Who Has It?

Privacy Policy

Last updated: 18 June 2026

Who Has It? ("the app", "we") helps you keep track of things you've lent out — who borrowed what, and when it's due back. This policy explains what we collect and why. We keep it minimal on purpose.

Who runs this

The app is operated by Son Thomsen (Sonokinetic). For any privacy question or request, contact son@sonokinetic.com.

What we collect

Photos & AI auto-fill

Item photos you save are stored in Cloudflare R2; the database keeps the record plus a link to the photo. The optional AI auto-fill feature sends the photo you just took to Google's Gemini API to suggest the item name and description — this happens only when you choose to scan a photo, and Gemini's handling is governed by Google's terms. We don't use your photos for advertising or to train models.

Payments

PRO subscriptions are processed by Stripe. Stripe collects and handles your payment details directly; we never see or store your card number. We store only your subscription status and the identifiers Stripe returns so we can keep PRO active. See Stripe's privacy policy for how they process payment data.

How your data is stored

How we use it

Only to provide the app: to sign you in, store and show your loan records, run AI auto-fill when you ask for it, and manage PRO. We do not sell your data or show ads.

Sharing

We don't share your personal data with third parties except the infrastructure providers that make the app work (Google Firebase, Google Gemini, Cloudflare, Stripe) acting as our processors, or where required by law.

Your choices & deleting your data

You can delete your account at any time from within the app ("Delete account"). This permanently removes your account, loan records, and stored photos from our systems. You may also email son@sonokinetic.com to request deletion.

Children

The app is not directed to children under 13 and we do not knowingly collect their data.

Changes

If this policy changes materially, we'll update the date above and post the new version at this URL.