XinQiao Privacy Policy

Effective: 2 August 2026 · Operator: XINAI PTY LTD

This policy explains how XinQiao handles personal information. We collect only what is needed to provide, secure, and improve the service. We do not sell personal information or use cross-app advertising tracking.

Information we process

This may include the Love ID assigned only after you actively edit and save a nickname, display name, device-generated login credentials, email or Apple/Google sign-in identifiers you choose to bind, and login-security data; profile fields and visibility choices; messages, voice, images, posts, comments, reports, and relevant conversation excerpts submitted with a report; contacts or media you explicitly choose to import; location obtained only when you enable or refresh the One-Kilometre Familiar Circle; financial entries and receipt images used with AI Accountant; mood, breathing, and journal records used with Xiaomeng; cycle, intimate or sexual-status, breast, and skin records used with Xiaokang; and limited device-generated identifiers, language, request time, error, and security logs. When signed in, imported contact names, phone numbers, email addresses, organisation details, and relationship groups are stored with your XinQiao account so contacts from different devices can be merged and synchronised. Content-pack records are stored on the device by default, and the app explains sensitive-data use before you choose to enable a relevant pack.

You begin as a guest. The device generates a random credential to recognise the same browser or app installation, but until you actively edit and save a nickname, we do not create a user account, allocate a Love ID, or store a device-account binding. Setting an avatar is optional and is not required to create an account.

To keep one device identity when the same browser visits different official XinQiao domains, the primary domain performs a brief encrypted credential handoff. The raw device secret stays in a browser-only URL fragment and is not written to server access logs; the encrypted return code expires after two minutes. The iOS and Android shells store this random credential in iOS Keychain and Android Keystore-encrypted storage respectively. We do not read computer serial numbers, motherboard identifiers, IMEI values, or other permanent hardware identifiers.

How we use it

We use information to create and protect accounts, sync profiles, deliver communications, provide AI or voice features you request, show content according to your visibility choices, process blocks and reports, prevent abuse, troubleshoot, and meet legal obligations. Optional permissions may be declined without disabling unrelated features.

Permissions

Microphone and speech recognition are used only when you record or use voice input. Camera and photos are used only when you capture or select media. Contacts are processed only after you tap Import Contacts. On iOS, the app requests system Contacts permission directly, without a custom OK/Cancel pre-permission alert. Denial does not read or upload contacts or automatically open Settings. System access and server upload are separate choices: after system access is granted and before reading contacts, XinAI separately discloses the contact names, phone numbers, email addresses, and organisation details it will read, the XINAI PTY LTD server recipient, and the purposes of import and merge, relationship grouping, and cross-device synchronisation. The data is read and uploaded over encrypted HTTPS only after you separately agree to upload it. Cancel reads and uploads nothing, does not change system permission, and does not affect other features. Withdrawing system access stops future reads; contacts already synchronised to your account remain available on other devices until you delete the relevant contact or account. When In Use location is requested only when you actively enable or refresh the One-Kilometre Familiar Circle; the app does not continuously locate you in the background.

Sharing

Information is shared only as needed with hosting, security, email delivery, Apple/Google sign-in, and AI providers used for a feature you request. The third-party AI providers are Groq, Inc. (primary text-model provider) and Beijing Zhipu Huazhang Technology Co., Ltd. / Zhipu AI (fallback text-model and image-generation provider). Before the first transmission, the app identifies the recipient and proposed data and asks for your permission; declining does not disable non-AI features. Depending on the feature you deliberately request, transmitted data may include your message, relevant recent conversation context, text selected for summarisation or translation, an image description, or a receipt, financial summary, emotional record, or health record you explicitly select. Data is sent through XINAI PTY LTD's encrypted gateway only to produce the result you request and is not sold. No such data is sent before you actively use the feature and consent. These providers are required to provide the same or equivalent protection described in this policy. Public content is shown according to your selected audience. Necessary information may also be disclosed where legally required, to protect safety, or in a corporate reorganisation.

Retention and deletion

Account and profile data is generally retained until account deletion. Incoming message content is removed after delivery; undelivered content is retained for up to 30 days. Security and compliance metadata that does not contain message text may be retained longer where required for safety or law. Reports are retained while needed for review, safety audit, or legal obligations.

The One-Kilometre Familiar Circle stores the current location at approximately 100-metre precision for no more than two hours and returns only a distance, never another person's coordinates. You can choose “Turn off and delete location” at any time, and account deletion also removes it.

Content-pack ledger, emotional, and health records are stored on the device by default. Disabling a pack does not automatically erase its records so that you can enable it again later. Switching accounts or deleting your account clears these local content-pack records to prevent access by another account. Uninstalling the app removes its local app data through the operating system.

You can delete your account in the in-app Account panel. This removes the account, profile, third-party bindings, cloud contacts, cloud conversations, and related block relationships, and invalidates existing login tokens. A deleted Love ID is permanently disabled and is never assigned to another user. Where available, Apple authorisation tokens are also revoked. Minimal records may be isolated for a limited period where retention is legally required or necessary to resolve a security dispute.

Your choices

You may edit your profile and visibility, block or report users, withdraw permissions, switch accounts, or delete the account. You may also request access, correction, deletion, or restriction by contacting us. We may verify identity before completing a request.

Security, international processing, and children

We use access controls, encrypted transport, token validation, and least-privilege practices. No internet service can guarantee absolute security. Providers may process information outside your country, subject to applicable contractual and security safeguards. XinQiao is not directed to children below the minimum digital-consent age in their region; minors should use it with parent or guardian consent and guidance.

Contact and updates

Contact zhouyawu@xinai.me for privacy requests or complaints. Material policy changes will be communicated appropriately and a new effective date will appear here.