Privacy Policy

Xolace (“we,” “our,” or “us”) provides a digital platform designed to help individuals process and better understand their emotions.

Your privacy is central to how Xolace is designed and operated. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights and choices.

By using Xolace, you agree to the collection and use of information in accordance with this Privacy Policy.

Xolace allows users to express what they are feeling and receive AI-generated reflections intended to help articulate those emotions.

We collect the following categories of information:

A. Account Information

When you create an account, we may collect:

• Authentication identifiers (e.g., Google account ID)

B. Emotional Input ("Reflection Data")

When you use Xolace, we collect the information you choose to share, including:

• Text you write in response to prompts
• Selected emotion or "texture" tags
• Responses during refinement (e.g., "Not quite," "Say more")

C. AI-Generated Data

We generate and store:

• AI reflections (mirrors of your input)
• Emotion classifications (e.g., themes, intensity levels)
• Session metadata (e.g., duration, interaction flow)

D. Usage Data

We automatically collect information about how you use Xolace, including:

• Session frequency and duration
• Features used (e.g., exercises, peer reflections)
• Interaction patterns

E. Device & Technical Information

• Device type and operating system
• App version

F. Optional Contributions (Peer Reflections)

If you choose to contribute content anonymously:

• Your reflection may be processed and included in a shared pool
• Direct identifiers are removed or reduced before inclusion

G. Crash & Error Telemetry

We use Sentry to capture crashes and errors so we can diagnose and fix them. Sentry collects:

• Stack traces and error details
• Device type, OS version, and app version
• Interaction breadcrumbs leading up to a crash
• Session replays on production builds — all text and images are masked before transmission

Sentry's default IP address collection is disabled; your IP is not stored. This data is never used for advertising.

Core Functionality

• Process your emotional input
• Generate AI reflections
• Provide guided exercises and pathways

Personalization

• Improve relevance of reflections and exercises
• Understand general emotional patterns (at an aggregated level)

Product Improvement

• Improve AI models and system performance
• Analyze usage trends

Safety & Integrity

• Detect potentially harmful or high-risk situations
• Improve safeguards and system responses

Communication

• Send service-related notifications (if enabled)

Your text input is processed by Anthropic (Claude) to generate reflections and insights, including automated analysis of text, classification of emotional themes, and generation of short reflective responses. Voice features use ElevenLabs for audio generation. Your data is not used to train third-party AI models.

We may share information only in the following limited cases:

A. Service Providers (Sub-processors)

We work with the following trusted third parties to operate Xolace. Each processes only the data necessary for their function and is contractually required to protect your data:

• Anthropic — AI reflection generation
• Convex — database and backend infrastructure
• Clerk — authentication
• ElevenLabs — voice audio generation
• PostHog — product analytics
• Sentry — crash and error monitoring
• Apple / Google — sign-in

B. Anonymized or Aggregated Data

We may use anonymized or aggregated data to improve the platform, conduct research, or understand general usage patterns. This data is processed to reduce the likelihood of identifying individuals.

C. Legal Requirements

We may disclose information if required to comply with applicable laws, respond to legal requests, or protect the rights and safety of users or others.

We retain your information only as long as necessary to provide the service and fulfill the purposes described in this policy.

• Session data may be retained according to your account settings
• Some anonymized data may be retained for research and system improvement

You may request deletion of your account and all other associated data at any time (see Section 10).

We implement safeguards designed to protect your information, including:

• Encryption of sensitive data in transit and at rest
• Access controls and authentication measures
• Secure infrastructure practices

However, no system is completely secure, and we cannot guarantee absolute security. We will notify you promptly in the event of any breach that affects your data.

A. Access & Deletion

You may request access to your data or request deletion of your account and associated data.

B. Contribution Control

You can choose whether your reflections are kept private or shared anonymously. This is entirely in your control.

C. Notifications

You can enable or disable notifications at any time in your settings.

D. Data Usage for Improvement

Where applicable, you may opt in or out of having your data used to improve the platform.

Depending on your location, you may have the right to:

• Access or correct your personal data
• Delete your account and all associated data
• Withdraw optional consent (anonymous sharing, notifications) at any time from Settings
• Restrict or object to certain processing

To exercise your rights, contact us at privacy@xolace.app. We will respond within the timeframe required by applicable law.

Xolace is not intended for individuals under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children.

If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete it.

Your information may be processed and stored in countries outside your own. We take steps to ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the app or by other appropriate means before the changes take effect.

Your continued use of Xolace after changes become effective constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or your data, we're here to help.