Privacy Policy

Xavier Platforms ("Company," "we," "us," or "our") operates the Not Dead Right? mobile application (the "App" or "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the App.

1. Company Information

Xavier Platforms
Park City, Utah, United States
Website: xavierplatforms.com
Contact: privacy@xavierplatforms.com

Xavier Platforms is a multinational technology company founded in 2016, specializing in AI-accelerated software development and serving millions of users globally.

2. Information We Collect

2.1 Personal Information You Provide

When you register for and use the App, we may collect the following personal information:

Account Information:

• Apple ID identifier (provided through Sign in with Apple)
• Email address (may be your real email or Apple's private relay email)
• Full name (optional, provided during Sign in with Apple)
• Username (chosen by you)
• Profile biography (optional, up to 150 characters)
• Profile photograph (optional)
• Phone number (optional, used for emergency contact purposes)

Emergency Contact Information:

• Names of your designated emergency contacts
• Phone numbers of emergency contacts
• Email addresses of emergency contacts

Communication Data:

• Direct messages sent to and received from other users
• Message timestamps and read receipts

2.2 Information Collected Automatically

Usage Data:

• Check-in timestamps
• Timer activation/deactivation events
• App access times and dates
• Feature usage patterns

Device Information:

• Device type and model
• Operating system version
• Unique device identifiers
• Push notification tokens (Firebase Cloud Messaging)

2.3 Information We Do NOT Collect

We want to be transparent about what we do NOT collect:

• Location Data: We do not collect, track, or store your geographic location
• Health Data: We do not integrate with Apple HealthKit or collect medical information
• Contacts: We do not access or upload your device's contact list
• Photos: We do not access your photo library beyond images you explicitly upload as your profile picture
• Browsing History: We do not track your browsing activity outside the App
• Financial Information: We do not collect payment or financial data

3. How We Use Your Information

3.1 Core Service Functionality

• To create and manage your account
• To operate the 48-hour safety check-in timer system
• To send reminder notifications before your timer expires
• To notify your followers if your timer expires without check-in
• To notify emergency contacts via SMS if your timer expires
• To send "They're back!" notifications when you check in after expiration
• To facilitate direct messaging between mutual followers
• To display your profile to other users

3.2 Communication

• To send push notifications about your timer status
• To send push notifications about users you follow
• To deliver direct messages from other users
• To send important service announcements
• To respond to your inquiries and support requests

3.3 Safety and Security

• To verify user identity through Sign in with Apple
• To prevent fraud, abuse, and unauthorized access
• To enforce our Terms of Service
• To protect the safety of our users

4. How We Share Your Information

4.1 Information Shared with Other Users

The following information is visible to other App users:

• Your username
• Your profile photograph
• Your biography
• Your alive/dead status
• Your follower and following counts

The following information is shared only in specific circumstances:

• Phone Number: Only visible to your followers when your timer has expired (to facilitate emergency welfare checks)
• Timer Countdown: Visible only to users who follow you

4.2 Information Shared with Third-Party Service Providers

We share information with trusted third-party service providers:

Amazon Web Services (AWS):

• Profile images stored on AWS S3
• SMS notifications sent via AWS SNS
• Data processing and storage

Google Firebase:

• Push notification delivery via Firebase Cloud Messaging
• Device tokens for notification routing

MongoDB Atlas:

• Secure database hosting for user data
• Data encryption at rest and in transit

4.3 Information Shared with Emergency Contacts

When your 48-hour timer expires without check-in:

• Your designated emergency contacts receive an SMS notification
• The SMS includes your name/username and alerts them to check on you
• Emergency contacts do NOT receive access to your App data or account

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal process (subpoenas, court orders, search warrants)
• Requests from law enforcement agencies
• Protection of our legal rights
• Prevention of fraud or illegal activity
• Protection of personal safety of users or the public

4.5 We Do Not Sell Your Data

We do not sell your personal information to third parties. We do not have actual knowledge that we sell personal information of minors under 16 years of age.

5. Data Retention

5.1 Active Accounts

We retain your personal information for as long as your account remains active and as needed to provide you with the Service.

5.2 Account Deletion

When you delete your account:

• Your profile information is permanently deleted
• Your messages are deleted from our servers
• Your follow relationships are removed
• Your emergency contacts are deleted
• Your check-in history is deleted

Account deletion is processed immediately upon request through the App's settings.

5.3 Backup Retention

Backup copies of data may be retained for up to 30 days after deletion for disaster recovery purposes, after which they are permanently purged.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

6.1 Technical Safeguards

• Encryption in Transit: All data transmitted between the App and our servers uses TLS/SSL encryption
• Encryption at Rest: Stored data is encrypted using industry-standard encryption
• Secure Authentication: Sign in with Apple provides secure, privacy-focused authentication
• Token-Based Authorization: JWT tokens with expiration for API authentication
• Rate Limiting: Protection against brute force and denial-of-service attacks

6.2 Your Responsibilities

You are responsible for:

• Maintaining the security of your Apple ID
• Keeping your device secure
• Logging out of the App on shared devices
• Reporting any unauthorized access to your account

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

• Access the personal information we hold about you
• Request a copy of your data in a portable format
• View your data through the App's profile and settings sections

7.2 Correction

You can update or correct your personal information at any time through the App's "Edit Profile" feature, including your full name, biography, profile photograph, and phone number.

7.3 Deletion

You can delete your account at any time through the App's Settings > Account Info > Delete Account. This action is permanent and cannot be undone.

7.4 Notification Preferences

You can manage push notification permissions through your device's Settings app. Note that disabling notifications may impact the core safety functionality of the App.

8. Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@xavierplatforms.com.

9. International Data Transfers

Xavier Platforms is based in the United States. If you access the App from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

By using the App, you consent to the transfer of your information to the United States and other jurisdictions that may have different data protection laws than your country of residence.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
• Do Not Sell: We do not sell your personal information to third parties

To exercise your California privacy rights, contact us at privacy@xavierplatforms.com.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

• Consent: For optional features like profile photos and bio
• Contract: To provide the Service you requested
• Legitimate Interests: For security, fraud prevention, and service improvement

Your Rights

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request restriction of processing
• Portability: Request transfer of your data to another service
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

For GDPR-related inquiries, contact: dpo@xavierplatforms.com

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date
• Sending a push notification for significant changes

Your continued use of the App after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Xavier Platforms
Park City, Utah, United States

Email: privacy@xavierplatforms.com
Website: xavierplatforms.com

For account-specific requests, please use the in-app support features or email us from the email address associated with your account.

14. Acknowledgment

By using Not Dead Right?, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.