1. Overview & Scope

XOXO: Gossip AI ("XOXO", "we", "our", or "us") is an AI-powered social companion application offering personalized chat experiences with distinct AI characters, voice interaction, group rooms, and bilingual support.

This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our app, website at xoxo-apps.com, and related services.

2. Data We Collect

2.1 Information You Provide

• Account data: Email address, password (hashed), display name, gender preference
• Profile data: Avatar selection, language preference (English/Turkish)
• Payment data: Processed by Stripe; we store only transaction status — never raw card details
• Chat messages: Text messages you send to AI characters and in X-Room group chats
• Voice recordings: Audio captured during push-to-talk; transcribed immediately and not stored as audio
• Images: Photos you optionally upload for AI image analysis

2.2 Automatically Collected Data

• Usage data: Feature interactions, session duration, AI character selections
• Device data: Device type, OS, browser type, app version
• Log data: IP address, timestamps, error logs (retained 30 days)
• Cookies & local storage: Session tokens, language/display preferences

2.3 Data We Do NOT Collect

• Precise GPS location
• Contacts or address book
• Microphone recordings stored as audio files

3. How We Use Your Data

4. Third-Party Services

5. AI Conversations & Voice Data

5.1 Conversation Data

Messages you send are processed by Anthropic's Claude AI to generate responses. Conversation history is stored to provide memory context. You can delete your conversation history at any time from app settings.

5.2 Voice Input

When you use push-to-talk, your voice is captured and transcribed using your device's Speech Recognition API. We do not store audio recordings. Only the text transcript is used.

5.3 Image Analysis

If you upload an image, it is sent to OpenAI's GPT-4o-mini for analysis. Images are not stored on our servers after processing.

6. Data Retention

• Account data: Retained while active; deleted within 30 days of deletion request
• Conversation history: Retained up to 12 months or until manually deleted
• Voice audio: Not stored — processed in real-time only
• Uploaded images: Not stored after AI processing
• Payment records: Retained 7 years for legal compliance
• X-Room messages: Deleted when room expires (max 15 minutes)

7. Your Rights

For all users

• Access: Request a copy of your personal data
• Deletion: Request deletion of your account and data
• Correction: Update inaccurate personal information
• Export: Request your conversation history in portable format

For EU/EEA users (GDPR)

• Right to restriction of processing
• Right to object to processing based on legitimate interest
• Right to lodge a complaint with your local supervisory authority

For California users (CCPA)

• Right to know what personal information is collected
• Right to opt-out of sale (we do not sell personal data)

To exercise these rights, contact us at hello@xoxo-apps.com. We respond within 30 days.

8. Children's Privacy

If we discover a child under 17 has used the Service, we will delete their data immediately. Contact us at hello@xoxo-apps.com if you believe your child has used XOXO.

The app contains AI characters with sarcastic, dominant, and mature conversational styles not suitable for minors.

9. Content Moderation Policy

XOXO features AI characters designed for adult entertainment including sarcastic, dominant, and roast-style interactions. All AI responses are generated by Anthropic's Claude AI, which has built-in safety guidelines.

Prohibited Content

Our AI characters will not generate:

• Sexual content involving minors
• Content promoting self-harm or suicide
• Hate speech targeting protected groups
• Instructions for illegal activities
• Content designed to harass real individuals

User-Generated Content (X-Room)

Users are responsible for content they post in X-Room. We reserve the right to remove violating content and ban abusive accounts.

Reporting

To report inappropriate content, email hello@xoxo-apps.com. We review all reports within 48 hours.

10. Security

• HTTPS encryption for all data in transit
• Bcrypt password hashing
• Session-based authentication with secure cookies
• Database encryption at rest

In the event of a data breach affecting your rights, we will notify you within 72 hours as required by applicable law.

11. Changes to This Policy

When we make material changes, we will update the Effective Date, send an email notification, and display an in-app notice. Continued use constitutes acceptance.

12. Contact Us