In short: your data is yours. You can see it, correct it, take a copy, or delete it — at any time.
This document is being finalized with legal counsel.
1. Your rights
Under the GDPR, UK GDPR, and CCPA/CPRA, you can ask us to:
- Access: get a copy of your data.
- Correct: fix data that is wrong or incomplete.
- Delete: remove your data, including biometric patterns.
- Export: receive your data in a portable format.
- Restrict or object: limit how we use your data.
- Withdraw consent: for biometrics or analytics, at any time.
- No discrimination: we will not treat you worse for using your rights.
2. How to make a request
Use the in-app controls to export or delete your data, or email support@xheight.com. To protect you, we may need to verify your identity before we act.
3. How long it takes
- GDPR / UK GDPR: within one month.
- CCPA / CPRA: within 45 days.
You may use an authorized agent, and you may complain to your local data protection authority.