WhoTookIt™ Privacy Policy
WhoTookIt™ is an app operated by Allied Inc ("we", "us"). This policy explains what information WhoTookIt collects, how we use it, and the choices you have. Questions: jktieman@alliedinc.us.
Information we collect
- Account information - your name and email address when you sign in. Sign-in is handled by Microsoft (Microsoft Entra); we do not see or store your password.
- Your groups - the groups you belong to and your role in them.
- Inventory and loans - items you or your group add (names, descriptions, categories, serial and model numbers, photos), where items are kept, and who borrowed what and when.
- Evaluations you ask for - the estimated value and write-up Claude produces for an item when its owner asks for one. Only the item's owner can see it.
- Contact details you choose to add - for example a phone number or address on your member record.
- Notification choices - which emails and text messages you want, and, if you opt in to text messages, your mobile number and the date and time you opted in.
How we use it
- To run the app: show your group's inventory, record loans and returns, and calculate due dates.
- To send the notifications you choose, such as when someone borrows your item or when something you borrowed is due back.
- To help you add items: photos you take can be analyzed to suggest an item's name and details, and barcodes can be looked up to find a product's description.
- To estimate what an item could sell for, when its owner asks: the item's description and details are sent to Claude, which may search the web for current prices.
- To keep WhoTookIt secure and working, and to answer your support requests.
We do not sell your information, and we do not use it for advertising.
Who can see your information
Items, loans and member details in a group are visible to that group's members. People outside your groups cannot see them. A group's plan and how much of it has been used this month are visible to the group's members. For billing, support and managing plans, the WhoTookIt administrator can see each group's name, its owners, its size and its plan and usage - but not its items, photos or loans. If a group is part of an organization, the organization's owners see the names and sizes of its groups.
Service providers
We use a small number of providers to operate WhoTookIt. They process information only to provide their service to us:
- Microsoft Azure (United States) - hosting, database, photo storage, sign-in and email delivery.
- Anthropic - analyzes item photos you choose to identify, to suggest item details; and, when an item's owner asks for an evaluation, receives the item's description to estimate its value (this can include web searches for current prices). For a quick appraisal, the photos you choose are sent to Anthropic to identify the item and are not stored by us.
- Twilio - delivers text messages to people who opt in.
- Stripe - takes payment for paid plans and extra packs. Your card details go to Stripe, never to us. We keep only the Stripe customer and subscription identifiers, the plan and its status, and the email address on the account.
- UPCitemdb and Open Library - product and book look-ups; only the barcode or book title is sent.
Using WhoTookIt in a web browser
WhoTookIt can also be used in a web browser at www.whotookit.com. In a browser, WhoTookIt keeps your sign-in token and a few settings (the group you last used, your light or dark choice, and your item filters) in your browser's storage on your own device. We do not use advertising or tracking cookies. Signing out, or clearing the site's data in your browser, removes them. The camera is used only when you choose to take a photo or scan a barcode, and a photo leaves your device only when you add it to an item.
Text messaging
Text messages are sent only to people who turn them on themselves in the app. See the Text Messaging Terms for how to opt in and out.
We do not share mobile phone numbers or text-messaging opt-in data and consent with third parties or affiliates for marketing or promotional purposes. Mobile information is shared only with the provider that delivers the messages (Twilio), solely to deliver them.
Your choices
- Change your email and text notifications at any time in the app under Settings.
- Reply STOP to any text message to stop receiving texts.
- Leave a group at any time in the app; you can ask us to delete your account and information by emailing jktieman@alliedinc.us.
Security and retention
Information is stored with Microsoft Azure and protected by encryption in transit and access controls. We keep it while your account or group is active, and delete it when you ask us to or when a group is deleted, except where we must keep records by law.
Children
WhoTookIt is not directed to children under 13, and we do not knowingly collect their information.
Changes
If we change this policy, we will update the effective date above and, for significant changes, let users know in the app or by email.
Contact
Allied Inc · jktieman@alliedinc.us