Privacy Policy

Effective Date: May 20, 2025

Last Updated: May 20, 2025

1. Overview

Xognito ("we," "our," or "us") provides a private AI assistant platform designed to help individuals think, plan, reflect, and grow through secure, AI-powered conversations and tools.

We respect your privacy. This Privacy Policy describes what information we collect, how we use it, how we protect it, and the choices you have.

2. Information We Collect

We collect the minimum necessary data to provide our service.

a. Account Information

Email address and/or phone number

Display name and chosen XloudID

Profile picture (optional)

b. AI Usage Data

Messages you send and receive with your AI assistant

Files you upload for analysis (e.g., PDFs, images)

AI-generated summaries, memory entries, and assistant settings

c. Usage Statistics (Free Plan)

Message count per day

File upload count

Last usage timestamps

d. Subscription & Billing

Stripe Customer ID

Stripe Subscription ID

Plan type and billing history (we do not store full card info)

3. How We Use Your Information

We use your data solely to provide and improve Xognito's private AI experience.

Deliver AI responses and memory

Analyze uploaded files (only at your request)

Manage subscriptions and billing

Customize your assistant's behavior and memory

Respond to support requests

We do not:

Sell or share your data with advertisers

Use your data to train third-party AI models

Track you across the web or use invasive analytics

4. Memory & AI Data Handling

a. Your Conversations

Messages are stored securely and encrypted at rest.

Only you can access your conversation history.

b. Memory System

Xognito saves memories only when meaningful and based on your interaction.

You can view, edit, or delete memories at any time.

Sensitive data (e.g., names, goals, emotions) is categorized and decay logic is applied over time unless marked "deep."

c. Files

Uploaded files are stored in your account's encrypted cloud storage and can be deleted at will.

5. Group Features & Shared Bots

Group memory is shared only within the group and only visible to members.

Each group is private, invite-only, and encrypted.

Group hosts control access and can delete content.

6. Security Measures

All data is encrypted in transit (TLS) and at rest (AES-256).

Firebase Authentication handles secure login and user identity.

Admin access to user data is restricted and audited.

7. Your Rights

You can:

Request a copy of your stored data

Delete your account and all associated data at any time

Manage assistant memory, subscriptions, and file uploads directly from your dashboard

To make a request, contact: privacy@xognito.com

8. Data Retention

We retain your data as long as your account is active.

Deleted users' data is removed from our systems within 30 days (unless required for legal reasons).

9. Children's Privacy

Xognito is not intended for children under 13. We do not knowingly collect data from children. If we discover such data, we will delete it immediately.

10. Policy Updates

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via the app or by email.

11. Contact Us

For any questions about this policy or your data:

Email: privacy@xognito.com

Address: XloudOne Inc. – [Insert Company Address]