Plain English summary: Xhris collects the information you give us to run your accountability experience. We don't sell your data. You can delete your account and data any time. We use AI (Groq/Llama) to power coaching — your messages are processed by that service. Read on for the full details.
1. Who We Are
Algorithm Institute™, a trademark of Algorithm Innovations LLC ("we", "us"), is the data controller for Xhris. Contact us at legal@algorithminnovation.com.
2. Information We Collect
2.1 Information You Provide
- Account data: name, email address, password (hashed), date of birth.
- Profile data: bio, career, city, country, relationship status, education, personality traits, health focus, interests, and other optional profile fields you choose to complete — including data Xhris learns from your chat conversations (only saved with your explicit confirmation).
- Goal data: titles, descriptions, types, targets, evidence (post links, notes), check-in history, streaks.
- Partner data: names and email addresses of accountability partners you add.
- Subscription data: plan type and payment status (we do not store card numbers directly — payments are processed by our payment provider).
- Communication: messages you send to Xhris AI, support queries.
2.2 Information Collected Automatically
- IP address, browser type, device type, operating system.
- Pages visited, features used, session duration (analytics).
- Login timestamps and activity logs for security and accountability features.
2.3 Cookies & Similar Technologies
We use cookies and local storage to keep you logged in and improve your experience. See our Cookie Policy for details.
3. How We Use Your Information
- Provide the service: run your goals, streaks, partner system, notifications, leaderboard, and AI coaching.
- Personalise AI responses: your profile and goal data is sent to Groq (our AI provider) to generate personalised coaching messages from Xhris.
- Reminders & notifications: send push/in-app/email reminders about streaks, targets due, partner approvals, and encouragements.
- Security: detect fraud, enforce rate limits, and investigate abuse.
- Analytics: understand how the app is used to improve features.
- Legal compliance: meet regulatory obligations.
4. AI Processing (Groq / Llama)
Xhris AI coaching is powered by large language models provided by Groq, Inc.. When you chat with Xhris, your message and a personalised context summary (derived from your profile and goals) are sent to Groq's API to generate a response. Groq's processing is subject to Groq's Privacy Policy.
We do not send your raw password, payment card details, or partner email addresses to AI services.
5. Sharing Your Information
We do not sell your personal data. We share data only in these circumstances:
- Accountability partners: when you add a partner, your name and relevant goal information is shared with them through the app.
- Shared goals: if you use the share feature, your goal title, type, and streak may be visible to the public via a shareable link.
- Service providers: Groq (AI), our hosting provider, email delivery service, and payment processor — all under data processing agreements.
- Legal requirements: if required by law, court order, or to protect the rights and safety of our users.
- Business transfers: if Algorithm Institute™ is acquired or merges, your data may transfer to the new entity with equivalent protections.
6. Data Retention
- Account and goal data: retained while your account is active and for up to 90 days after deletion (for recovery purposes).
- Activity logs: retained for 90 days, then automatically deleted.
- Session tokens: expire automatically (typically 30 days) and are purged by our cleanup system.
- Notifications: the most recent 100 per user are retained; older ones are automatically pruned.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: request a copy of the personal data we hold about you.
- Correction: update inaccurate or incomplete data (via your Profile settings).
- Deletion: request deletion of your account and associated personal data.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to certain processing, including marketing communications.
- Withdraw consent: where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, email legal@algorithminnovation.com. We will respond within 30 days.
8. Security
We implement technical and organisational measures including password hashing (bcrypt), HTTPS encryption, rate limiting, SQL injection protection, HTTP security headers, and access controls. No system is perfectly secure — we encourage you to use a strong, unique password and to notify us of any suspected breach.
9. Children's Privacy
Xhris is not directed to children under 13 (or the applicable minimum age in your country). If we become aware that we have collected personal data from a child without verifiable parental consent, we will delete it promptly.
10. International Transfers
Xhris is operated from Nigeria. Your data may be processed by our service providers in other countries (including the United States where Groq is based). We ensure appropriate safeguards are in place for such transfers.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or an in-app notice. The "Last updated" date at the top of this page indicates when the policy was last revised.