This notice is provided for information only and is not legal advice. It is pending review by qualified counsel and may be updated to reflect final legal and regulatory requirements.
1. Overview
This Notice at Collection is provided by Xheight () at or before the point at which we collect personal information through the Aion product, available at xheight.ai, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA/CPRA”).
Xheight does not sell personal information and does not share personal information for cross-context behavioral advertising. Biometric information is encrypted and is never sold.
2. Categories of Personal Information We Collect
The table below describes the categories of personal information we may collect through Aion, the purposes for which we collect them, our retention approach, and whether the category is sold or shared.
| Category | Purpose of Collection | Retention | Sold | Shared |
|---|---|---|---|---|
| Identifiers (account and device identifiers) | Create and secure accounts, authenticate users, and operate the service. | Retained for the life of the account plus a limited period as required for security and legal obligations. | No | No |
| Audio (voice input and recognized speech) | Process voice commands and provide spoken assistance in real time. | Processed transiently for the request; not retained unless you enable a feature that stores it. | No | No |
| Visual (camera images and video) | Describe surroundings, read text, and provide vision assistance features. | Processed transiently for the request; not retained unless you enable a feature that stores it. | No | No |
| Biometric information (face and voice embeddings) | Provide consent-gated recognition features that you explicitly enable. | Stored encrypted and pseudonymized; deleted on request or when you disable the feature. | No | No |
| Precise geolocation | Provide navigation, orientation, and location-aware assistance. | Used for the active session; precise location trails are not retained as long-term memory. | No | No |
| Commercial information | Manage subscriptions, entitlements, and purchase history. | Retained as required for billing, tax, and legal recordkeeping. | No | No |
| Analytics (opt-in product usage) | Understand and improve product usage where you have opted in. Off by default. | Retained in aggregated or de-identified form; sanitized to exclude personal identifiers. | No | No |
| Diagnostics (crash and performance data) | Detect, diagnose, and fix errors and maintain service reliability and security. | Retained for a limited period sufficient to investigate and resolve issues. | No | No |
3. Sensitive Personal Information
We collect the following categories of sensitive personal information under the CCPA/CPRA:
- Biometric information processed for the purpose of uniquely identifying a person (face and voice embeddings).
- Precise geolocation.
Right to Limit the Use of Sensitive Personal Information
You have the right to limit our use and disclosure of your sensitive personal information to those purposes permitted under the CCPA/CPRA. We use sensitive personal information only to provide and secure the features you request, and we do not use it to infer characteristics about you or for advertising. Biometric information is always encrypted and is never sold or shared.
4. Sale and Sharing
As reflected in the table above, we do not sell any category of personal information and we do not share any category of personal information for cross-context behavioral advertising. For details on how to exercise your rights and how we honor Global Privacy Control signals, see our Do Not Sell or Share My Personal Information notice.
5. Retention
We retain each category of personal information only for as long as reasonably necessary for the purposes described above, or as required by applicable law. When personal information is no longer needed, we delete or de-identify it. Resumable session state is short-lived operational data and is not retained as long-term memory.
6. Related Notices and Contact
For more detail, please review our Privacy Policy, our Data Rights notice, and our Biometric Policy.