This notice is provided for general information and should be reviewed by qualified legal counsel before publication. It describes how Xheight (), operating the Aion product and the website at xheight.ai, uses cookies, software development kit (SDK) identifiers, and local storage. It supplements our Privacy Policy.
1. What This Notice Covers
Aion is an assistive product used by people with vision impairments. We treat data minimization and user control as design requirements, not afterthoughts. This notice explains the small set of technologies we use to operate the Aion website and mobile application, why we use each one, and how you can decline the optional ones.
"Cookies" are small text files stored by your browser. "SDK identifiers" are values held by software components inside our mobile app (for example, a push-notification token or an anonymous install identifier). "Local storage" refers to browser or on-device storage we use to hold your preferences and session state.
2. Strictly Necessary vs. Optional
We separate technologies into two categories. Strictly necessary technologies are always on because the service cannot function safely or securely without them. Optional technologies are off by default and are only enabled if you opt in.
2.1 Strictly Necessary
These cannot be switched off through this notice, because they are essential to deliver the service you request. They include:
- Authentication and session tokens that keep you signed in and protect your account.
- Security cookies that help detect fraud, abuse, and unauthorized access.
- Local storage for your accessibility and interface preferences (such as contrast, text size, and language) so the product behaves consistently.
- Load-balancing and reliability values needed to route your requests to healthy servers.
- In the app, a device push-notification token used to deliver the notifications you have enabled.
2.2 Optional Analytics
We use one product-analytics provider, PostHog, to understand how features are used so we can improve the product. Analytics is strictly optional and is disabled unless you turn it on.
3. Analytics Opt-In Is OFF By Default
PostHog product analytics is opt-in and OFF by default. No analytics events are collected until you explicitly enable analytics in your settings. When enabled, we do not attach personal identifiers such as your name, email, phone number, address, precise location, raw transcripts, recognized text, or biometric data to analytics events.
Analytics helps us answer questions like which features are used and where users encounter friction. It is never used to build advertising profiles.
4. What We Do Not Use
- No advertising trackers. We do not use third-party advertising, retargeting, or cross-site tracking cookies, and we do not sell or share your data for behavioral advertising.
- No session replay. We do not record or reconstruct your screen, camera, or interaction sessions. This is a deliberate privacy choice given our users and the sensitivity of camera-based assistance.
- No surveys or fingerprinting for tracking. We do not use invasive device-fingerprinting techniques to identify you across services.
5. Do Not Track and Global Privacy Control
We respect the Do Not Track (DNT) browser signal and the Global Privacy Control (GPC) signal. If your browser or device sends a DNT or GPC signal, we treat it as a request to keep optional analytics disabled and will not enable analytics on the basis of that session. Because analytics is already off by default, honoring these signals reinforces the default rather than changing it.
6. How to Opt Out or Change Your Choice
Because analytics is off by default, you do not need to do anything to remain opted out. If you have enabled analytics and wish to turn it off again, you can:
- Open the Privacy section of your settings in the Aion app or on the website and toggle analytics off.
- Enable Do Not Track or Global Privacy Control in your browser or device.
- Use your browser controls to clear or block cookies and local storage. Note that blocking strictly necessary technologies may prevent parts of the service from working.
- Contact us at support@xheight.com for help.
7. Third-Party Providers
Some technologies are provided by service providers we engage to operate the product (for example, authentication, push notifications, and analytics). We list these providers, their purpose, and the data categories involved in our Subprocessors notice.
8. Eligibility
Aion is intended for users aged 16 and older. We do not knowingly enable analytics or non-essential technologies for users under this age.
9. Contact
Questions about this notice can be sent to support@xheight.com or, for legal matters, legal@xheight.com. For accessibility assistance, contact accessibility@xheight.com. Xheight is based in Tel-Aviv, Israel ().
Related notices: Privacy Policy, Subprocessors, Your Data Rights, and Do Not Sell or Share My Personal Information.