.

Data retention and deletion

We retain your account and content for as long as your account is active. You can delete individual items, locations, or sites at any time within the Service. To request full deletion of your account and all associated data, email us at the address below — we will process such requests within a reasonable time.

Your privacy rights

Wherever you're located, you can access, correct, export, or delete most of your data directly within the Service. Depending on where you live, you may also have specific legal rights over your personal information, including:

If you are in the European Economic Area or UK

You have rights under the GDPR / UK GDPR to access, correct, delete, or port your data, and to object to or restrict certain processing. You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident

You have rights under the CCPA to know what personal information we collect, to request deletion, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under the CCPA.

Everywhere else

We extend the same core rights — access, correction, deletion, and export of your data — to all users of the Service, regardless of location.

To exercise any of these rights, contact us at the email below.

Children's privacy

The Service is not directed to children, and we do not knowingly collect personal information from children under 13 (or a higher age where required by local law, such as 16 in some countries).

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly.

Contact us

If you have questions about this Privacy Policy or your data, contact us at contact@getwherehouse.com.