Privacy Policy

📋 Summary

What we do collect is anonymous and used only to make the app work better for families like yours. Here's the short version:

• We generate an anonymous device ID — not linked to you in any way
• We process speech audio to generate responses — audio is not stored
• We save conversation exchanges anonymously to improve AI responses
• We never sell your data or share it with advertisers
• We never collect names, emails, accounts, or personal identifiers

🗂️ What We Collect

Anonymous Device ID

When you first open XpressAble, the app generates a random identifier for your device. This is not Apple's device ID — it is a random code we create ourselves. It is used only to group your conversation history so the app can show you your past exchanges. It is not linked to your name, Apple ID, email, or any other personal information.

Speech Audio

When you tap the listen button, XpressAble records audio from your device's microphone and sends it to OpenAI's Whisper service for transcription. The audio is processed in real time and is not stored by XpressAble or retained by our servers after transcription is complete.

Conversation Exchanges

The transcribed question and the AI-generated response are saved to a secure Google Sheet associated with your anonymous device ID. This allows you to review past exchanges in the app's Chat History screen, and allows us to understand which responses work well and which need improvement.

Ratings and Notes

When you rate a response (👍 Good or 👎 Needs work) or add a note or better response suggestion, that information is also saved. This feedback is used directly to improve how the AI responds to questions — helping make XpressAble more useful for all families over time.

Child Profile Information

If you create a profile for your child (name, age, interests), this information is stored locally on your device using encrypted storage. It is never transmitted to our servers and never shared with anyone. It is used only within the app to personalize AI responses.

🚫 What We Do NOT Collect

• Names, email addresses, or phone numbers
• Apple ID or any account information
• Location data or GPS coordinates
• Photos or camera access
• Contacts or calendar data
• Health or medical records
• Payment or financial information
• Browsing history or cross-app tracking data

⚙️ How We Use Your Data

The anonymous data we collect is used for three purposes only:

• To make the app work — transcribing speech and generating responses in real time
• To show you your conversation history inside the app
• To improve AI response quality over time using anonymized feedback

🔗 Third-Party Services

XpressAble uses the following third-party services to function:

OpenAI Whisper — processes audio recordings for speech-to-text transcription. Audio is sent to OpenAI's servers and processed in real time. OpenAI's privacy policy applies to this processing. Audio is not retained by XpressAble after transcription.

Anthropic Claude — generates age-appropriate responses based on the transcribed question and your child's profile. The question text is sent to Anthropic's servers. Anthropic's privacy policy applies. No personal information is included in these requests.

Google Sheets — stores anonymous conversation exchanges and feedback. Data is stored under your anonymous device ID only. Google's privacy policy applies to data stored in Sheets.

Railway — hosts our backend server that connects XpressAble to OpenAI and Anthropic. Audio and text pass through Railway's servers in transit but are not stored there.

👶 Children's Privacy

XpressAble is designed to be used by parents and caregivers on behalf of children. We take children's privacy extremely seriously.

Child profile information (name, age, interests) entered by a caregiver is stored only on the device and never transmitted to our servers. Speech audio is processed in real time and is not retained.

If you believe we have inadvertently collected personal information about a child, please contact us immediately at malliksanjibk@gmail.com and we will delete it promptly.

🗄️ Data Retention and Deletion

Conversation exchanges saved to Google Sheets are retained to help improve the app over time. Because data is stored anonymously under a random device ID, it is not possible for us to identify which exchanges belong to any specific person.

If you would like your device's data deleted, please contact us at malliksanjibk@gmail.com with your anonymous device ID (visible in the app's settings) and we will remove all associated records.

Child profile data stored on your device can be deleted at any time by uninstalling the app.

🔒 Security

All data transmitted between XpressAble and our backend servers is encrypted using HTTPS. Child profile data stored on your device uses iOS encrypted storage (AsyncStorage with device encryption).

We do not store API keys, authentication tokens, or sensitive credentials on your device. All API calls are proxied through our backend server so your device never directly contacts OpenAI or Anthropic with credentials.

⚖️ Your Rights

Depending on where you live, you may have rights regarding your personal data including the right to access, correct, or delete data we hold about you. Because we collect only anonymous data, most of these rights apply in a limited way — but we are committed to honoring any reasonable request.

To exercise any rights or ask questions about your data, contact us at malliksanjibk@gmail.com.

📝 Changes to This Policy

We may update this privacy policy from time to time as the app evolves. When we make significant changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of XpressAble after changes are posted constitutes your acceptance of the updated policy.