Your privacy is paramount. xFate is built upon data minimization and privacy-by-design standards.
1. Data We Do Not Collect
xFate DOES NOT request camera access, DOES NOT perform facial aging, DOES NOT process facial biometrics, DOES NOT access your contacts, and DOES NOT link to health sensor frameworks (such as Apple HealthKit or Google Health Connect).
2. Collected Data and Purpose
We only collect initial calibration responses, selected active direction and action, and Weekly Pulse check-ins to deliver your weekly reviews. Authentication uses passwordless secure email isolated by Row Level Security (RLS).
3. AI Processing and Consent
Language models execute strictly within secure backend infrastructure; no API keys exist in client binaries. Weekly narrative processing occurs only with your explicit prior consent. No user responses are used for public model training.
4. Analytics and Telemetry
Our application telemetry and crash monitoring events never include questionnaire answers, personal action titles, or written reflections.
5. Your Rights (GDPR, CCPA, LGPD)
You hold full rights to access, export, revoke consents, and request complete erasure of all your data at any time.