X-Ray Privacy Policy
Effective date: October 19, 2026
Summary
This policy explains what Henry Antonio-Devaughn Heard ("X-Ray," "we") collects when you use the X-Ray app and website, and what we do with it. In short: we collect what we need to run your account and the app, we never see your card number, we don't connect to your brokerage or bank, and we don't sell your personal information or use it for targeted advertising.
| What | Why | Who else handles it |
|---|---|---|
| Email and sign-in details | Your account and sign-in | Our hosting and sign-in provider (Supabase) |
| Watch list, Pro picks, settings | To show you the companies and topics you chose | Supabase |
| Plan and purchase status | To unlock Pro (free for everyone during the beta; after launch, for subscribers) | Google Play (processes payments after launch) |
| Error reports: the error message, the screen, app version and device type (never your email, name or choices) | To find and fix bugs | Supabase (stores them) |
| Messages you send us | To answer you | Google (Gmail, for support email) |
What we collect
You give us:
- Account details: your email address and, if you sign in with Google, your name and Google account ID.
- Your choices in the app: your watch list, the topics you picked under "What do you want to watch for?", your Pro picks and app settings.
- Beta sign-ups: if you join the beta on this website, your email and whether you have an Android phone.
- Messages: anything you send to support or as feedback.
Collected when you use the app:
- Purchase records: your plan, Google Play order ID, purchase date and whether a subscription is active. Google Play handles payment; we never receive your card or bank details.
- Usage: which companies and screens you open, so we can count Pro picks and improve the app.
- Device and diagnostics: device model, operating system, app version, crash reports and IP address (used for security and approximate country, not precise location).
What we don't collect: your brokerage or bank accounts, your holdings or trades, your precise location, your contacts, photos or files, or government ID numbers. The company data in X-Ray comes from public SEC filings, not from you.
How we use it
- Run the app: sign you in, save your watch list and settings, unlock Pro and count Pro picks.
- Handle purchases after launch: confirm subscription status with Google Play. Nothing is sold during the beta.
- Contact you about your account, purchases, the beta, the launch date and changes to these policies. Product news emails only if you opt in, and you can unsubscribe any time.
- Keep X-Ray working and safe: fix crashes, prevent abuse and fraud, and enforce our Terms.
- Improve the app using usage patterns, mostly in aggregate.
- Meet legal obligations.
We don't use your information to give you personalized investment advice, and we don't use it for targeted advertising.
Who we share it with
We don't sell your personal information or share it for cross-context behavioral advertising. We share it only:
- With service providers that run parts of X-Ray for us and may use the data only to provide that service: Supabase (database, hosting and sign-in), Google (Google Play billing and, if you choose it, Google sign-in), GitHub (hosts this website and runs our data jobs, which use public SEC data, not your personal data), Resend (sends the sign-in code emails) and Google (Gmail, for support email). We don't use an outside analytics or advertising service.
- If the law requires it, or to protect the rights, safety or property of our users, the public or X-Ray.
- In a business transfer, such as a merger or sale of X-Ray, in which case this policy continues to apply to your information.
- With your permission.
How long we keep it
- Account data stays while your account is open. When you delete your account, we delete your account details, watch list and settings within 30 days.
- Purchase records are kept for 7 years where tax and accounting law requires, then deleted.
- Beta sign-ups are kept until the beta ends or you ask us to remove you.
- Error reports are deleted automatically after 90 days.
- Backups age out within 30 days of deletion.
Your choices and rights
- Delete your account in the app (Account > Delete account) or at x-ray.live/delete without needing the app. Deleting your account doesn't cancel a Google Play subscription; cancel that in Google Play.
- See, correct or get a copy of your information by emailing support@x-ray.live. We'll respond within 30 days (45 where state law allows).
- Opt out of product emails with the unsubscribe link in any email.
- US state privacy rights: depending on where you live (for example California, Colorado, Connecticut, Virginia or Texas), you may have the right to know, access, correct, delete and port your information, and to opt out of its sale or use for targeted advertising. We don't sell or use it that way, but you can still make any request at support@x-ray.live, and we won't treat you differently for using your rights. You may appeal a decision by replying to our response.
Security
We use encryption in transit, access controls on our database, and row-level security so the app can only read what each account is allowed to see. No system is perfectly secure; if a breach affects your information, we'll notify you as the law requires.
Children
X-Ray is for adults 18 and older and is not directed to children. We don't knowingly collect information from anyone under 18. If you believe a child has given us information, contact support@x-ray.live and we'll delete it.
Where your data is stored
Your information is stored and processed in the United States by us and our service providers.
Changes
We'll post any update here with a new effective date. For material changes we'll tell you in the app or by email before they apply.
Contact
Henry Antonio-Devaughn Heard · Atlanta, Georgia · support@x-ray.live