Privacy is part of the ChatXOS experience.

• What we collect: The identifier Apple or Google assigns to your account, the relay email Apple shares (if you allow it), your display name or photo, and whether you have an active ChatXOS subscription.
• Where it lives: Account details are stored securely on ChatXOS servers, and the sign-in token stays in the secure storage area on your iPhone so the app can keep you signed in.
• Why we need it: Authenticate you, sync your chat history across devices, send important service updates, and verify eligibility for subscription features.
• How long we keep it: For as long as your account stays open or until you request deletion.

• What we collect: Prompts, AI replies, timestamps, selected model/provider, and optional clientRequestId values so we can resume streaming after reconnects.
• How it flows: Messages travel over an encrypted connection to ChatXOS, then to the AI provider you choose (ChatGPT, Claude, Gemini, Grok, or DeepSeek) so we can return the right response and keep your history in sync.
• Purpose: Render your history, let you switch models mid-thread, generate titles, and enforce rate limits. We never use your conversations for advertising.
• How long we keep it: Chats stay in your account until you delete them in the app or delete your account entirely.

• What we collect: Product identifier (chatxos.pro.monthly), transaction/receipt IDs, App Store storefront, and a boolean entitlement snapshot.
• Payment security: We never see your card or banking details—Apple processes the purchase. We only store the fact that your subscription is active so the app can unlock Pro features, even if you’re offline.
• Usage: Unlock Pro features, restore purchases, detect expired billing, and comply with Apple refund investigations.
• How long we keep it: For the life of your subscription and for a short period afterward to resolve support or refund questions. Removing the app or deleting your account clears the cached subscription status on your device.

• Events & params: We log when you sign in, create or delete a chat, send a message, change AI models, view the paywall, or complete a subscription. The events include anonymous identifiers such as chat ID, model name, and a counter that helps us understand engagement depth.
• Data minimization: We never send message text, email addresses, payment information, or anything you type to analytics providers.
• Purpose: Measure reliability, understand free-to-Pro conversion, and prioritize roadmap work—never for cross-app advertising.
• How long we keep it: Analytics reports are retained for roughly 14 months before they are automatically deleted.

• Signals collected: Crash reports, a random identifier, device model, iOS version, simple notes about what was happening when the error occurred, and performance metrics such as the time it takes to receive the first AI token.
• Tools: We rely on Firebase Crashlytics and Performance, which are industry-standard services for error logging and app health monitoring.
• Purpose: Debug crashes, correlate model outages, and detect regressions in streaming performance.
• How long we keep it: Crash and performance logs are automatically discarded after roughly 90 days.

• Examples: Theme preference, your last-selected AI model, a cached copy of your profile, the counter we use to order analytics events, and the token that keeps you signed in.
• Storage layers: Sensitive items stay in the secure storage area provided by iOS. Other preferences are saved locally on your phone so the app can load quickly.
• Control: Signing out, deleting the app, or clearing system storage removes these values immediately.

Apple (Sign in with Apple & App Store)

Data: ID tokens for authentication and encrypted StoreKit receipts for purchases.

Purpose: Verify your identity, fulfill purchases, and notify us when subscriptions renew, lapse, or refund.

Google Identity (optional)

Data: Google-issued ID token and optional avatar/email if you choose Google sign-in.

Purpose: Alternative authentication for users who prefer Google.

Firebase (Analytics, Crashlytics, Performance)

Data: Usage metadata, anonymized identifiers, crash stack traces, and performance metrics.

Purpose: Product analytics, reliability monitoring, and performance tracing. No advertising SDKs.

AI model providers (OpenAI, Anthropic, Google, xAI)

Data: Prompts/responses routed through the ChatXOS API when you select each model. Providers may retain logs per their policies.

Purpose: Generate the AI responses you request. We only send content to the provider you pick for that message.

Cloud hosting & caching providers

Data: Encrypted account data, chat history, and short-lived session tokens that help the app stay responsive.

Purpose: Provide the secure infrastructure we need to operate ChatXOS with backups, monitoring, and failover.

Delete account & data

Open Settings in the ChatXOS app and choose “Delete account.” We immediately remove your chats, sessions, and profile information and sign you out on every device.

Delete chats or reset history

From the chat list you can delete individual threads at any time. Deleted chats disappear from all devices connected to your account.

Subscriptions & purchases

Manage, cancel, or refund your subscription through Settings → Apple ID → Subscriptions. Inside ChatXOS you can restore purchases at any time.

Data export or corrections

Until the self-serve export tool ships, email jason@chatxos.com with the email tied to your Apple or Google ID. We will verify identity and send an export or correction within 30 days (faster where required by GDPR/CCPA).

Analytics & diagnostics preferences

You can request that we delete analytics identifiers or disable future collection for your account by contacting us. OS-level privacy controls (Limit Ad Tracking, Analytics & Improvements toggles) also apply.