Privacy Policy

Xiam Technologies Limited ("Xiam," "we," "us," "our") respects your privacy. This Privacy Policy explains what information we collect when you use the Xiam app, how we use it, who we share it with, and the rights you have over it.

Data Controller: Xiam Technologies Limited is the data controller responsible for processing the personal information described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

• Account information: name, email address, handle/username, profile photo, bio
• Content you create: debate arguments (text, photos, videos, voice notes), Stories, Discover videos, comments, messages
• Verification information: if you apply for Expert or Verified status, we may collect identification documents (such as a photo ID or passport) for review purposes only
• Reports: information you submit when reporting content or users

1.2 Information Collected Automatically

• Device information: device model, operating system version, app version
• Usage and analytics data: how you interact with the app (screens viewed, features used, session length), collected via Firebase Analytics
• Crash and performance data: collected via Firebase Crashlytics, to help us identify and fix bugs
• IP address: used for security, fraud prevention, and to enforce App Check protections against unauthorized API access
• Approximate location: we do not collect precise GPS location. Approximate location may be inferred from IP address for security and analytics purposes only

1.3 Information From Others

• Other users may tag you, mention you, or include you in shared content
• If you are added as a debate opponent, the debate creator's content referencing you will be visible per that debate's settings

1.4 Data Categories at a Glance

2. How We Use Your Information

We use your information to:

• Operate and maintain the Service (creating your account, displaying your content and feeds, enabling debates and messaging)
• Personalize your experience (home feed ranking, Discover feed mix, interest-based recommendations)
• Communicate with you (notifications about debate activity, likes, comments, follows, and account/safety matters)
• Detect, investigate, and prevent fraud, abuse, and violations of our policies, including automated and human content moderation
• Improve the Service through aggregated analytics
• Comply with legal obligations and respond to lawful requests (see our Law Enforcement Request Policy)

2.1 AI-Assisted Moderation

We use automated systems, including third-party content-safety APIs, to scan uploaded photos and videos for policy violations (such as graphic violence, sexual content, or indicators of child exploitation) before or shortly after publication. These systems may flag content for human review or automatically restrict its distribution. Certain moderation decisions may be assisted by automated systems that flag, limit, or temporarily restrict content pending human review. See our Child Safety Standards Policy and Sexual Content and Nudity Policy for more detail on how this works.

2.2 Legal Bases for Processing

Depending on applicable law, we process personal information based on one or more legal grounds, including: your consent; performance of our contract with you (these Terms); our legitimate interests in operating, personalizing, and securing the Service; and compliance with our legal obligations.

3. How We Share Your Information

We do not sell your personal information. We share information only as follows:

• Service providers: We use Google Firebase for authentication, database storage (Cloud Firestore), file storage (Firebase Storage), serverless functions, hosting, analytics, and crash reporting. These providers process data on our behalf under their own data processing terms.
• Other users: Your profile, public posts, debates, and Stories are visible to other users (or the public, depending on the content type and your settings). Direct messages are visible only to conversation participants.
• Legal requirements: We may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of Xiam, our users, or the public. See our Law Enforcement Request Policy.
• Business transfers: If Xiam is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy or a successor policy.

4. Data Retention

We retain your information for as long as your account is active, and for a limited period after deletion as described in our Data Retention and Deletion Policy, or as required by law (for example, content preserved in connection with a legal investigation or CSAM report).

For example:

• Account information: retained while your account remains active
• Analytics data: retained for a limited period tied to product improvement purposes, then aggregated or deleted
• Verification documents (submitted for Expert/Verified review): deleted after the review is complete, unless retention is required for fraud prevention or legal compliance
• Reports and enforcement records: retained for safety and legal purposes, including to detect repeat violations, even after the reported content or account is removed

We begin deleting or anonymizing personal information after account deletion, except where retention is required by law, security, fraud prevention, or an ongoing investigation. See our Data Retention and Deletion Policy for full detail.

5. Your Rights

Depending on your location, you may have rights including:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate information (you can update most profile information directly in-app)
• Deletion: delete your account and associated data at any time via Settings → Delete Account
• Objection/restriction: object to certain processing, where applicable under the NDPA

To exercise these rights, contact us at xiamformilo@gmail.com. We will respond within the timeframe required by applicable law.

6. Children's Privacy

Xiam is not directed at children under 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected information from a user under 16, we will delete it and disable the associated account. See our Child Safety Standards Policy.

7. International Data Transfers

Our infrastructure providers (including Google Firebase/Google Cloud) may process and store data in countries outside Nigeria. Where this occurs, we rely on the safeguards provided by our service providers' own compliance frameworks. By using Xiam, you acknowledge that your information may be processed outside Nigeria.

8. Security

We use reasonable technical and organizational measures to protect your information, including:

• Database access rules that restrict data access based on account ownership
• App Check protections against unauthorized access to our backend
• Encrypted data transmission
• Rate limiting on sensitive actions to prevent abuse

No system is perfectly secure, and we cannot guarantee absolute security of your information.

9. Cookies and Identifiers

Our mobile app does not use browser cookies. We use device and app identifiers (such as Firebase installation IDs) for analytics, crash reporting, and security (App Check) purposes. Our web-based shareable preview pages (debate, profile, and video links) may use minimal technical identifiers necessary to render the page; they do not run third-party advertising trackers.

10. Push Notifications

We may send push notifications relating to debates, messages, follows, likes, comments, and safety or account-related alerts. You can manage notification preferences through your device settings and the in-app Notifications settings.

11. Security Incidents

If we become aware of a security incident affecting your personal information, we will investigate and take steps to mitigate the incident, and will provide notification to affected users and/or relevant authorities where required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated in-app or via email before they take effect.

13. Contact Us

Questions about this Privacy Policy or your data:

xiamformilo@gmail.com (or miloboy0001@gmail.com)

Xiam Technologies Limited Kaduna State, Nigeria