Privacy Policy
Effective date: October 16, 2026
This policy explains what OHPI (On Hand Personal Inventory) collects, why, who else handles it, and the choices you have. It covers the OHPI iPhone app and the website ohpi.app. OHPI is run by Jared Bell, an individual developer in the United States (“OHPI”, “we”, “us”).
The short version
- You decide what goes in. OHPI keeps what you type, say or add by hand, and only that.
- Your passwords, cards, IDs, codes and medications are locked on your iPhone. We can’t read them, and neither can the AI.
- Everything else is private to your account, but our AI can read it. OHPI uses Claude, an AI made by Anthropic, to file what you add and answer your questions. We ask your permission before anything goes to it.
- Some of what you keep is health-related (weight, mood, a sobriety counter, doctors). Our Consumer Health Data Policy covers it.
- We don’t sell your data, show ads, track you across apps or train any AI on your data.
- You can export your everyday lists and delete your account, with everything in it, from Settings at any time.
What we collect
We collect only what you give us and what OHPI needs to run. There’s no advertising ID, no location and no contacts access.
| What | Examples | Where it’s kept |
|---|---|---|
| Account | Email, password (stored only as a secure hash by our login provider), the name you want to be called | Our server |
| Everyday lists | Groceries, to-dos, appointments, events, notes, bills, receipts, Wishlist, Watchlist, Food Log, Home, Car, doctors | Our server and your devices; readable by us and the AI |
| Tracker | Weight, water, sleep, steps, workouts, vitamins, mood, “Days since” counters (for example “sober”) | Our server and your devices; readable by us and the AI |
| Locked items | Passwords, cards, IDs, codes, medications, insurance numbers and insurance card photos | Locked on your iPhone; our server stores them only in a form it can’t read |
| Photos you add | Receipt photos, insurance card photos (locked) | Our server, in storage only your account can open |
| Learned habits | When you move an item (“paper towels” → Groceries), OHPI remembers that choice | Our server |
| Settings | Lists turned on, favorites, and whether the AI is on (so your choice follows you to a new iPhone; other settings, like notification choices, stay on your devices) | Your devices and our server |
| Support emails | What you write to [email protected]; the email includes OHPI’s version and your iPhone model, nothing from your lists | Our email inbox |
| Website waitlist | Your email, and whether you want to test the beta | Our server |
Voice. When you add something by voice, Siri on your iPhone turns your speech into text, under Apple’s privacy policy. OHPI receives only the text, never a recording.
Website. ohpi.app uses no cookies, ads or trackers. Cloudflare counts visits without cookies, and checks forms for bots.
How we use it
We use your information only to run OHPI for you:
- Keep your lists and back them up so they’re on all your devices.
- File what you type or say into the right list, and answer your questions about your own things.
- Remember your corrections so filing gets better for you.
- Send the reminders you turn on (they’re set on your iPhone).
- Log you in, reset your password, and keep your account secure.
- Answer you when you write to support.
- Email the waitlist about OHPI’s launch and the beta (unsubscribe anytime).
What we never do:
- Sell or rent your data, or share it for advertising.
- Show ads, or track you across other apps and websites.
- Train any AI on your data, or let Anthropic train on it.
- Use your health-related data for marketing or data mining.
- Look through your lists, except when you ask us to help with a problem or the law requires it.
OHPI’s AI: what Claude sees
OHPI sends parts of your everyday information to Claude, an AI made by Anthropic, PBC, so it can file what you add and answer your questions. OHPI asks your permission in the app before the first message is sent, and won’t send anything to Claude without it. If you say no, OHPI still works: you add and edit your lists by hand, and the chat box stays off. You can turn the AI on or off anytime in Settings → Privacy & Security.
Before anything is sent, your iPhone checks your message for passwords, card numbers, ID numbers and medications, and takes them out and locks them on the phone.
| Claude sees | Claude never sees |
|---|---|
| What you type or say, with secrets taken out | Anything in Passwords, Cards, IDs, Codes or medications |
| The parts of your everyday lists it needs (for example your groceries when you ask what’s on the list) | Your name, email or login |
| Your Tracker entries when you log them in chat or ask about them (up to a year of entries) | Questions about locked things, which are answered on your iPhone |
| Your learned habits, and the names of your saved logins (“Netflix”) to sort them into groups | Usernames, passwords or other locked details |
| A Wishlist item’s name, which Claude may look up on the web (up to 3 searches) to find its product page |
Anthropic’s handling. Anthropic processes this for OHPI under its commercial terms. Under those terms, Anthropic may not train its models on it. Anthropic deletes it within 30 days, except that content its safety systems flag can be kept up to 2 years, and longer when the law requires. Read Anthropic’s privacy information.
Catching secrets is a best guess. A password typed with no clue (“netflix sunflower22”) might be missed and sent as ordinary text. To be safe, add passwords in the Passwords list, or say “password”.
AI can be wrong. Check anything important it files or answers.
Who else handles your data
A few companies help run OHPI. Each handles your data only to provide its service to us, under its own terms, and must protect it at least as well as this policy does. We don’t share your data with anyone else, except as the law requires (see below).
| Company | What it does for OHPI | What it handles |
|---|---|---|
| Supabase | Our server: logins, database, photo storage, server functions. Servers in Oregon, US | Your account and everything you keep (locked items only in a form it can’t read) |
| Anthropic | Claude, OHPI’s AI | What’s described in “OHPI’s AI” above |
| Apple | iCloud Keychain carries the key to your locked items between your Apple devices, end-to-end encrypted; Siri turns speech into text; the App Store handles downloads and any purchases | Your locked-items key (Apple can’t read it); speech you dictate |
| Resend | Sends password-reset and waitlist emails | Your email address |
| Cloudflare | Hosts ohpi.app, counts visits without cookies, checks forms for bots (Turnstile) | Website visit data; waitlist form submissions in transit |
When the law requires it. We may share information if a valid legal process (like a court order) requires it, or to protect someone’s safety. We can’t hand over locked items in readable form, because we don’t have the key.
If OHPI changes hands. If OHPI becomes a company or is sold, your information would move with it, under this policy or one at least as protective. We’ll tell you first.
Locked items and security
Passwords, cards, IDs, codes, medications, insurance numbers and insurance card photos are encrypted on your iPhone before they’re saved or backed up. They open only with Face ID or your iPhone’s passcode. The key stays on your devices: we never have it, so we can’t read these items, recover them or hand them over. If you lose every device and your recovery key, they can’t be recovered by anyone.
A few labels stay readable so your lists work without Face ID: names like “Netflix”, a website, a card’s last 4 digits and expiry dates.
Everything else travels over encrypted connections, and our server lets only your account read or change it. No system is perfectly secure, and we can’t promise yours will never be exposed. If a breach affects your information, we’ll tell you as the law requires.
The details are in How OHPI Keeps Your Things Safe.
How long we keep it, and deleting it
We keep your information while you have an OHPI account, so your lists are there when you need them. You can delete any item yourself at any time; some lists also clear on their own (finished to-dos after 30 days, checked-off groceries after 3 hours).
Delete account (Settings → Account) permanently deletes everything right away: every item, locked or not, your photos, learned habits, the backup of your locked-items key, and your login. We can’t get any of it back. Your other devices are logged out and their copies removed (a device that’s offline does this when it next connects).
Log out clears that iPhone’s copy of your lists once everything is backed up.
Export (Settings → Your data) saves a copy of your everyday lists, as a file you can read and a data copy for other apps. Locked items are left out on purpose.
Elsewhere: text sent to Claude is deleted by Anthropic as described above. Waitlist emails are kept until you unsubscribe or ask us to delete them. Support emails are kept as long as needed to help you.
Your choices and rights
Wherever you live in the US, you can:
- See and correct your information: open any list and edit it.
- Get a copy: use Export, or ask us.
- Delete it: delete items, or your whole account, in the app, or ask us.
- Withdraw permission for the AI in Settings → Privacy & Security. OHPI stops sending anything to Claude right away, and your lists keep working by hand.
- Turn off reminders and notifications at any time (they’re off until you turn them on).
- Unsubscribe from waitlist emails with the link in any email.
Some state laws (including California, Colorado, Connecticut, Virginia and Washington) give you these rights by law, plus the right to know what we collect and share, and to opt out of sale and targeted advertising. We don’t sell data or target ads, so there is nothing to opt out of. We’ll never treat you differently for using your rights.
How to ask. Email [email protected] from the email on your account. We may ask you to confirm it’s you, and we’ll answer within 45 days. Someone you authorize can ask for you. If we turn down your request, you can appeal by replying to our answer, and we’ll respond within 45 days.
Age, location and changes
18 and over. OHPI is for adults. You must be 18 or older to create an account. We don’t knowingly collect information from anyone under 18. If we learn we have, we’ll delete the account. If you think a minor is using OHPI, email us.
United States. OHPI is offered in the US, and your information is stored in the US.
Changes. If we change this policy, we’ll update the date at the top. For changes that matter, such as sharing data in a new way, we’ll tell you in the app before they take effect, and ask your permission where the law requires.
Contact
Jared Bell, OHPI · [email protected]