Skip to main content
XXenith

Privacy Policy

Last updated: July 14, 2026

1. Scope

This Privacy Policy explains how Xenith ("Xenith," "we," "us," "our") handles personal information when you use our website and application (the "Service"). It applies to all users of Xenith.

2. Data We Collect

Depending on how you use Xenith, we may collect:

  • Account data, such as email address, login credentials, and profile details.
  • User-generated data, such as intentions, routines, reflections, notes, projects, and other content you create inside the Service.
  • Biometric and health-related inputs, such as weight, height, age, and activity level, if you use tools like the Biometric Wizard — used only to calculate estimated calorie and macro-nutrient targets within Xenith. These are general informational estimates, not medical advice; see Section 12 of our Terms of Service.
  • Product and usage data, such as app interactions, performance events, and settings preferences.
  • Support and communication data, such as feedback messages and customer support requests.

3. How We Use Data

We process personal information to provide and maintain Xenith, authenticate users, secure accounts, improve reliability, personalize user experience, respond to support requests, and comply with legal obligations.

4. Legal Bases

We process data based on one or more of the following grounds, where applicable: performance of our contract with you, legitimate interests in operating and improving the Service, consent (for optional features), and compliance with legal obligations.

5. Sharing and Processors

We do not sell your personal information. We share data only with trusted service providers ("subprocessors") who process it on our behalf, solely to operate and improve Xenith. Current subprocessors include:

  • Supabase — database, authentication, and file storage.
  • Vercel — hosting, along with Vercel Analytics and Speed Insights for aggregate, privacy-friendly performance and usage measurement.
  • Anthropic — AI processing for features such as insights and growth guidance. Content you submit to an AI feature is sent to Anthropic to generate a response and is not used to train their models.
  • Cloudflare — Turnstile bot and abuse protection on sign-up and forms.
  • Sentry — error monitoring and diagnostics to detect and fix crashes.
  • Google Analytics — aggregate website traffic measurement.
  • Resend — transactional and lifecycle email delivery.
  • Google and Microsoft — optional third-party sign-in (OAuth) when you choose to authenticate with those accounts.
  • Google Calendar and Notion — optional two-way calendar sync when you choose to connect those accounts. See the Limited Use statement below.
  • Web push services — browser push providers used to deliver notifications you opt into.

We may also disclose information where required by law or to protect the rights, safety, and security of our users and the Service.

Limited Use disclosure (Google Workspace APIs). Xenith's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data accessed via the Google Calendar API is used exclusively to power two-way calendar sync within Xenith, at your explicit request — it is never used to train, develop, or improve any AI or machine-learning model, and is never sold, shared for advertising, or used for any purpose beyond providing the calendar sync feature itself.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Request access to the personal data we hold about you.
  • Request correction of inaccurate personal data.
  • Request deletion of your account and related data.
  • Export your data where technically feasible.

To exercise any of these rights, contact us using the details in the Contact section below.

7. Data Retention

We retain personal data for as long as needed to provide the Service and satisfy legal, tax, accounting, and security obligations. You may request deletion of your account at any time.

8. Security

We apply reasonable technical and organizational measures to protect data, including access controls, encryption in transit, and secure infrastructure practices. No system is guaranteed secure, but we continuously improve our controls.

9. Cookies and Local Storage

Xenith uses limited browser storage for essential app behavior, such as theme and onboarding state. We also use privacy-friendly analytics (Google Analytics and Vercel Analytics) to understand aggregate usage and improve the Service. We do not use third-party advertising trackers for behavioral ad targeting.

10. International Use

If you use Xenith from outside your home jurisdiction, you understand your data may be processed in locations where our providers operate. We use contractual and technical safeguards where appropriate.

11. Children's Privacy

Xenith is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the data.

12. Policy Updates

We may update this policy periodically. Material changes will be reflected on this page by updating the "Last updated" date.

13. Contact

For privacy-related requests, contact us at [email protected].