Privacy Policy
Who We Are
MetaSpark Labs LLC operates WhatIsThat.io, an AI-powered camera and discovery service that identifies, explains, and responds to images and text you choose to submit.
Privacy inquiries and requests:
Email: no_reply@whatisthat.io
Location: Boynton Beach, FL 33436
Scope
This policy explains how we handle personal information when you use the WhatIsThat.io website, web app, and Android app. Features and third-party services differ by platform. In particular, the Unity Ads disclosures below apply to our Android app, not to our website or web app.
Information We Collect
Information you choose to provide
- Photographs, camera captures, accompanying prompts, and other text you submit for analysis, including follow-up captures you choose to take.
- Account details, such as your email address, when you register or contact us.
- Saved discoveries, responses, history, preferences, and feedback associated with your use of the Service.
- Messages or information you provide when requesting assistance or account deletion.
Technical and usage information
- Information needed to operate and secure the Service, which may include IP address, approximate location inferred from IP address, browser or device type, operating system, and application version.
- Usage, performance, error, and diagnostic information generated when you interact with our Service or its service providers.
- Subscription and transaction status needed to provide purchases and manage access. Payment providers process payment information under their own policies.
The Android app also integrates an advertising SDK. See Android Advertising and Unity Ads for additional data categories and purposes.
Camera and Images
The camera lets you choose what to photograph and submit. Captures and text you submit are used to generate a response and, where the feature is enabled, maintain your saved discoveries or the context of an intentional follow-up. Avoid submitting sensitive documents, other people's personal information, or photographs you do not have permission to share.
We do not intentionally send your submitted photographs or their AI-generated descriptions to Unity Ads for advertising targeting. The advertising SDK separately processes certain device and ad-interaction information as described below.
Why We Use Information
- To analyze submitted content and produce requested AI explanations and responses.
- To operate accounts, save discoveries and history, and remember selected preferences or follow-up context.
- To process purchases, manage subscription status and access limits, and respond to support requests.
- To maintain security, diagnose errors, prevent misuse, and improve reliability.
- On Android, to display, measure, and support advertisements and apply applicable advertising privacy choices.
- To meet legal obligations and respond to valid legal requests.
AI Processing and Storage Providers
We use OpenAI's API to process the images and text you submit and generate responses. Submitting content for analysis involves sending that content to OpenAI. For details about OpenAI's handling of data, see its Privacy Policy and published policies.
We use Supabase to support our database and storage, including accounts, saved captures and results where applicable. We do not use your submitted content to train our own AI models. Third-party service providers process information under their applicable terms and privacy practices.
Android Advertising and Unity Ads
The WhatIsThat.io Android app displays advertisements supplied by Unity Ads. We do not run Unity Ads in the WhatIsThat.io website or web app. Ads may be displayed on appropriate non-camera screens.
To serve and measure advertisements, Unity Ads may automatically receive information such as your device's advertising identifier (when available), other device or app identifiers, IP address and approximate location inferred from it, device model, operating system, language, application information, and information about ads shown and interactions with those ads. Unity may use and share certain information with its advertising, measurement, and technology partners as described in its policy. The data involved and the available choices can vary by location, device settings, consent, and Unity's SDK configuration.
Advertising may be personalized where permitted and where applicable privacy requirements have been satisfied; otherwise, contextual or non-personalized advertising may be used. You can review applicable privacy choices through Unity's ad privacy controls where available and your Android device's advertising privacy settings. To learn more, read Unity's Game Player and App User Privacy Policy.
Advertising privacy choices do not necessarily eliminate advertising, and Unity may continue to process information necessary for contextual ad delivery, security, and legal compliance. Contact us using the details above for questions about advertising in our app.
When We Share Information
We disclose information for the purposes described in this policy, including to:
- OpenAI, for the AI processing you request.
- Supabase, for application database, authentication, or storage functions as applicable.
- Payment and subscription providers used by the relevant platform, including Google Play for Android purchases.
- Unity Ads and its advertising partners, for Android advertising as described above.
- Technical service providers that help operate, maintain, and protect the Service.
- Authorities or other recipients when legally required, and parties involved in a legitimate business transfer subject to applicable law.
We do not directly sell your submitted images or text. Some privacy laws define certain advertising disclosures as a "sale" or "sharing" even when no money changes hands. Where those laws apply, we honor the choices and rights they require.
Retention and Deletion
We keep account information, submitted content, and saved results for as long as reasonably necessary to provide the features you use, fulfill your requests, maintain security, or satisfy legal obligations. Retention periods may differ by category of information and by provider. When we no longer need information, we delete or de-identify it as appropriate, subject to legal and technical limitations.
You may request deletion of your account and associated information using the contact details below. Information already processed by independent third parties may be subject to their own retention periods and rights-request procedures.
Your Rights and Privacy Choices
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing. You may also have rights regarding certain uses of personal information for targeted advertising or disclosures that qualify as a sale or sharing under local law.
To submit a privacy request, email no_reply@whatisthat.io. We may need to verify your identity before fulfilling certain requests. You may also manage available Android advertising preferences through your device settings or Unity's controls within an advertisement, where provided.
Account and Data Deletion Requests
To request deletion of your WhatIsThat.io account and associated data, send an email to no_reply@whatisthat.io with the subject "Account and Data Deletion Request." Include the email address associated with your account. Do not send your password or sensitive identity documents with the initial request.
We will explain any verification steps and let you know if certain records must be retained for security, financial, or legal reasons. Requests concerning information held by Unity may also be made using the privacy options in Unity's advertising and privacy policy.
Children's Privacy
Our Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has submitted personal information, please contact us so we can investigate and take appropriate action. Additional age-based protections and advertising restrictions may apply under the laws of a user's location.
Security
We use technical and organizational measures intended to protect information against unauthorized access, loss, or misuse. No transmission or storage method is completely secure, so we cannot guarantee absolute security.
International Processing
We are based in the United States. Our service providers may process or store information in the United States or other countries, where privacy protections can differ. Where required, international transfers are subject to applicable legal safeguards.
Changes to This Policy
We may update this policy as our services and legal requirements change. We will update the date at the top and provide additional notice of material changes where required by law.