Privacy Policy

Who we are

EFFECT TECH CO., LTD. (影響視覺科技有限公司, "Xensorio", "we", "us"), a company in Taiwan, operates the Xensorio app and the website xensorio.com and is responsible for the personal data described in this policy. Xensorio is our brand. We handle personal data in line with Taiwan's Personal Data Protection Act (PDPA).

For any question about this policy or your data, write to service@xensorio.com.

The short version

• We collect what the app needs to work: your email address, your pets' profiles and test results, the photos you take of test strips, and what you choose to log or share.
• We don't sell personal data, we don't show ads, and we don't track you across other companies' apps or websites.
• Test-strip photos are deleted automatically 90 days after they are taken; the readings stay so you can see trends.
• Your meal checks, meal photos and how you felt after a meal are never shown to your household. A meal check appears on a place only if you choose to share it, and then by date and result only.
• You can download your data or delete your account from the Me tab at any time.

What we collect in the app

We don't collect your contacts, advertising identifiers or payment card details, and we don't collect location in the background. If you turn on app lock, Face ID or your fingerprint is checked by your phone; we never receive biometric data.

You don't have to give us any of this. Without an email address (or Sign in with Apple or Google) we can't create an account, and without strip photos the app can't read your tests. Everything else, such as location, notifications, meal photos or community posts, is optional, and the rest of the app still works without it.

What we collect on the website

• Contact form. Your name (optional), email address, subject and message.

• Pre-order form. Your name, email address, the product you're interested in and any note you add.

• How form messages reach us. When you send a form, our website emails what you entered, with the time and the page you sent it from, to our team's inbox through Mailgun, our email provider, and we keep it in that inbox. We don't send you an automatic confirmation email.

• Spam protection. When you open the contact or pre-order form, the page loads Cloudflare Turnstile, which checks that you're a person and not an automated program. To do this, Turnstile uses signals from your browser and device, such as your IP address, your browser type and technical details of your connection. Cloudflare also uses these signals to improve Turnstile, and its Turnstile Privacy Addendum applies. Turnstile isn't loaded until you open a form.

• Technical data. Our website host processes your IP address, browser type and the pages you request, to deliver the site and protect it from abuse.

• Website analytics. On xensorio.com we use Google Tag Manager to run Google Analytics, which tells us how many people visit and which pages they use. Google Analytics sets cookies (their names start with _ga) and receives the pages you view, the site that sent you, your device and browser type, the time of your visit and an approximate location that Google works out from your IP address. Google Analytics doesn't log or store your full IP address. We don't send it your name, email address or anything you type into a form.

We use analytics only to understand and improve the website, not for advertising: advertising cookies and ad personalization are switched off. If you visit from the European Economic Area, the UK or Switzerland, analytics cookies are off unless you allow them. Anywhere, you can block or delete cookies in your browser settings, or install Google's opt-out browser add-on (https://tools.google.com/dlpage/gaoptout). The website doesn't use session recording, and its fonts are served from our own site, so loading a page doesn't contact Google Fonts or any other font service.

How we use your information

We don't use your information for advertising, and we don't send marketing email. We email you about products only if you asked us to, for example through the pre-order form.

Some decisions are automated. Test results are worked out automatically from your photos; they are a reference for home tracking and not a diagnosis. Some community posts and comments are blocked automatically by our screening rules, and others are flagged for a moderator to check. You can appeal a moderation decision in the app under Me → Community record & appeals.

Who can see your information

• Your household. People in your household see the pets you share there, their test results, notes and care logs, and who logged each one. They see your display name or, if you haven't set one, a partly hidden email address (like so*****@example.com). A viewer can look but not change anything.
• Never your household: your meal data. Your PureCheck meal checks, meal photos and how you felt after a meal belong to you alone. Your household never sees them, whatever your settings.
• People you send a passport link to. If you share a pet's passport, anyone with the link or QR code can see what you chose to include (basic details only, or test records too) until the link expires — after 1 day, 7 days or never, as you choose — or until you turn it off.
• Other app users, for checks you share to a place. A meal check you share to a place appears there by date and result only. Its time, the dish and your name are never shown.
• Other app users, for product reports. If you report a test result for a product you scanned, others see the result and when it was reported, never your name.
• Other community members. Posts, comments, photos and your community profile are visible to other community members, or only to your approved followers if your account is private.
• Veterinarians you consult. A veterinarian you start a consultation with sees your messages and attachments and the pet details and test results you choose to share.
• Partners whose code you entered. They see only totals, never who you are or your results.
• Our team. Authorised staff see account information only when they need to, for example to answer a support request, review reported content, check the quality of test readings or handle a privacy request. Email addresses are partly hidden in our back office by default. Showing a full address, an original test photo or a consultation transcript requires a recorded reason, ends after 15 or 30 minutes, and is logged.

PureCheck meal checks and Fully private mode

When you run a PureCheck test, the photo of the test card is sent to our servers so the result can be read a second time. The result says whether porcine content was detected in the portion you sampled. "Not detected" is not a safety or halal certification.

Every meal check stays private unless you choose to share it to a place. You can make a shared check private again at any time. A shared check with a "Detected" result can't be deleted on its own, so that one person can't erase reports about a place, but you can make it private at any time.

Fully private mode (in the Me tab) goes further. Turning it on takes back every check you've shared, in one step. While it's on, every new or edited check stays private and you don't appear in community suggestions or search. Turning it off later doesn't share anything again.

Community and public content

What you post in the community is meant to be seen by others. Please don't post information you want to keep private, such as your home address. Posts and comments are screened automatically for content our community rules don't allow, and moderators review reports. If a post suggests someone may be going through a hard time, we may show them support resources and ask a moderator to look at it first.

There is no button in the app to delete your own posts or comments. To have one removed, write to us at service@xensorio.com. When you delete your account, your posts and comments stay in the community without your name or profile photo. See Delete your account for details.

AI features

Some features can use a large language model to put an explanation of a result into plainer words, or to answer a question using articles our team has reviewed. These features are only active when we have switched them on. When they are on, we send the model provider only what the feature needs:

• Result explanations. The explanation our templates write for the result, which names your pet's test items and their levels.
• Questions to the AI assistant. Your question, the last few messages of the conversation and excerpts from our articles. If you attach a cat, also its name, birth date, known conditions and the levels from its last three tests (no raw values).

We never send your email address. When no model provider is switched on, explanations come straight from our templates, answers are built from article excerpts, and nothing is sent to a model provider.

Service providers and other third parties

We use these providers to run Xensorio. They process personal data on our behalf and only for the purposes below.

Others act independently, under their own privacy policies:

• Apple and Google, if you use Sign in with Apple or Google, and as the operators of the App Store and Google Play.
• Amazon. Strips and other products are sold on Amazon. When you tap Buy on Amazon, the Amazon listing opens and Amazon handles your order, payment and delivery. We don't receive your order or payment details.
• Veterinarians you choose to consult.

We may also disclose information when the law requires it, or when it is needed to protect the rights or safety of our users, the public or Xensorio.

We don't sell personal data, and we don't share it with anyone for advertising.

Where your data is stored

Our app servers, database and files run on a cloud server in Japan (Tokyo) that we rent from Google Cloud. Several of our providers, including Mailgun, Google, Anthropic, Sentry, Cloudflare and Vercel, are based in the United States or operate worldwide. This means your information is processed in a country other than your own, including Japan and the United States, where data protection laws may differ from those where you live. We use these providers only for the purposes in this policy, and all data travels between your phone and our servers over encrypted HTTPS connections.

How long we keep information

Your choices and rights

In the app, at any time:

• See and download your data. Me → Download my data gives you a JSON file of your account, households, pets, test records, notes, reminders, strip stock, meal checks, care logs, rewards history, article likes, photo list, agreements, usage events, privacy requests and support requests. Photos are listed, not included as image files; while a photo is still kept, you can ask us for a copy. For other information, such as community posts or consultation messages, write to us.
• Correct your data. Edit your pets' profiles, your display name and region, your meal checks and other entries the app lets you change. Write to us for anything you can't change there.
• Delete your data. Delete individual meal check-ins with their photos, remove AI conversations from your list (we keep a copy for 30 days, as described above), or delete your whole account under Me → Delete account. If you can't use the app, we can delete your account for you by email. See Delete your account.
• Withdraw consent. Turn off location, camera, photo or notification access in your phone's settings; mute notification types in the app; make shared meal checks private or turn on Fully private mode; turn off passport links you've shared. Withdrawing consent doesn't affect what we did before.
• Sign out. Signing out removes your device's push token from our servers.

Your rights under Taiwan's PDPA. You can ask us to let you see your personal data, give you a copy, add to or correct it, stop collecting, processing or using it, or delete it. We may decline where the law allows, for example when we must keep information to comply with a legal obligation, and we'll tell you why. Depending on where you live, you may have other rights under local law, and you can also complain to your local data protection authority.

If you live in the United States. You can use the rights above too. We don't sell personal information, and we don't share it with anyone for advertising or use it for targeted advertising. If a law where you live gives you further rights, write to us and we'll handle your request under that law; if we decline a request, you can ask us to reconsider. We won't treat you differently for using your privacy rights. The website doesn't change how it works when your browser sends a "Do Not Track" signal.

How to ask. Write to service@xensorio.com from the email address on your account. If you write from another address, we'll ask you to confirm from the account's address first. We reply to requests to see or copy your data within 15 days, and to other requests within 30 days. If we need more time, we'll tell you why within that period; we can extend once, by the same length.

Pet information

Your pets' test results and health records are information about your animals, not about your own health. We still protect them as sensitive information: we use them only to provide the service, show them only to the people described above, and never use them for advertising.

Children

You must be 13 or older to use Xensorio, and if you're under 18 you need a parent's or guardian's permission (see our Terms of Service). Xensorio is not directed to children under 13, and we don't knowingly collect personal data from them. If you believe a child under 13 has given us personal data, contact us and we will delete it.

How we protect your information

• All connections between the app or website and our servers use encrypted HTTPS.
• There are no passwords to steal. You sign in with a one-time code, Sign in with Apple or Google. Access tokens last 15 minutes and are renewed with tokens that can each be used only once; if one is reused, every session in that chain is signed out.
• Photos and files are kept in private storage and shown only to people allowed to see them.
• Staff access is limited by role and region. Back-office accounts use two-factor sign-in, revealing personal data is time-limited and logged, and our audit logs can't be changed.

No system is perfectly protected, so we can't promise that your information will never be accessed without permission. If we learn of a breach that affects your personal data, we will notify you and the authorities as the law requires.

Changes to this policy

When we update this policy, we change the dates at the top of this page. If a change is significant, the app will also show you the new version and ask you to accept it before you continue.

Contact us

Questions or requests about your privacy: service@xensorio.com.

See also our Terms of Service, Delete your account and Support.