Loxio Privacy Policy

1. Introduction

Welcome to Loxio ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you understand exactly how your information is collected, used, and shared.

This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of information that is processed through our mobile application, Loxio (the "App"), and any related services. Loxio is a location-based social network that utilizes Augmented Reality (AR) and geolocation data to connect users with their immediate surroundings.

By accessing or using Loxio, you agree to the practices described in this Privacy Policy. If you do not agree to this policy, please do not use the App.

2. Information We Collect

To provide the Loxio experience, specifically our Hyper-Local Feed, AR View, and Content Verification systems, we collect several categories of information.

A. Information You Provide to Us

1. Account Information:

   • When you create an account, we collect your email address, a password, and your Date of Birth.

   • If you choose to register via a third-party service (such as Google Sign-In or Apple Sign-In), we collect your email and public profile information associated with that account.

   • You are required to create a unique username to identify you on the platform.

2. User Profile Data

   • You may voluntarily provide a bio and a profile picture.

   • This information is visible to other users on the platform, subject to your privacy settings (e.g., "Private Account" status).

3. User Content:

   • We collect the content you create, upload, or post to the App. This includes photos, videos, text posts, captions, and comments.

   • We collect the messages you send to other users via our direct messaging feature ("Inbox"), including text and shared media.

4. Interactions and Communications:

   • We record your interactions with other users and content, such as "Starring" (liking) posts, sending "Link Up" (friend) requests, and blocking or reporting users.

B. Information We Collect Automatically

1. Geolocation Data & Privacy Protection:

   • Real-Time Location: Loxio is a location-first application. We collect your precise location data (GPS coordinates) while the app is in use to generate the "Nearby" feed, position content in the "AR View," and calculate your "Loxio Score."

   • Location Randomization (Fuzzing): To protect our most vulnerable users and those who value strict privacy, if your account is set to "Private" or if you are under the age of 18, we do not store your exact GPS coordinates. Instead, our system automatically applies a randomized offset to your location data before it is saved to our servers. This ensures your precise real-world location cannot be pinpointed.

   • Heading and Orientation: We collect data regarding your device's physical orientation and compass heading to accurately overlay digital content in the AR view.

   • Background Location: If you grant permission, we may update your location occasionally to ensure feed relevance, though primary collection occurs while the App is in use.

2. Media Metadata and Verification Data:

   • EXIF and Metadata Extraction: When you upload a photo or video, we automatically analyze the file's metadata.

   • Authenticity Processing: We process this data to detect:

     1. Creation Date: To ensure content timeline accuracy.

     2. GPS Tags: To verify if the content was captured at the location you are posting from.

     3. Editing Software Signatures: To detect if an image has been processed by external software (e.g., Adobe Photoshop, Snapseed).

3. Device, Technical Information, and Security Attestation:

   • We collect information about the device you use to access Loxio, including the hardware model and operating system version.

   • FCM Tokens: We collect Firebase Cloud Messaging tokens to deliver push notifications.

   • App Attestation: We utilise native device attestation services (such as Apple's AppAttest and DeviceCheck) to cryptographically verify that requests sent to our servers are coming from a legitimate, unmodified version of the Loxio app.

4. Usage Data:

   • We collect data regarding how you use the App, such as the duration of your sessions and the posts you view.

3. How We Use Your Information

We use the information we collect for specific business and functional purposes:

A. To Provide Core Services

• Hyper-Local Feed: We use your precise GPS location to filter and sort posts, ensuring you only see content relevant to your immediate physical vicinity (typically within a 25km radius).

• Augmented Reality (AR): We use your location and heading to overlay posts onto the real world through your camera view, allowing you to discover content spatially.

• Navigation: We use map data to show the location of posts relative to you.

B. Age Verification and Safety

• Age-Gating: We use your Date of Birth to ensure you meet our minimum age requirement of 16. 

• Automatic Privacy Enforcement: If you are between the ages of 16 and 17, your account is permanently locked into "Private" mode, and your stored location data is automatically randomised to protect your physical safety.

C. Content Verification and Scoring

• Authenticity Badges: We use the metadata extracted from your uploads to automatically categorise your posts. Posts with original, unedited metadata matching your current location are marked as "Verified," while posts containing editing software signatures are marked as "Processed/Edited."

• Loxio Score: We use algorithmic logic based on your activity, the authenticity of your posts, and your popularity to calculate a public "Loxio Score" and assign visible rank badges (e.g., Bronze, Gold, Legend).

D. Social Connectivity

• Linking: We use your user ID and lists of "Linked Users" to manage friend connections, control access to private profiles, and facilitate direct messaging.

• Notifications: We use your device token to send alerts when you receive interaction on your content or requests to connect.

E. Advertising and Analytics

• Google Mobile Ads: We integrate with Google AdMob to display native, banner, and video advertisements.

• Personalisation: To the extent permitted by your device settings (e.g., App Tracking Transparency on iOS), we may use your advertising ID and usage data to serve ads that are more relevant to your interests.

• Ad Performance: We analyse data to measure the effectiveness of advertising campaigns delivered through the App.

F. Safety and Moderation

• Profanity Filtering: We utilise automated local filtering systems to detect and prevent the posting of offensive language in comments, bios, and captions.

• Reporting: We process user reports regarding objectionable content or abusive behavior to take appropriate action, such as removing content or suspending accounts.

4. How We Share Your Information

We do not sell your personal data to third parties. However, we may share your information in the following specific circumstances necessary to operate our service:

A. Third-Party Service Providers

• Google Firebase: We use Firebase for backend infrastructure, including Authentication, Firestore Database, Cloud Storage, and Cloud Messaging. 

• Google AdMob: We share device identifiers and ad-related data to deliver advertising content.

B. Other Users

• Public Information: Your username, Loxio Score, rank badge, and profile picture are visible to all users to facilitate social interaction.

• Shared Content:

  • Public Posts: If your account is set to "Public" (default), your posts and location data attached to them are visible to any user within the geographic range of the Feed or AR View.

  • Private Posts: If you enable "Private Account" in Settings, your posts are only visible to users you have explicitly "Linked Up" with (accepted friend requests), or users within the vicinity of your posted content inline with the outputs of the feed sorting algorithms.

• Location Data: Your "Last Known Location" map on your profile is only visible to users you have Linked with, provided you have not blocked them and your privacy settings allow it.

C. Legal Compliance and Safety

We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to:

• Comply with a legal obligation, court order, or government request.

• Protect and defend the rights or property of Loxio.

• Prevent or investigate possible wrongdoing in connection with the App (e.g., harassment, threats, or fraud).

• Protect the personal safety of users of the App or the public.

5. Your Choices and Rights

You have control over your data and how it is shared on Loxio.

A. Account Settings

• Private Account: You can toggle your account to "Private" in the Settings menu. This restricts view access, hides your exact location via randomization, and limits your content to Linked friends. (This setting is forced ON for users under 18).

• Profile Editing: You may update or correct your username, bio, and profile picture at any time through the "Edit Profile" section.

B. Blocking and Reporting

• Blocking: You can block specific users. Blocked users cannot see your posts, message you, or link with you. You can manage your blocked list in Settings.

• Unlinking: You can remove a connection with another user ("Unlink") at any time, which revokes their access to your private content.

C. Location Permissions

• You may revoke the App's access to your location through your device's operating system settings. However, please note that Loxio is a location-based service; disabling location access will render core features (Feed, AR View, Posting) non-functional.

D. Right to Erasure (Strict Account Deletion)

• You have the right to delete your account permanently. You can find the "Delete Account" option in the "Danger Zone" section of the Settings menu. This action is irreversible and removes your profile, posts, and data from our active database.

• Our Hard Deletion Policy: Loxio enforces strict "hard deletes." When you request account deletion, our systems permanently wipe your user profile, all uploaded media (photos/videos), chat images, direct messages, feed posts, and notifications from our active databases and storage buckets. We also instantly sever and erase all friend links associated with your account. We do not soft-delete or retain hidden copies of your deactivated data.

6. Data Retention

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy.

• Account Data: We retain your profile and account information for as long as your account is active.

• Content: Posts, comments, and messages are retained until you delete them or delete your account.

• Usage Data: We may retain anonymised usage data for analytical purposes to improve the App.

7. Security

We implement commercially reasonable security measures to protect your information.

• Secure Infrastructure: We rely on industry-standard security protocols for data storage and transmission.

• App Attestation: We utilize cryptographic device checks to block unauthorised, emulated, or modified versions of the app from accessing our servers.

• Credential Hashing: Passwords are not stored in plain text but are managed securely via Firebase Authentication.

• Access Controls: We limit access to personal data to authorised personnel and systems.

8. Children's Privacy

Loxio requires all users to be at least 16 years old to create an account. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take immediate steps to permanently delete that information and terminate the account. 

Furthermore, to protect minors, any user between the ages of 16 and 17 is subjected to forced privacy guardrails, meaning their profile is locked to "Private" and their location data is permanently randomized before reaching our servers.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.

10. Contact Us

If you have any questions about this Privacy Policy, your data, or your rights, please contact us:

• Email: loxio.assistance+privacy@gmail.com