Privacy Policy — What Is It Worth
Operated by WebAir AI
Last Updated: August 6, 2026
1. Scope of This Policy
This Privacy Policy covers both the whatisitworth.com website and the What Is It Worth iOS app, which are operated by WebAir AI. The website and the app share some infrastructure (including accounts), but they collect different information, so this policy describes each separately. Where a practice applies to only one of them, we say so.
The short version: the website lets you get AI valuations from a photo without creating an account, and photos submitted on the website are not kept after your valuation is generated. The iOS app offers additional features — an account, saved scans and collections with cloud sync, optional paid upgrades, and a price-guessing game with a public leaderboard — and those features require storing the data described below until you delete it.
2. Information We Collect — Website
Uploaded Photos
When you submit a photo on the website for a valuation, the image is transmitted securely to our servers and to our AI processors (described in Section 4) solely to identify the item and generate a value estimate. Website photos are processed transiently: we do not keep them after the valuation completes, apart from short-lived operational logs and caches used for reliability, debugging, and abuse prevention, which are automatically deleted on a short cycle.
Valuation Results
We retain valuation results (for example, the item description and estimated value range) in anonymized form — without your photo and without information identifying you — to power features like our community valuation examples and to measure and improve accuracy.
Device and Usage Information
- IP address and approximate location derived from it
- Browser type and version, device type, and operating system
- Timestamps, pages visited, valuation events, and performance metrics
Optional analytics (Google Analytics and Vercel Analytics) run only after you accept non-essential cookies. See our Cookies Policy for details and how to withdraw consent at any time.
Optional Account
You can use the website's valuation tool without an account. If you choose to create one (or sign in with an account created in the iOS app), the account data described in Section 3 applies.
3. Information We Collect — iOS App and Accounts
Account and Authentication
Creating an account (in the app or on the website) requires an email address and password, processed through Firebase Authentication (a Google service). You may also set a display name. Your email address, display name, and a unique user ID are linked to your account.
Saved Scans, Collections, and Cloud Sync
If you save scans or build collections in the app, the item photos, identifications, value estimates, and related details you choose to save are stored in our cloud database (Google Firebase) and linked to your account so they can sync across your devices. Saved content is retained until you delete the individual items or your account.
Purchases and Subscriptions
The app offers optional paid upgrades, including auto-renewing Premium subscriptions and consumable scan packs. All payments are processed by Apple through your Apple Account; we never receive your payment card details. We receive purchase and entitlement information (such as which products you have purchased and whether a subscription is active), linked to your account, so we can provide what you paid for.
Guess the Price Game and Public Leaderboard
If you play the Guess the Price game, your display name and points total are stored on our leaderboard. The leaderboard is public: your display name and points are visible to other app users and to visitors of the leaderboard page on our website. Choose a display name you are comfortable showing publicly. You can stop appearing on the leaderboard by contacting us or deleting your account.
Analytics, Diagnostics, and Identifiers
The app uses Firebase Analytics to collect product-interaction events (such as features used and scan events) and standard app diagnostics (such as crash and performance data, collected through Apple's diagnostics and our app infrastructure). When you are signed in, product interaction, purchase history, and diagnostics may be linked to your user ID. We use this data to fix problems and improve the app — never for third-party advertising or cross-app tracking.
4. AI Processing and Your Consent
What Is It Worth is an AI-powered service. When you request a valuation — and only then — your photo and any description you provide are sent to third-party AI providers, currently OpenAI and Google, to identify the item and estimate its value. Our backend also queries market-data sources (such as eBay sales data and metals pricing services) using item details only; these queries do not include your photo or personal information.
By submitting a photo for valuation, you consent to this processing. We access these providers through their business APIs under terms that prohibit them from using your content to train their models, and we do not permit them to use your data for any purpose other than generating your valuation.
5. How We Use Information
- To generate valuations and provide the website and app features you request
- To operate accounts, sync saved content, and honor purchases and subscriptions
- To display the public game leaderboard
- To monitor performance, fix bugs and crashes, and secure the service against abuse
- To improve our valuation accuracy using anonymized, aggregated data
- To comply with legal obligations
We do not sell personal information, and we do not permit third-party advertising networks to track our users.
6. Who We Share Information With
We share information only with service providers that help us operate, each receiving only what is needed for its role:
- Google — Firebase Authentication, database/cloud sync, analytics, and Gemini AI processing; Google Cloud hosting for our valuation backend
- OpenAI — AI image identification and valuation processing
- Apple — payment processing for app purchases and subscriptions, and standard app diagnostics
- Vercel — website hosting and (with consent) website analytics
- Supabase — storage of anonymized community valuation results
- Google Analytics — website analytics, only after cookie consent
We require all service providers to protect your information with safeguards at least equal to those described in this policy and required by applicable law and Apple's developer requirements. We may also disclose information if required by law, in response to lawful requests, or to prevent harm or fraud.
7. Data Retention
- Website valuation photos: processed transiently; not retained after the valuation completes, other than short-lived operational logs and caches deleted on a short cycle
- Saved scans and collections (app): retained until you delete the item or your account
- Account data: retained until you delete your account
- Leaderboard entries: retained until you delete your account or ask us to remove your entry
- Purchase and entitlement records: retained while your account is active and as required for financial and legal record-keeping
- Analytics and diagnostics: retained for the limited windows configured with each provider, then deleted or aggregated
8. Your Rights, Export, and Deletion
Depending on your jurisdiction, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to withdraw consent.
- Delete your account in the app: the iOS app includes in-app account deletion, which removes your authentication record, saved scans and collections, profile, and leaderboard entry
- Delete your account on the website: sign in and use the account page's delete option
- Export or other requests: email privacy@webair.ai and we will respond within the timeframe required by applicable law; identity verification may be required
- Withdraw cookie consent: any time via the Cookies page
Note: deleting your account does not cancel an active Apple subscription — manage or cancel subscriptions in your Apple Account settings.
9. International Data Transfers
Our services are operated from the United States, and your information may be processed there and in other countries where our service providers operate. Where required, we rely on safeguards such as Standard Contractual Clauses and equivalent protections under GDPR, UK GDPR, CCPA, and PIPEDA.
10. Children's Privacy
Our services are intended for users aged 13 and older. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will delete it.
11. Security
Data transmitted between your device and our servers is encrypted in transit using TLS. Data stored with our cloud providers (Google Cloud/Firebase, Supabase, Vercel) is encrypted at rest by those platforms. We restrict internal access to personal data and monitor our systems for abuse. No system is perfectly secure, and we encourage you to use a strong, unique password for your account.
12. Changes to This Privacy Policy
We may revise this Privacy Policy as our services, technology, or legal requirements evolve. Updates are reflected in the "Last Updated" date above, and significant changes may be communicated through the website or app.
