Privacy Policy

XMethod ("XMethod," "we," "us") provides a suite of AI-powered apps (web, Android, and Chrome OS/desktop) covering AI assistance, email, calendar, health, fitness, people/contacts, photos, finance, and more. This policy explains what information we collect, how we use it, and the controls you have over it.

Information we collect

What we collect depends on which features you use. We only request the permissions and data a feature actually needs.

Account information

Email address, name, and a password (or Google/passkey sign-in credential) to create and secure your account.

Health & fitness data

If you connect Health Connect, we read and, where you take an action that requires it, write health metrics you choose to share — steps, heart rate, sleep, weight, blood pressure, blood glucose, heart rate variability, SpO₂, floors climbed, distance, VO₂ max, and skin temperature. This data is used only to power the Health and Fitness features you're actively using (dashboards, coaching, workout logging) and is never sold or used for advertising.

Location

With your permission, we use device location for features like Maps directions, Photos "Places" (from photo EXIF data, processed on your device), and — only while you have Ambient AI Capture turned on — to provide location context for automatically-detected activity. We do not track or sell your location history.

Microphone & audio

If you use voice capture (recording a note, or a meeting capture during a video call), we record audio to transcribe it into text. Recordings are transcribed by our self-hosted transcription service and stored so you can play them back and search their transcripts. You can delete any capture at any time.

Photos

If you enable Photos backup, your photos are uploaded to encrypted cloud storage so they sync across your devices. Face detection, object/scene labeling, and GPS-based "Places" clustering all run on-device — that analysis is never uploaded, only the photo itself (if backup is on) and the tags you choose to keep.

Contacts, email, and calendar

If you connect your Google account, we access the Gmail, Google Calendar, and Google Contacts data you authorize, strictly to display and manage it inside XMethod (e.g. showing your inbox, letting you schedule an event). We don't read this data for any purpose you haven't asked for.

Ambient AI Capture (opt-in)

XMethod can optionally build memory from what happens on your device — this is off by default and controlled by the "Context" toggle in the AI screen. When on: periodic screenshots are analyzed on-device with text recognition (the raw screenshot is cached for up to 48 hours, then automatically deleted); notification text is read passively; and, during a detected meeting, we record your microphone and the call's own audio together to produce a transcript. Batches of this text are sent to our server to build searchable, editable long-term memory ("XBrain"). You can turn Ambient AI Capture off at any time, and turning it off stops all of the above immediately.

Notification access

If you grant notification access, it's used only to power Ambient AI Capture (above) when that feature is turned on, and to detect when you're in a supported meeting app so a capture can start. We never read notification content for any other purpose.

Usage & diagnostic data

We use limited, on-device app-usage signals (which app is in the foreground) only to detect when you've joined a supported video-meeting app, so Ambient AI Capture (if enabled) can offer to start a meeting capture. We also collect standard crash and performance diagnostics to keep the app reliable.

How we use your information

• To provide and operate the features you use.
• To power AI features (chat, suggestions, coaching, memory) — see "AI processing" below.
• To sync your data across your devices.
• To secure your account and detect abuse.
• To improve XMethod's features and reliability.

We do not sell your data, and we do not use your personal content to serve ads.

AI processing

XMethod AI runs under zero data retention (ZDR) — every AI model call is made with data-retention disabled at the model-provider level, so providers do not store your prompts or responses. XMethod's AI never silently applies labels or categories to your data: an "AI Autonomy" setting lets you choose, per feature, whether the AI only suggests changes for your approval or applies them automatically (with every automatic change undoable). A small number of identical, fully non-personal requests may be served from a shared cache for speed — this never happens if the request contains anything personal.

Where your data lives

Structured data (tasks, events, notes, memory, etc.) is stored in our encrypted database. Files (photos, voice captures) are stored in encrypted cloud object storage. Third-party API credentials you connect are encrypted at rest and never returned by our API. If you use a Chrome OS or desktop edition of an XMethod app, your data is written directly from your browser to your own Google Drive — we never store or proxy that data on an XMethod server.

Sharing your information

We share information only in these cases:

• AI model providers, solely to process your AI requests, always under zero data retention.
• Services you explicitly connect (e.g. Google, Plaud), limited to what you authorize.
• Infrastructure providers that host our servers and storage, bound by confidentiality obligations.
• When required by law, or to protect the rights, safety, or property of XMethod or our users.

We never sell your personal information.

Your controls

• View, export, or correct your data at any time.
• Delete your account — this purges your data within 24 hours.
• Turn Ambient AI Capture on or off at any time.
• Choose Suggest-only or Auto for each AI Autonomy domain, or turn a domain off entirely.
• Disconnect any connected third-party account (e.g. Google, Plaud) at any time.
• Manage or remove passkeys and revoke active sessions in Settings.

Data retention

We retain your data for as long as your account is active, or as needed to provide the service. Ambient capture screenshots are automatically deleted after 48 hours regardless of any other setting. If you delete your account, your data is purged within 24 hours, except where we're required to retain it for legal compliance.

Security

We encrypt stored credentials and files, support passwordless passkey sign-in, and offer optional device-level protections on Android (biometric app-lock and a screen-privacy flag that blocks screenshots/recording of sensitive screens). No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

Children's privacy

XMethod is not directed at, and is not intended for use by, children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at the address below and we will delete it.

Changes to this policy

We may update this policy as XMethod's features change. We'll post the updated policy here with a new "Last updated" date, and will provide more prominent notice for material changes.

Contact us

Questions about this policy or your data? Email docmoates@gmail.com.