Effective Date: August 26, 2026
XAETOS ("we," "our," or "us") operates a fitness check-in app that tracks gym visits, workout streaks, and social fitness activity. This Privacy Policy explains what we collect, why, who sees it, and what control you have. It covers both the XAETOS mobile app and this website.
We have written this policy to describe what we actually do. Where a practice is limited, we say so rather than reserving rights we do not exercise.
XAETOS is operated from the United States and is offered only in the United States. The app is distributed exclusively through the United States storefronts of the Apple App Store and Google Play, and we do not target, market, or direct our services to users in any other country. All data is stored and processed in the United States. If you access our services while travelling outside the United States, you do so on your own initiative and are responsible for compliance with local law.
This website uses Google Analytics 4 to measure aggregate traffic — pages viewed, approximate location, referring site, and device or browser type. Google Analytics sets cookies in your browser for this purpose. This is separate from the app, which contains no analytics SDK.
You can opt out using the Google Analytics Opt-out Browser Add-on, or by blocking cookies in your browser. Website analytics are not linked to your XAETOS account.
We do not use your information for advertising.
Location is central to how XAETOS works: a check-in is only valid if you are physically at the gym. We compare your device location against the gym's coordinates on our servers.
If you grant "Always" location permission, the app registers geofences so it can detect arrival at a gym even when fully closed. You can downgrade to "While Using" or revoke location permission entirely in your device settings at any time; check-ins will then require the app to be open.
We do not build advertising profiles from location, and we do not sell or share it.
Please note: hiding a name in the global feed is a display choice made by the app. It reduces what other users see in ordinary use; it is not technical anonymization, and it is not a guarantee that activity cannot be associated with an account.
We use Firebase (Google) for authentication, database, cloud functions, storage, push notifications, and crash reporting — our only backend provider. Google Maps displays gym locations. Apple processes in-app purchases.
We may disclose information where required by law or valid legal process, or to protect the rights, safety, or property of XAETOS, our users, or the public. If XAETOS is involved in a merger or sale of assets, information may transfer; we will give notice before it becomes subject to a materially different policy.
We do not sell your personal information.
We rely on Google Cloud and Firebase infrastructure, which encrypts data in transit (TLS) and at rest.
We are a small team and do not maintain a dedicated security operations function, continuous automated security monitoring, or a routine third-party penetration testing program. We state this plainly rather than imply capabilities we do not have.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities as required by law.
You have the right to know, delete, and correct your personal information, and the right to non-discrimination for exercising these rights. You also have the right to opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of.
XAETOS is intended for users in the United States. Where you are nonetheless entitled to rights under another privacy law — portability, restriction, objection, or complaint to a supervisory authority — we will honor valid requests to the extent that law applies to us.
To exercise any right, email support@xaetos.com. We respond within the timeframes required by law, generally 30 to 45 days, and may need to verify your identity first.
You can delete your account from within the app. Some records may persist briefly in backups, and we may retain limited information where law requires it.
Our services are not directed to children under 13, and we do not knowingly collect personal information from them.
You must be at least 13 years old to create an account. This is a condition of use you agree to at sign-up. We do not currently verify age during registration and do not collect date of birth. App store age ratings reflect content suitability and are not an age verification mechanism.
If you are a parent or guardian and believe your child has provided us with personal information, contact support@xaetos.com and we will delete it promptly.
All XAETOS data is stored and processed in the United States, on Google Cloud infrastructure in the us-central1 region. We do not operate servers outside the United States.
Because the app is offered only in the United States, we do not routinely process data for users outside it. If you reach our services from another country, your information is transferred to and processed in the United States, which may have data protection laws that differ from those of your country.
Our processing infrastructure is provided by Google under the Google Cloud Platform Terms of Service, which incorporate Google's Cloud Data Processing Addendum.
Each has its own privacy policy governing its handling of your information. This policy does not apply to third-party sites we link to but do not operate.
We may update this Privacy Policy. Material changes will be reflected in the Effective Date above and, where required by law, by in-app notice. Continued use after a change constitutes acceptance.
If you have questions about this Privacy Policy, please contact us:
XAETOS Support Team
Email: support@xaetos.com