Privacy Policy
Last updated 2 September 2026
Where's My Stuff is a personal inventory app. You photograph the things you own, it names them, and it remembers where you put them. This page explains exactly what that involves storing, who else touches it, and how to get it back or have it deleted.
What we store
Your account
Your email address, and your name if you give one. If you sign up with a password we store a bcrypt hash of it, never the password itself. If you sign in with Google we store the account identifier Google gives us and your profile picture URL, and we never see your Google password. We also record when your email address was confirmed, which plan you are on, and when your subscription runs to.
The things you catalogue
Item names, descriptions, categories and tags; the places and containers you create; and the history of where each item has been moved. This is the content of the app — it exists because you put it there, and it is visible only to your account.
Your photos
Photos you take or choose are uploaded to our storage and shown back to you in the app. Your device resizes them before upload, so we never receive the full-resolution original.
Technical data
Our server sees your IP address on each request and uses it to rate limit abuse. It is held in memory only, for the length of the rate limit window, and is never written to our database.
What we don’t do
- No analytics or tracking. There is no analytics script, no tag manager, and no advertising identifier in the app or on this website.
- No advertising, and no selling data. We do not sell or share your information with anyone for marketing, and we never will.
- No tracking cookies. This website stores one thing in your browser — whether you chose the light or dark theme. Signing in to the app uses a token kept on your device, not a cookie.
- No reading your inventory. Your items and photos are not used to train anything, and no one at Where's My Stuff looks at them except where you explicitly ask us to help with a support problem.
Permissions the app asks for
Each of these is requested only when you first use the feature that needs it, and the app works without them if you decline.
- Camera — to photograph the things you are cataloguing.
- Photo library — to name items from pictures you already have.
- Microphone and speech recognition — so you can ask where something is out loud instead of typing. Your speech is turned into text by your device or its operating system; we receive only the resulting search text.
Who processes data for us
We use a small number of service providers to run the app. They act on our instructions and only for the purposes below.
| Provider | What it handles |
|---|---|
| Google Cloud | Hosts the database holding your account and inventory. |
| Amazon Web Services | Stores your photos and delivers them to your device. |
| Anthropic | Suggests a name for a photo. A downscaled copy of that one image is sent for the suggestion, and under Anthropic’s API terms it is not used to train their models. |
| Hostinger | Delivers our email — confirmations and password resets. |
| Google Play | Takes payment for subscriptions and tells us which plan you are entitled to. We never see your card details. |
Google Sign-In is optional. If you use it, Google tells us your email address, name and profile picture so we can create your account — nothing else.
How long we keep it
Your account and everything in it is kept until you ask us to delete it. Email confirmation and password reset links expire on their own — twenty-four hours and one hour respectively — and can only be used once.
Your choices
Delete it. Open the app, go to the You tab and tap Delete my account. It takes effect immediately and removes your account, your items, places and containers, your move history, and your photos from our storage. It cannot be undone. Full instructions.
Get a copy. Email us at support@wheredatgo.com from the address on your account and we will send you your data within 30 days.
Correct your details. Your name, items, places and photos can all be edited or removed from inside the app at any time.
Cancel a subscription. Subscriptions are managed by Google Play, so cancel through the Play Store. You keep access until the period you have paid for ends.
Depending on where you live you may have additional rights over your personal data, including to object to how we use it or to lodge a complaint with your local data protection authority. Write to us first and we will try to put it right.
Security
Traffic between the app and our servers is encrypted with HTTPS, and passwords are stored as bcrypt hashes. Our photo storage is not publicly listable and each photo sits at its own long, randomly generated address, so it cannot be found by guessing or by browsing. That address is not itself secret, though: anyone you send it to can open that one photo. No system is perfect, and if a breach ever affects your data we will tell you.
Children
Where's My Stuff is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.
Changes
If this policy changes we will update the date at the top of this page. If a change materially affects how we handle your data, we will tell you in the app or by email before it takes effect.
Contact
Questions, requests, or anything that looks wrong: support@wheredatgo.com. A real person reads it.