Data Deletion

Deleting local records and requesting deletion of company-held data.

Last updated 13 October 2026

1Data on your computer

XOS1 stores its conversation history, memories and many app records locally. Its factory-reset function clears the app’s user state, including conversation history, memory records and biometric templates, and removes generated files in the app’s Assets workspace. Export or back up anything you want to keep before a reset.

A reset is not a secure wipe of your disk. It does not erase copies you exported, operating-system backups, files outside its reset scope or information held by third parties. Uninstalling software should not be treated as proof that all associated local data has been removed.

2Stop optional reporting

XOS1’s Privacy controls separately govern optional profile and usage reporting. Both default to off. Withdrawing profile sharing clears the name and date of birth in the current install record when the next check-in reaches the server.

Withdrawing usage sharing stops new tool-usage details being reported. It does not automatically delete historical check-in records. Basic install, version, update and crash information is separate from optional sharing.

3Request company-held data deletion

Contact [email protected] or choose “Delete my data” in the customer help form. Identify the account, install code or request reference involved and the information you want deleted. We may need to verify that you are entitled to make the request.

We will assess the request and respond within the period required by applicable law. Local reset and a request to delete company-held information are separate actions. Deletion does not itself cancel a subscription or create a refund entitlement.

4Children’s records and guardian requests

A parent or guardian may request access, correction or deletion of a child’s company-held information, or withdraw consent, where applicable law gives them that authority. We must verify the requester’s identity and authority before disclosing information or acting on their behalf. Paying for an account does not by itself grant access to its conversations.

Identify the records and request involved without sending unnecessary child information. Where valid consent is withdrawn, affected consent-based processing must stop unless a legal exception applies; deletion and any necessary retention are assessed separately. We will explain records we are required to keep and why.

Turning parental visibility off, deleting local records and requesting deletion of company-held information are different actions. Any parental-activity or guardian-verification records introduced by a release must have a disclosed deletion scope and retention schedule. A birthday or local reset does not automatically erase copies held elsewhere.

5Records and other recipients

Some records may need to be kept to meet legal obligations, resolve a dispute or protect service security. Where information cannot be deleted, we will explain the applicable reason. This page does not promise an immediate purge of every backup.

A local reset does not recall information already processed by an AI provider or another external service. Provider retention and your rights depend on the applicable service and agreement. See the Privacy Policy for the distinction between processing, stored records and planned zero-retention requirements.

Questions about this policy?

[email protected]