Privacy Policy

The data controller responsible for your personal data is:

If you have questions about this Privacy Policy or your data rights, please contact us at the address above.

We collect only the data necessary to deliver, personalise, and continuously improve the Lixia experience. The categories below describe what we collect and why.

Account and Identity Data

Session and Conversation Data

Biometric and Sensitive Data

Lixia processes certain data categories that require heightened care and explicit consent.

Technical and Device Data

We automatically collect technical information to ensure compatibility, support debugging, and improve your experience. This includes device type, operating system version, app version, session metadata, and crash logs.

Lixia requests the following device permissions. Each permission is requested at the point of use and only activated when you trigger the relevant feature.

• Microphone

  When starting a Talk session

  Voice-first AI conversation

• Camera

  When activating Show feature

  Visual AI interaction and facial recognition

• Screen capture / screen sharing

  When user initiates screen sharing inside Show

  Lixia assistance with on-screen content

• Notifications

  At app install or first session

  Background session indicators and reminders

• Storage / photo library

  When adding profile photo

  Profile picture upload

• Background audio

  When session continues while screen is off

  Call-like voice session with screen off

Lixia is designed to remain active when minimised or when the screen is off, supporting a continuous call-like experience.

• A session continues in background only after the user has explicitly started a Talk or Show session.
• A persistent notification bar indicator and/or floating session control is displayed whenever Lixia is active in background.
• If the camera (Show) is running in background, an active camera indicator window is visible at all times.
• Wake-command listening only operates while the app is open or running in background. Lixia does not listen for wake commands when the app is fully closed or killed.
• The user can mute Lixia at any time. In muted state, Lixia neither listens to speech nor produces voice responses. A mute indicator is displayed.
• The user can end any active session by saying "Goodbye Lixia" or using the end-session control.

We do not sell your personal data. We do not share your data with third parties for advertising purposes. We may share data in the following limited circumstances:

• AI model service providers — for real-time AI conversation, analysis, and summarisation (with data processing agreements and no training on user data without consent)
• SMS / OTP service provider — for OTP delivery (minimal data with data processing agreement)
• Cloud infrastructure providers — for hosting, storage, and service operation (encrypted at rest and in transit)
• Analytics and crash reporting providers — for app stability and quality improvement (anonymised or pseudonymised data only)
• Legal and regulatory authorities — when legally required (minimum necessary data only)

In-App Controls Available to All Users

• Delete voice recognition sample via Settings > Voice
• Delete facial recognition profiles via Settings > Facial Recognition
• Delete session summaries via Recent Sessions > Manage
• Manage explicit memories via Settings > Memory
• Edit pronunciation correction via Settings > Profile or Memory
• Update or remove profile photo via Settings > Profile
• End active session using session controls or voice command
• Mute Lixia using active session controls
• Delete account via Settings > Account

Statutory Rights (Where Applicable)

Users in certain jurisdictions such as the European Union (GDPR), United Kingdom (UK GDPR), California (CCPA/CPRA), and other applicable regions may have additional rights including:

• Right to access: request a copy of data we hold about you.
• Right to rectification: request correction of inaccurate data.
• Right to erasure: request deletion of your personal data (subject to legal retention obligations).
• Right to restriction: request that we limit how we process your data.
• Right to data portability: request your data in a machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: withdraw consent for biometric data processing at any time.
• Right not to be subject to automated decisions: request human review of automated decisions with significant effects.

To exercise any of the above rights, contact us at privacy@[domain]. We will respond within the timeframe required by applicable law (typically 30 days). We may ask you to verify your identity before processing a request.

We implement industry-standard security measures to protect your personal data:

• All data in transit between the App and our servers is encrypted using TLS 1.2 or higher.
• Data at rest is encrypted using AES-256 or equivalent.
• Access to stored personal data is restricted to authorised personnel on a need-to-know basis.
• OTP codes and QR login tokens are time-limited and invalidated after use.
• Biometric and sensitive data are stored with additional access controls.
• Session data is scoped to authenticated user accounts and cannot be accessed cross-user.

No method of transmission over the internet is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at privacy@[domain].

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the Effective Date at the top of this policy.
• Notify you through an in-app notification or upon next login.
• For changes involving biometric data or new sensitive data categories, we will obtain fresh consent where required by law.

Continued use of the App after a policy update constitutes your acceptance of the revised policy, to the extent permitted by law.

For questions about this Privacy Policy or to exercise your rights, please contact:

If you are located in the European Union or United Kingdom and believe we have not handled your data in accordance with applicable law, you have the right to lodge a complaint with your local data protection supervisory authority.