Privacy and security
Your inventory.
Your phone.
Your business.
Your video, your possessions, your information. WHIG helps you document them, while keeping the record in your hands.
You film and talk on your iPhone. Your iPhone writes down what you say. Only that text transcript goes to the cloud, where Anthropic’s Claude turns it into a detailed, priced inventory in minutes, and WHIG does not store the transcript or returned inventory.
Your video, audio and photos stay on your iPhone. Only a text transcript of what you say goes to the cloud, where Anthropic’s Claude turns it into a detailed, priced inventory in minutes, and WHIG keeps none of it.
Kept on
your iPhone.
- Walkthrough video and audioNever uploaded. Keep a copy in Photos or Files
- PhotosTaken from your video, on iPhone
- InventoryEncrypted on iPhone
Sent to the cloud: only a text transcript, encrypted. WHIG keeps none of it.
From walkthrough to inventory.
Most of the work happens on your iPhone. One step happens on WHIG’s reading service.
Walk and talk.
Film your rooms on your iPhone and say what you see. Video and audio are captured on the phone and never uploaded.
Your iPhone writes it down.
Apple’s on-device speech recognition turns what you said into text, with timings, on your phone.
The transcript is read.
Only that text goes to the cloud, where Anthropic’s Claude turns it into a detailed, priced inventory in minutes. The reply, a list of your belongings with descriptions, categories and price ranges, comes straight back to your phone.
Your phone finishes the record.
Your iPhone picks a photo for each item from your own video and saves the encrypted inventory. You choose whether to keep a copy of your video in Photos or Files on your iPhone.
The one thing sent to the cloud.
Your words. Here is exactly what happens to them.
Before your first walkthrough is read, the app asks your permission and explains that your video and audio stay on your phone and only a text transcript goes to Claude AI by Anthropic. The transcript is sent with your country, the recording length and any space name. WHIG does not send account identifiers to Anthropic, but anything personal you say is included in the transcript, and WHIG keeps none of it. Not now sends nothing. You can withdraw permission in Profile, Privacy. This stops future sends and retries on that phone; it cannot recall text already sent. You can also add items manually.
The transcript text, with timings, travels over an encrypted connection (TLS) to WHIG’s reading service. The service passes the text to Anthropic’s Claude, which identifies your belongings, writes short descriptions, assigns categories and picks a price bracket. Price ranges come from WHIG’s researched pricing guide, using only each item’s type and tier. Every estimate is labelled: Estimated. Not a professional valuation.
WHIG does not store the transcript or returned inventory. We store account-linked reading identifiers and daily counts to enforce usage limits. Diagnostic logs contain operational metadata, not transcript or inventory content, and the reading service has a 30-day log retention policy. The reply goes straight back to your phone.
Anthropic processes the text under its commercial API terms. By default it does not train its models on API data, and it deletes API inputs and outputs within 30 days, unless a longer period is needed for legal or safety reasons. Read Anthropic’s retention policy.
A service account.
A private inventory.
Keeping your content on your iPhone does not mean WHIG has no service data. Here is the distinction.
What the service holds
Account and contact details, country and property profile, your consent choices, recording and session status, purchase records, and anonymised regional totals. These are separate from your item-by-item inventory.
What never goes in the database
Item names, brands, model numbers, individual values, transcripts, photos, receipts, video or your documents. None of these go into WHIG’s database.
Regional statistics
Regional statistics are off unless you turn them on in Profile, Privacy (signed-in accounts). WHIG uses them to improve estimates and may license aggregated research to insurers, actuaries, property and research organisations. You can stop future sharing at any time. Once per account, for a whole-home walkthrough of 3 or more spaces and 15 or more items, the app sends standard category totals, a household total and two counts (spaces and items) to a separate service. Never item names, brands, words, photos or individual values. Specialist items such as jewellery and art are left out. Totals are combined by country, area (state or territory, and city or regional), property type and bedrooms, and a group is only used once it has 50 or more homes (200 or more for an exact bedroom count). Read the privacy policy for details.
Your key. Your copies. Your choice.
Privacy and a safe copy belong together.
Inventory encryption
The inventory is encrypted on-device with AES-256-GCM. Its key is generated on your phone and kept in iOS secure storage. It is never sent to WHIG.
Your Evidence Package is your backup
Save it somewhere other than your phone. It holds your web inventory (an HTML file you open in a browser, even offline), documents, photos and restore data for WHIG on a new phone.
WHIG never receives it. Save it again after big changes.
Sharing is your decision
You send your own package, PDF, CSV, JSON or photos through the iPhone sharing options. Exports can contain readable personal information. Check them before sending: WHIG cannot revoke copies someone else has received.
Privacy and evidence
Date the fingerprint.
Keep the record.
An independent date should not require handing over your recordings or inventory. So WHIG timestamps a cryptographic fingerprint of the record instead.
Check an Evidence PackageWhat a fingerprint does
It identifies a particular record without including the transcript, photos or item list. When you save a walkthrough, only the fingerprint is sent for an independent timestamp through public OpenTimestamps calendars. WHIG stores neither the fingerprint nor the proof.
What that date means
Once confirmed in a Bitcoin block, the timestamp shows that the matching record existed by that block’s time. The certificate shows each record’s status; pending timestamps do not yet establish that independent date. It does not prove when you filmed it, what you owned, or whether a value was accurate. Later edits remain separate from the original.
Check it yourself
Open whig.app/verify and choose your Evidence Package zip. The check runs in your browser and nothing is uploaded. Or use the open-source OpenTimestamps client without WHIG. Older signed records from earlier versions of WHIG are checked the same way, against their server signatures.
A few privacy questions.
Does my video leave my iPhone?
No. Your video and audio are recorded on your iPhone and are never uploaded. Your iPhone turns what you say into text using Apple’s on-device speech recognition. Item photos are taken from your own video on the phone. You choose whether to keep a copy of your video in Photos or Files on your iPhone.
What does leave my iPhone?
Only a text transcript. Finding every item in a walkthrough, describing it and pricing it takes a far larger AI model than any phone can run today. So your iPhone sends just the text, over an encrypted connection, to WHIG’s reading service, which passes it to Anthropic’s Claude. The result comes straight back to your phone. Your country, the recording length and any space name you chose go with it. WHIG stores neither the words nor the result, and WHIG does not send account identifiers to Anthropic, but anything personal you say is included in the transcript. The app asks before your first walkthrough is read, and you can withdraw that in Profile, Privacy.
Does Anthropic keep my words?
Anthropic processes the text under its commercial API terms. By default it does not use API inputs or outputs to train its models, and it deletes them within 30 days, except where it must keep them longer for legal or safety reasons.
Does WHIG store a list of what I own?
No. Item names, brands, individual values, transcripts, photos and video never go into our database. WHIG holds service details only: your account and contact details, country and property profile, consent choices, recording status, purchase records and anonymised regional totals.
What if I lose my phone, or want to share my Evidence Package?
Save your Evidence Package somewhere other than your phone. It holds every document, and a full copy of your inventory that restores WHIG on a new phone. You can also share the PDF, CSV and JSON documents yourself. Exports contain your information, so only send them to people and places you choose. WHIG cannot revoke a copy after you share it.
How can a private record have an independent date?
When you save a walkthrough, your iPhone computes a cryptographic fingerprint of its original record. Only that fingerprint is sent for an independent timestamp through public OpenTimestamps calendars. Once confirmed in the Bitcoin blockchain, it shows the record existed by that block’s time. Your Certificate of integrity shows the status, including pending timestamps, and anyone can check the proof at whig.app/verify. It does not show when you filmed, what you own or what it is worth, and later edits are not covered.