Summary

• The App is free. No payments, no subscriptions, no ads, no selling of personal data.
• You can browse fully anonymously. An account is optional.
• If you sign in (Apple, Google or email), we store your saved tips, your votes and reactions, and a per-topic knowledge profile so they sync across your devices.
• If you browse anonymously, we use a random device identifier only for basic analytics and to handle abuse and reports.
• Our backend is Supabase (cloud Postgres, EU region). AI-assisted search and on-demand generation send the text of your query to OpenAI (United States); please keep those queries free of sensitive details.
• You can delete your account and data in the App (Settings → Delete account) or by emailing us.

1. Who We Are

The App is published by Evoogen Ltd, a company registered in England and Wales (Company No. 17253621), with its registered office at 5 Brayford Square, London, E1 0SG, United Kingdom. For the purposes of UK data protection law, Evoogen Ltd is the controller of the personal information described in this policy.

2. Information We Handle

If you create an account (optional)

You can use Haxli without an account. If you choose to sign in to save your activity across devices, we handle:

• Account identifier and email address. When you sign in with Apple, Google or email, we receive a basic identifier and an email address. With Sign in with Apple you may choose to hide your email, in which case we receive only a private relay address.
• Your saved tips. The tips you bookmark.
• Your “worked / didn't work” votes. Your verdicts on whether a tip worked for you.
• Your “knew it / didn't know” reactions. The swipe reactions you give to cards.
• Your per-topic knowledge profile. A profile, derived from your reactions, showing how deep you are in each topic.

Search and on-demand generation

When you search the library, or ask the App to generate tips for a problem it doesn't cover yet, the text you type is sent to our AI provider (OpenAI) to find or generate relevant tips. Please do not include personal or sensitive details in these queries — treat the search and generation box like any other search box. On-demand generation requires an account and is subject to a fair-use daily limit; we keep a count of your generations to enforce that limit.

If you browse anonymously

If you use the App without signing in, we generate a random device identifier. It is used only to record basic, first-party analytics events (such as opening the App or viewing a tip) and to operate abuse and report handling. This identifier is not linked to your real-world identity, is never sold, and is never used for advertising.

Reports you submit

If you report a tip as wrong, unsafe or low quality, we record which tip you reported and any note you add, so we can review it and keep the library honest. A report may be delivered to our support inbox by email so that we can act on it.

3. How We Use This Information

Where UK GDPR applies, the legal basis for each use is shown in brackets.

• To provide the App and its core features — the feed, library, search, saved tips, votes, reactions and your knowledge profile. (Performance of a contract; legitimate interests for anonymous use.)
• To generate tips you request through AI-assisted search and on-demand generation. (Performance of a contract.)
• To sync your saved tips and activity across your devices when you are signed in. (Performance of a contract.)
• To understand basic usage trends and improve the App. (Legitimate interests.)
• To review reports and detect and prevent abuse, spam and misuse. (Legitimate interests.)
• To respond to your messages and provide support. (Legitimate interests.)
• To comply with our legal obligations. (Legal obligation.)

4. AI Features

Haxli's library is created and curated with the help of artificial intelligence, and the App can generate tips on demand. We provide these AI features through OpenAI as our AI service provider. When AI-assisted search or on-demand generation runs, the text of your query is sent to OpenAI to produce a result. Under OpenAI's terms for this type of API use, your inputs are not used to train their models. AI-generated tips are general information only, exactly like the rest of the library — see our Terms of Use. Please review OpenAI's terms and privacy notice before relying on AI-powered features.

5. Who We Share It With

We do not sell your personal information and we do not share it with advertisers. We share information only with the limited service providers needed to run the App, and where the law requires it:

• Supabase — our backend provider, which hosts our database and stores your account data (saved tips, votes, reactions and knowledge profile) on cloud Postgres in the European Union region.
• OpenAI — our AI provider, which processes the text of your search or generation queries, on servers in the United States, to return or create relevant tips.
• Apple and Google — only if you choose Sign in with Apple or Google Sign-in, to authenticate you and provide a basic identifier and email address.
• Resend — our transactional email provider, used to deliver a tip report you submit to our support inbox.
• Legal and safety — we may disclose information where required to comply with the law, enforce our Terms, or protect the rights, safety and security of our users or others.
• Business transfers — if Evoogen Ltd is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction.

6. No Advertising and No Tracking

Haxli contains no advertising and no third-party advertising trackers. We do not use advertising identifiers, we do not build profiles for advertisers, and we do not share your information with ad networks. The only analytics we use are first-party product events (such as opening the App, viewing a tip, or generating tips) stored on our own Supabase backend, used to understand how the App is used and to make it better. These events record that an action happened, not its private content.

7. Where Your Information Is Stored and International Transfers

Your account data is stored on Supabase infrastructure in the European Union region. When AI-assisted search or generation runs, the text of your query is processed by OpenAI on servers in the United States. Where personal information is transferred outside the UK or EEA — including to the United States — we rely on the safeguards required by applicable law, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision, to keep your information protected.

8. How Long We Keep It

We keep your account information for as long as you have an account with us. When you delete your account, we delete or anonymise the personal information associated with it, except where we are required to retain limited information to comply with the law, resolve disputes, or prevent abuse. Anonymous, device-level analytics events are retained only for as long as needed for the purposes described above.

9. Your Rights

Depending on where you live, you may have rights under data protection law, including the right to access the personal information we hold about you, to correct it, to delete it, to restrict or object to certain processing, and to data portability. To exercise any of these rights, contact us at support@evoogen.com.

If you are in the UK or EEA and believe we are processing your personal information unlawfully, you have the right to lodge a complaint with a supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ICO), ico.org.uk.

10. US State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Virginia, or another US state with a comprehensive privacy law, you may have the right to access the personal information we hold about you and how we process it, to correct inaccuracies, to obtain a copy of it, and to delete it. We do not sell your personal information or share it for cross-context behavioural advertising, and we do not use it for targeted advertising. To exercise these rights, contact us at support@evoogen.com; we will not discriminate against you for doing so.

11. Deleting Your Account and Data

You can delete your account at any time inside the App: go to Settings → Delete account. This permanently removes your account and the personal information associated with it. You can also email support@evoogen.com from the address you signed up with and we will delete your data for you.

12. Children

Haxli is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

13. Security

We use appropriate technical and organisational measures to protect your information. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security. You access and use the App at your own risk.

14. Do-Not-Track

Most browsers and some operating systems offer a “Do-Not-Track” (DNT) setting. There is no finalised industry standard for how to respond to DNT signals, so we do not currently respond to them. In any case, Haxli does not track you across other apps or websites for advertising.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If we make material changes, we will take reasonable steps to let you know. We encourage you to review this page periodically.

16. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, email us at support@evoogen.com, or write to: Evoogen Ltd, 5 Brayford Square, London, E1 0SG, United Kingdom.