← Back

Privacy Policy

Last updated: April 2026

1. Data We Collect

Whatsinthebox collects the following information to provide the service:

  • Account information: Your email address and authentication credentials, managed securely by our authentication provider.
  • Photos: Inside and outside photos of your boxes that you upload for AI scanning.
  • Box data: Box numbers, room assignments, and AI-generated item tags associated with your account.
  • Purchase history: Records of in-app purchases processed through Apple's App Store, managed via Apple StoreKit.

2. How We Use Your Data

Your photos are transmitted to Claude AI by Anthropic solely to identify and tag items visible in each photo. Photos and item data are used exclusively to provide the inventory service to you.

We do not use your data for advertising, behavioral analytics, or third-party marketing. We do not sell, rent, or share your personal data with third parties for their own purposes.

3. Third-Party Services

Whatsinthebox uses the following third-party services to operate:

  • Authentication provider — User authentication and account management.
  • Claude AI by Anthropic — AI-powered image analysis to identify items in your photos. Photos are processed and not retained by Anthropic beyond the request.
  • Cloud hosting provider — Application hosting and private image storage.
  • Managed database provider — Secure database storage for your box and item data.
  • Apple StoreKit — In-app purchase processing. Payment information is handled entirely by Apple and is never accessed by Whatsinthebox.

4. Data Storage & Security

Your photos are stored in private, access-controlled cloud storage and are only accessible through your authenticated account. All data is transmitted over HTTPS. Database records are stored in a secure, managed database instance.

5. Data Retention & Deletion

Your data is retained for as long as you maintain an active account. You may delete individual boxes and their associated items at any time from within the app. To request full account and data deletion, contact us via the Support page. We will process deletion requests within 30 days.

6. Children's Privacy

Whatsinthebox is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal data, please contact us via the Support page.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Last updated” date. Continued use of the app after changes constitutes acceptance of the updated policy.

8. Contact

For privacy-related requests or questions, contact us via the Support page or email support@whatsitb.com.