Privacy Policy

XpatAI is operated by nxgtechworld. We are the data controller responsible for your personal data under the General Data Protection Regulation (GDPR).

Contact: info@nxgtechworld.com

Account & Profile

• Name, email and password (hashed)
• Nationality, city, visa type, arrival date and family status

Document & AI Data

• Documents you upload for scanning
• AI-generated summaries and action items extracted from them

Usage & Technical

• Chat history, checklist progress and deadlines
• Device type, app version and push notification token
• Crash reports and anonymised usage analytics

To provide and personalise the XpatAI service — including AI responses, document analysis, deadline reminders and safety score calculations — and to improve the app over time.

We do not use your data for advertising or third-party marketing.

• Contract performance — processing necessary to provide the XpatAI service you signed up for (Article 6(1)(b))
• Legitimate interests — improving app features and ensuring security (Article 6(1)(f))
• Consent — push notifications (you may withdraw consent at any time in device settings)

Database & File Storage

• Provider: Supabase Inc.
• Purpose: Storing your profile, documents, chat history and app data
• Data location: Frankfurt, Germany (EU Central — GDPR compliant)

APIs and AI Integration

• Provider: Anthropic PBC
• Purpose: Analysing documents and powering AI chat responses
• Data sent: Document images and chat messages are processed via Anthropic's API

All personal data is stored on servers in Frankfurt, Germany (EU), encrypted in transit, and protected under GDPR. Passwords are never stored in plain text.

Your data is retained for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days.

You have the right to access, correct, delete, restrict, or export your data — and to object to how we process it. To exercise any of these rights, email us at info@nxgtechworld.com. We will respond within 30 days.

XpatAI is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

XpatAI may send push notifications for deadline reminders and daily briefings. You can disable notifications at any time through your device settings without affecting your ability to use the app.

We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notification. Continued use of the app after changes constitutes acceptance of the updated policy.

• Email: info@nxgtechworld.com
• Company: nxgtechworld

If you are not satisfied with our response, you have the right to lodge a complaint with the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) — the German data protection authority.