Privacy Policy

XINGO Pty Ltd (ABN 26 683 778 010) (“XINGO”, “we”, “us”) runs xingo.ai and the XINGO practice app. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what we collect, why, who we share it with, and your choices. Contact us at hello@xingo.ai.

• Account details: your name, email address, profile picture (if your sign-in provides one), and sign-in information.
• Preferences: what you're preparing for, your practice languages, and email preferences.
• Practice sessions: while a session is live, your voice is streamed to our AI provider so the AI characters can hear and answer you. We keep a text transcript of the session, your scores and feedback, timing, and minutes used. We do not store recordings of your voice.
• Camera: if you turn on the optional self-view, the video stays in your browser. It is not recorded or sent to us.
• Payments: your plan, purchases and billing history. Card details are handled by Stripe; we never see your full card number.
• Marketplace creators: the courses you publish, images you upload, and, if you set up payouts, the details Stripe needs to verify you and pay you (collected by Stripe).
• Usage and device data: pages you visit, features you use, browser and device type, and approximate location, collected through cookies and similar technology.
• Messages: anything you send us, and reports you make about marketplace courses.

• to provide the Service: run practice sessions, score them, show your progress, and keep your account secure;
• to meter practice minutes, take payments and pay marketplace creators;
• to answer you, handle reports, and prevent misuse and fraud;
• to understand how XINGO is used and improve it (we use aggregated or de-identified information where we can);
• to send service emails (like receipts) and, unless you opt out, occasional news and practice tips; and
• to meet legal obligations.

We don't sell your personal information. We share it only with service providers that help us run XINGO:

Our AI provider processes session audio and text to provide the Service under its API terms, which do not allow it to use that data to train its models by default.

If you publish a marketplace course, your creator name and course page are public. If you report a course, the creator isn't told who reported it. We may also disclose information where the law requires it, or to protect someone's safety.

Several of our providers store or process information outside Australia, mainly in the United States. We choose providers with strong security practices and take reasonable steps to make sure they handle your information consistently with the Australian Privacy Principles.

We use cookies to keep you signed in and remember preferences, and Google Analytics (with IP anonymisation) to understand how the site is used. Our emails include small images and tracked links so we can see whether they're opened and clicked. You can block cookies in your browser, though signing in needs them, and you can turn off news emails in your account or with the unsubscribe link in any email.

We keep your account and practice history while your account is open so you can track progress. If you ask us to delete your account, we delete or de-identify your personal information within 30 days, except records we must keep by law (such as payment and tax records) or to resolve a dispute.

Information is encrypted in transit, access is limited to people who need it, and payment details stay with Stripe. No system is perfectly secure; if a data breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner as the law requires.

• You can see and update most of your details in your account.
• You can ask for a copy of your personal information, ask us to correct it, or ask us to delete your account, by emailing hello@xingo.ai. We'll respond within 30 days.
• You can opt out of news emails at any time. Service emails such as receipts still arrive.
• You can use XINGO under a pseudonym (the name on your account doesn't have to be your legal name), except where payment or payout checks need it.

XINGO is for people aged 16 and over, or younger with a parent or guardian's permission. We don't knowingly collect information from children under 16 without that permission.

Email hello@xingo.ai with any privacy question or complaint. We'll acknowledge it within 5 business days and aim to resolve it within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au. We may update this policy; for material changes we'll let you know and ask you to accept the new version. See also our Terms of Service.