Privacy

1. Who we are and what this covers

Wheredai is an app published by Zinnia Development LLC (“Zinnia”, “we”, “us”), a limited liability company in the State of New Jersey, United States. Zinnia is the controller of the personal information described here. This page applies to:

• This website, whered.ai.
• Guest pages (coming soon) at go.whered.ai, which hosts will be able to open to their guests with a QR code or link after launch.
• The Wheredai app on iOS, Android and the web.

Everything in the company privacy policy (version 1.0, effective September 8, 2026) applies to Wheredai, including the notices for California, other US states, the EEA, the UK and Switzerland, unless this page says otherwise.

2. What we collect

On this website, today

• Messages to us. Whatever you write when you email us.
• Server logs. The IP address, requested page and time of each request, kept by our hosting provider for security.

On guest pages (coming soon)

The guest link or QR-code token you arrive with opens a guest session. Guest pages, including QR chat and the guest inbox, are coming soon after launch. When available, we will also process the questions you ask. Answers will come only from what the host chose to share. Guest pages load no analytics, no error reporting and no third-party scripts.

In the app

• Account. Your email address, a display name and a one-time sign-in code, or the name and email that Apple or Google share when you sign in with them (a private relay address is fine). We do not use passwords.
• A sign-in security cookie. When you sign in, a security cookie on that device keeps anyone else from locking you out of signing in. It lasts up to 400 days, holds no email address and isn’t used for analytics. The app keeps it in its secure storage.
• Content you add. Places, spaces, containers and items; facts, documents, contacts and events; notes, how-to text and labels; the people you invite and who you let see each thing; and the observations that record who last saw something where, and when.
• Voice. Audio while you speak to the assistant, streamed for transcription without saving a recording on your device or our servers. The transcript becomes your message to the assistant; sections 6 and 7 explain how messages are handled and kept.
• Photos attached to saved things. Photos you choose to take or upload are stored with the saved record. Photo interviews, walkthroughs and video capture are coming soon. Sections 5 and 7 explain how photos are processed and kept.
• Imports. A file, photos of a list or text you paste that you choose to import. Wheredai reads it into a preview you check before anything is added, and keeps the file, photos or text only until it has been read. Sections 5 and 7 explain how imports are read and kept.
• Purchases. When you buy a subscription, Apple, Google or Stripe processes the payment and tells us the product, price, currency, date, status and a transaction identifier. We never receive your full card number.
• Device, usage and diagnostics. Device model, operating system, app version, language and time zone; which features you use and whether they succeeded, collected without cookies or advertising identifiers; crash reports with account content redacted where technically possible.
• Assistant connections. If you connect an AI assistant (section 6), we keep a record of the connection: which assistant it is, when you connected it, and whether it can only read or can also make changes. Each change an assistant makes is recorded with the connection that made it, so you can see it and undo it within an hour. If you create a personal access token, we store only a one-way hash of it and its last four characters; the token itself is shown to you once.

We do not collect precise location in the background, biometric identifiers, health data or government identification numbers. A place address is stored only if you type it in, and only the members of its workspace can see it. We do not buy data about you.

3. Device permissions the app asks for

Each permission is requested only when you use a feature that needs it, is optional, and can be turned off later in your device settings; the rest of the app keeps working.

4. How we use information

• To provide Wheredai: create and secure your account, store and sync your content, answer your questions, share a workspace with the people you invite, process purchases.
• To respond to you: support, privacy requests and complaints.
• To keep the service secure and reliable: detect abuse, rate-limit requests, debug crashes, make backups.
• To improve the product, using aggregate feature usage, never the content of your places.
• To send service messages: sign-in codes, invitations, the digests you turn on, receipts, security alerts and changes to these documents.
• To comply with law and defend legal claims.

The legal bases for each purpose are the ones in section 4 of the company policy. We do not use personal information for targeted advertising, build marketing profiles, or make automated decisions with legal or similarly significant effects.

5. AI features and your data

• Your content is never used to train models. Not by us, and not by the AI providers we use: we send your content to an AI provider only after its terms, or its settings for our account, rule out training on it. How long each provider keeps what it receives is in section 6.
• Audio is ephemeral. Voice is streamed for transcription without saving a recording on your device or our servers. Offline sync and offline recording are coming soon after launch. When available, recordings made offline will be encrypted on your device and deleted after they are uploaded and transcribed.
• Images are minimised. Photos attached to saved things are processed into display copies with metadata, including location metadata, removed. The copy as uploaded is deleted once the display copies are made. These photos are never sent to an AI provider. Photo interviews, walkthroughs and video capture are coming soon after launch.
• Secret facts stay out of models. A value you mark as secret (a lock code, a Wi-Fi password) is encrypted separately, never sent to a model, never indexed for search, and will stay out of the offline database when offline sync becomes available after launch.
• Answers can be wrong. Wheredai infers where something probably is and shows how confident it is. Verify anything that matters.
• Reports you send. You can report any reply from the in-app assistant. A report carries the reason you choose, your note if you write one, the reply as you saw it and, unless you leave it out, your message before it, plus details we add about how the reply was produced (its outcome, how it was routed and which provider answered, and your app’s language). Only Wheredai reads reports, to make the assistant safer. They aren’t shared, and they’re never used to train models or as evaluation data. We keep each report for 90 days, or until your account is erased if that comes first.
• Imports. A table whose column headings Wheredai recognizes, such as one made from the import template, and a file from Download your data are read without AI. Anything else you import, such as photos of a list, pasted text or a table with other headings, is sent to Anthropic to sort into a preview, and only after you give the consent the assistant asks for. From a table, only its first rows are sent, to work out what each column holds. Text that looks like a secret is left out of what is sent from a file or pasted text. Photos are sent as smaller copies with their metadata, including location metadata, removed. How long Anthropic keeps what it receives is in section 6.
• Search in your languages. So you can find a thing by searching in any language your workspace uses, Wheredai sends Anthropic each saved thing’s name and kind, the names of the places and containers it sits in, and the names of up to 12 things beside it, with the languages your workspace’s members use Wheredai in and English. Anthropic writes words for the thing in those languages, which are kept with it as hidden search words: they are never shown, and they are deleted with the thing. This happens in the background for everything saved in a workspace, including things marked “Only me”, whether or not you use or have turned on the in-app assistant, and it doesn’t ask for the assistant’s consent. When everyone in a workspace uses Wheredai in English, a name written only in plain English letters isn’t sent. Aliases you add, hints, notes, tags, facts, values you mark secret, photos and ids are never sent. How long Anthropic keeps what it receives is in section 6.

6. Who we share it with

• People you share with. Members of a workspace see what each item’s visibility allows. Anything you mark “Only me” is hidden from everyone else, including the workspace’s owner. Guest pages are coming soon after launch; when available, guests will see exactly what you chose to share with them.
• Assistants you connect. When you connect an AI assistant such as Claude or ChatGPT, it can look up what you can see in your places and, if you allowed changes, add and update items for you. It never receives a value you mark secret. What it receives is then handled by that assistant’s provider under the provider’s own terms and privacy policy, not ours. We email you each time a new assistant is connected, and you can disconnect it, or revoke a token, at any time in Settings; access ends at once.
• AI providers. Cohere (Canada; data may be processed in Canada, the United States and other countries) turns the text of your items and your searches into numbers that let search find things by meaning. It receives names, aliases, tags, notes and similar descriptive text, and never a value you mark secret. Cohere doesn’t train on it, and deletes what it logs within 30 days unless the law requires longer or its abuse checks flag the request. Anthropic (United States; data may be processed in the United States and other countries) writes hidden search words for your saved things in your workspace’s languages (section 5). It receives each thing’s name and kind and the names of the places and things around it, and never a value you mark secret. Anthropic doesn’t train on it, and deletes it within 30 days unless it’s flagged for breaking its usage policy. Search sends to Cohere and Anthropic without asking for the assistant’s consent. Your conversations with the in-app assistant, below, reach its providers only once the assistant is available in the app and you turn it on. If any of this changes, this page will say so. Any other AI provider, for example for photos, is named here before it receives your content.
• The in-app assistant. When you ask or tell the assistant something, Anthropic answers, and OpenAI answers when Anthropic is down. They receive your messages and the recent turns of the conversation, your workspace and place names, and the items the assistant looks up for you, and never a value you mark secret. Anthropic doesn’t train on it, and deletes it within 30 days unless it’s flagged for breaking its usage policy. OpenAI doesn’t train on it, and keeps it for up to 30 days to check for abuse. When you speak to the assistant, Soniox turns your voice into text, with Deepgram as the backup, and Cartesia reads replies aloud, with OpenAI as the backup. Soniox also receives the names of your places and of the things in them, so it can recognize them when you say them. Soniox doesn’t train on your recordings or these names and doesn’t store them. Deepgram doesn’t train on them, because we opt out on every request, and keeps them only while turning them into text. Cartesia doesn’t train on replies, because we’ve opted out, and may keep their text for a time. Data sent to these providers may be processed in the United States and other countries. The assistant asks for your consent before your first conversation, and you can turn it off in Settings at any time, which deletes your conversations on that device. Your consent covers what your own conversations send, which in a shared workspace can include items another member added that you can already see; other members don’t need to consent. Your conversations are kept on your device, not on our servers: we keep a record of each turn’s outcome and the changes it made, without your messages, for 7 days. When the assistant changes your items, the message that asked for the change is kept with that change in your workspace’s change history.
• Imports. When an import needs AI (section 5), Anthropic receives what is sent, on the same terms as the assistant: it doesn’t train on it, and deletes it within 30 days unless it’s flagged for breaking its usage policy. No other AI provider receives an import. An import asks for the same consent as the assistant.
• Service providers, under written contracts that limit them to our instructions. For this website today: Vercel (hosting, United States), Amazon Web Services (DNS and application hosting, United States), Resend (email delivery, United States), PostHog (cookieless product analytics, United States) and Sentry (error monitoring, United States). For the app, as designed: Apple and Google (sign-in, distribution and payments), Stripe and RevenueCat (web payments and subscription status), and Amazon Web Services (Amazon SNS), Apple Push Notification service and Google’s Firebase Cloud Messaging (carrying a notification’s text to your phone). Offline sync is coming soon after launch; PowerSync is planned for that feature and does not receive app data at launch.
• When the law requires, or to protect the rights and safety of you, us or others. We tell you about a request for your data unless we are legally prevented from doing so.
• In a business transfer, with notice before a different policy would apply, and with your consent for anything else.

We do not sell personal information, share it for cross-context behavioural advertising, or disclose it to data brokers.

7. How long we keep it

8. Your rights and choices

Wherever you live, you can:

• Access and export your information and content in a portable format, from inside the app or by asking us. An export contains what you can see; content other members hid from you is not in it. Photos are not included.
• Correct inaccurate information in the app or by asking us.
• Delete your account and data (section 9).
• Object to or restrict processing based on legitimate interests, and withdraw consent at any time.
• Turn off usage analytics in the app’s settings.
• Complain to us, and to your data protection authority or attorney general.

To exercise a right, use the controls in the app or email hello@whered.ai with the subject “Privacy request” and the word Wheredai. We verify requests, usually by sending a code to the address on the account. We confirm receipt within 5 to 7 business days and respond within 30 days. The company policy sets out verification, agents, appeals and the regional notices; they apply to Wheredai unchanged.

9. Deleting your account and exporting your data

In Settings, under Account data, choose Delete account. Wheredai offers Download your data first. If you own a workspace shared with others, you transfer or delete it first. You can also email hello@whered.ai from the address on the account with the subject “Delete my Wheredai account”; you do not need the app installed to ask. Step-by-step instructions are on the support page.

Deletion starts at once: you’re signed out everywhere, and assistants you connected lose access. Your account, profile, the content you own, device tokens and analytics identifiers are erased 30 days after you ask, and from backups within 90 days. Until then, we can stop it if you write to us from the address on the account. Workspaces only you are in are deleted with your account. In a workspace you share, what you added that others can see stays with them, and its history keeps an id with no name in place of you; your “Only me” items there are erased. We keep only what section 7 says we must. Deleting the app from your device does not delete your account, and does not cancel a subscription bought through a store. Deleting your account does not cancel a subscription bought through a store either: cancel it in the store’s subscription settings. A subscription you pay for on the web keeps renewing until your account is erased, then ends at the end of that billing period; if we stop the deletion, it keeps going.

10. Children

Wheredai is not directed to children under 13, and we do not knowingly collect personal information from them. In the European Economic Area and the United Kingdom the minimum age to create an account is 16. A parent or guardian may add a child’s belongings to their own account; that information belongs to the parent’s account. If you believe a child has given us personal information, contact us and we will delete it promptly.

11. Changes and version history

We update this page as the app, its providers or the law change, with a new version number and effective date here. For material changes that reduce your rights or expand how we use data already collected, we notify you by email or in the app at least 30 days before they take effect.

• Version 1.20, November 11, 2026. Adds reminder notifications: what a notification shows and the services that deliver it (sections 3 and 6).
• Version 1.19, October 31, 2026. Removes the early-access list (the summary and sections 1, 2, 4, 6 and 7).
• Version 1.18, October 24, 2026. Adds search in your languages: what is sent to Anthropic to write hidden search words for saved things, and that it doesn’t need the assistant’s consent (sections 5 and 6).
• Version 1.17, October 19, 2026. Adds imports: what an import collects, when it is sent to an AI provider, and how long its file, preview and record are kept (sections 2, 3, 5, 6 and 7).
• Version 1.16, October 13, 2026. States what happens to a subscription when an account is deleted (section 9).
• Version 1.15, October 13, 2026. States where Delete account and Download your data are in the app (section 9).
• Version 1.14, October 12, 2026. States how photos are processed, when removed photos are erased and how long photo links work, and that exports do not include photos (sections 5, 7 and 8).
• Version 1.13, October 11, 2026. Clarifies photos attached to saved things, their device permissions and retention, separately from future walkthrough capture (summary and sections 2, 3, 5 and 7). Issued with version 1.13 of the terms supplement.
• Version 1.12, October 9, 2026. No change to this policy. Issued with version 1.12 of the terms supplement.
• Version 1.11, October 9, 2026. No change to this policy. Issued with version 1.11 of the terms supplement.
• Version 1.10, October 5, 2026. Clarifies that photo/video capture, guest pages (including QR chat and the guest inbox), and offline sync are coming soon after launch. Marks their planned data handling and clarifies that online voice audio is streamed without saving a recording.
• Version 1.9, October 4, 2026. Says that Soniox also receives the names of your places and of the things in them, to recognize them when you speak (section 6).
• Version 1.8, October 2, 2026. Says that when the in-app assistant changes your items, the message that asked for the change is kept with that change in your workspace’s change history, and for how long (sections 6 and 7).
• Version 1.7, October 2, 2026. Names the in-app assistant’s AI providers and speech partners, what each receives and how long it keeps it, and adds reports you send and how long the assistant’s records are kept (sections 5, 6 and 7).
• Version 1.6, September 30, 2026. Uses “workspace” for what you share with other people (the summary and sections 2, 4 and 6).
• Version 1.5, September 30, 2026. Describes deleting your account and downloading your data in the app, and the sign-in security cookie (the summary and sections 2, 7 and 9), and changes the contact address to hello@whered.ai.
• Version 1.4, September 29, 2026. Updates section 6’s list of providers.
• Version 1.3, September 29, 2026. Updates section 5, AI features and your data.
• Version 1.2, September 26, 2026. Names the AI provider that receives your content today (Cohere, for search), what it receives and how long it keeps it, and states the no-training rule precisely (sections 5 and 6).
• Version 1.1, September 25, 2026. Adds assistant connections: what an assistant you connect can see and do, what we record, and how to disconnect it (the summary and sections 2, 6 and 7).
• Version 1.0, September 10, 2026. First published version, covering whered.ai, the early-access list and the app as designed before its first public release.

12. Contact

Questions, requests and complaints about this page go to:

• Zinnia Development LLC
• New Jersey, USA
• Email: hello@whered.ai
• Company support: zinnia.dev/support