Privacy policy
Where Was It is an Android app that remembers where you put things. It is made by Sarvesh Nerurkar, an independent developer in Mumbai, India ("we" below). This page says what the app stores, where, who helps us run it, and how to delete it. If anything here is unclear, write to hello@getwherewasit.com.
- Without an account, everything stays on your phone.
- Your things and places reach our servers only if you sign in and back up or share a circle.
- When you type a sentence, it is sent to an AI model to be understood. We don't store the sentence.
- Crash reports and usage counts never contain your things, your places or what you typed, and you can turn them off.
- We don't sell your data and there are no ads.
- You can delete your account in the app, or by emailing us.
1. On your phone
The app keeps your circles, places, items, their history and your chat with the app in a database on your phone. Without an account none of it leaves the phone, except a sentence you type (section 4) and crash reports and usage counts (section 5).
Chat history always stays on the phone. It is not backed up and does not come back on a new phone.
When you open the app, it signs you in anonymously. This gives your phone a random ID so it can use the sentence feature (section 4). It does not include your name, email address or anything about your things.
2. When you sign in
You sign in with your email address and a one-time code we email you. We store:
- your email address,
- the name you give, which is shown to people in your circles,
- your plan and any credits or waivers on it,
- an anonymous ID linking your account to the sign-in service.
Signing in on its own does not upload your things.
3. When you back up or share a circle
If you back up a circle, or invite someone into it, the circle is copied to our database and kept in sync between the phones of its members. That includes:
- the circle's name, and its members' names and roles,
- places and how they nest,
- items, with their names, tags, notes and quantity,
- the history of where each item has been, and who moved it,
- invite codes, and who joined with them.
Everyone in a circle can see everything in it. Access is enforced on the server, not just in the app.
4. When you type a sentence
To understand a sentence such as "put my passport in the bedroom cupboard", the app sends it to our parsing service. The request also includes what the model needs to match your words to your home:
- the names of the circle's places,
- its items' names, tags and locations,
- the previous message, if your sentence continues it.
Our service passes this to Anthropic's Claude model. The answer comes back as a suggestion, and nothing is saved until you confirm it.
- We don't store the sentence. For each request we keep:
- your anonymous account ID,
- the time,
- the model used,
- the number of tokens,
- what kind of request it was (for example, storing or finding something),
- how it ended,
- how long it took.
- Anthropic processes the request under its commercial terms. Under those terms, it does not use data from its API to train its models. It may keep requests for a limited time for safety and abuse monitoring; see Anthropic's privacy policy.
You don't have to use sentences. You can add, move and find things by hand, and that sends nothing.
5. Crash reports and usage counts
To find bugs and learn which parts of the app get used, the app sends:
- Crash reports to Sentry: the error, the app version, the device model and OS version, and your anonymous account ID. They never include your email.
- Usage counts to PostHog, hosted in the EU: which screens are opened and which actions are taken, such as "an item was saved". These are recorded as fixed labels and numbers.
Neither ever contains what you typed or searched for, or the names of your items, places or circles. Both are on by default. The first screen of the app says so, and you can switch each one off in Settings → Notifications & data.
6. Who processes data for us
We use these services to run the app. Each one processes data only to provide its service to us.
| Service | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, syncing circles | Mumbai, India |
| Fly.io | Runs the parsing service; sentences pass through it | Singapore |
| Anthropic | The AI model that reads sentences | United States |
| Resend | Sends sign-in code emails | United States |
| Sentry | Crash reports | United States |
| PostHog | Usage counts | European Union |
| Cloudflare | Hosts this website and the domain's email | Global network |
We don't sell or rent personal data, and we don't use it for advertising. We would disclose data only if the law required it.
7. How long we keep it
- Account and circle data: until you delete your account or leave the circle (section 8).
- Per-request records (section 4): kept for cost reporting. When you delete your account they are kept without your ID, so they no longer identify you.
- Crash reports and usage counts: kept for the retention period set in Sentry and PostHog, and not longer than we need them to fix bugs and understand use.
- Backups of the database may hold deleted data for a short period until they are replaced.
8. Deleting your data
In the app, go to Settings → Your account → Delete account. If you can't use the app, email us from the address you signed in with; see how to delete your account. Deleting your account:
- removes your account, email address, plan and preferences,
- takes you out of every circle. In circles other people still use, your past moves keep your name, so their history still makes sense,
- closes circles you were the last member of, so nobody can open them. Their contents stay on our server in that closed state. To have them erased completely, email us and we will do it within 30 days.
If you are the only owner of a circle that other people still use, the app will ask you to make someone else an owner first, so the circle isn't left without one.
Deleting the app removes everything on the phone. Without an account, that is everything.
9. Your rights
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email hello@getwherewasit.com. We will reply within 30 days. This applies wherever you live, including under India's Digital Personal Data Protection Act and the EU GDPR.
10. Children
The app is not meant for children under 13, and we don't knowingly collect their data. If you think a child has given us data, tell us and we will delete it.
11. Security
Everything between the app and our services is encrypted in transit (HTTPS). Every request to the database is checked against who is asking, so one person can never read another person's circle. Sign-in uses one-time codes, never passwords.
12. Changes
If this policy changes, we will update this page and the date at the top. If the change is significant, we will also say so in the app.
Contact
Sarvesh Nerurkar, Mumbai, India · hello@getwherewasit.com