XONA Privacy Policy
XONA does not send your photos or your body measurements to any server. Everything is analyzed on your phone, and your measurement history stays on your phone. There is no account.
Two things leave the device: usage analytics (§4) and advertising (§5). Both are anonymous, and your photos, skeleton coordinates and measurements are in neither. We request non-personalized ads only, and there are no ads on the result or camera screens.
1. What we do not collect
XONA does not collect:
- Your name, email address, or phone number
- Accounts, logins, or passwords
- Location
- Contacts, call logs, or messages
- Device identifiers, including the advertising ID
There is no sign-up. Install the app and it works.
2. What happens to your photo
The full-body photo you take during a scan goes through these steps:
- The camera captures one frame.
- A pose model running on your phone reads joint positions from it.
- Those joint positions become angles, gaps, and other numbers.
- The photo is kept on your phone, in app-private storage. (from version 1.3)
Where it is kept
In app-private storage. Here is what that means, plainly.
- It does not appear in your photo library. Someone scrolling your gallery will not find it, and neither will other apps.
- Other apps cannot read it. The operating system gives each app its own space, and only XONA can reach XONA's.
- Deleting the XONA app deletes the photos with it.
- It is not transmitted to a server. That has not changed since 1.0 and we have no plans to change it.
Why keep it
Measurement lines alone make it hard to recall how you were actually standing. On the result screen, press under the lines and the shot from that scan appears; press again and it hides. It starts hidden — so the photo does not jump out when you show someone your screen.
If you want it gone
Settings → Delete my data removes your scan history and every stored photo. Deleting the app does the same. There is no way to delete a single photo yet — if you need that, tell us via the contact in §13.
3. What is stored on your phone
The following stays on your device only. None of it is transmitted.
| Item | Contents |
|---|---|
| Scan history | Alignment score, type, angle and gap values, timestamp |
| Skeleton coordinates | Joint positions used to redraw a past scan (not a photo) |
| Scan photos | The shot taken during a scan. Kept in app-private storage; never appears in your photo library (from version 1.3) |
| Height | Only if you enter it. Used to convert values into centimetres |
| Habit checks | Which habits you checked on which day |
| Goal score | Set by you, or suggested by the app |
| Badges | Which badges you have earned |
| Settings | Language, mirror-shooting mode, tutorial dismissal |
| On-device identifier | A random string the app generates. It never leaves the device and does not identify you |
4. Usage analytics
To improve the app we need to know how it is used, so we collect anonymous usage analytics through Google Firebase Analytics.
What is sent
| Item | Detail |
|---|---|
| Usage events | App opens, screen views, session start and end |
| Feature use | Scan completed, retake prompts shown, share card exported, habit checks, badges earned |
| Device and app | Device model, OS version, app version, country, language |
| App instance ID | A random install identifier generated by Firebase |
What is never sent
- Your photos — in any form
- Skeleton coordinates — joint positions never leave the device
- Your measurements — individual angles, scores and gaps
- Height and goal score, or anything else you typed in
- Name, email, phone number, location, contacts
- Advertising data — analytics and ads are not linked to each other (ads: §5)
Scanning itself needs no connection. The pose model ships inside the app, so scanning works in airplane mode — you are welcome to verify that yourself. Analytics is counted separately and has nothing to do with the analysis.
5. Advertising
A banner ad appears at the bottom of the app. We use Google AdMob.
We request non-personalized ads only. Ads are not selected based on your interests or behaviour. The ads SDK uses the advertising ID — a resettable identifier issued by your device — for frequency capping and click-fraud prevention.
- Ads appear only at the bottom of the home screen
- No ads on the result screen or the camera screen — those are where you read your numbers
- Your photos, measurements and type are never passed to advertising
You can reset or limit the advertising ID in your device settings (Android: Settings → Privacy → Ads).
6. Camera permission
Used for scanning only. The camera turns on when you press the shutter and turns off when the result appears. It never records in the background.
You can decline the permission — the app still runs, but scanning is unavailable.
7. Sharing with third parties
We share no information that identifies you with third parties, because we do not hold any.
The anonymous analytics in §4 is processed by Google (Firebase Analytics) under Google's own privacy policy (policies.google.com/privacy).
Advertising is served by Google AdMob (§5). We request non-personalized ads only.
8. Deleting your data
Two ways:
- Settings → Delete my data: scan history, habit records, badges, and settings are erased immediately.
- Uninstall the app: everything stored on your phone goes with it, and analytics collection stops.
You do not need to send us a deletion request for your measurements — we do not hold them. If you want the usage analytics in §4 deleted, write to the address below and we will handle it.
9. Share cards
You can share your result as an image. The card contains no photograph — only numbers and shapes. Whether and where to share it is entirely your choice.
10. Children
XONA is not directed at children under 13. We collect no personal information such as names or contact details, and the analytics in §4 is anonymous and does not identify an individual.
11. This app is not a medical device
The numbers XONA shows are wellness reference information. They are not a medical assessment and do not replace professional advice. If you have pain or discomfort, please consult a professional.
12. Changes to this policy
If a new feature changes how information is handled, we will update this document and raise the effective date and version. If a change would send data off your device, we will tell you inside the app and ask for your consent first. We will not make that change quietly.
Version 1.1 followed that rule: the usage analytics is listed on the privacy screen you see on first launch, and you have to acknowledge it before continuing.