Last updated 8 October 2026
Privacy Policy
Last updated: October 8, 2026
AskAnXpert is operated by Agorex Inc. ("we", "us", "our"), 42 Oakwood Avenue N, Mississauga, Ontario L5G 3L8, Canada.
This policy explains what personal information we collect when you use the AskAnXpert app and the askanxpert.ai website, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. AskAnXpert is for adults: you must be 18 or older to use it.
Agorex Inc. is responsible for your personal information under this policy (the "controller", in the terms of some privacy laws).
1. The short version
- You can use the app as a guest, without giving us your name or email.
- We store your conversations so you can come back to them. You can delete any message, any conversation, or your whole account at any time.
- Your messages are sent to an AI provider to generate the Xpert's replies. We do not use your content to train AI models, and our AI providers' business terms do not allow them to either.
- Free use of the app is supported by ads from Google AdMob. On iPhone and iPad, and in Europe, the UK and Switzerland, ads are personalized only if you allow it. On Android elsewhere, you can turn personalized ads off in your device's settings.
- Ratings, comments, and Xperts and Skills you publish are visible to other people.
- We don't sell your personal information for money.
2. Information we collect
Your account
Guest accounts. When you first open the app, we create a guest account for you automatically. It has an account ID and a credit balance, but no name, email or password. A guest account is stored the same way as a registered one (everything in sections 2 and 3 applies to it). A guest account that is not used for 30 days is deleted, together with its conversations, files and photos, except the records we keep after any account is deleted (section 11). If you create an account, you keep the same account and everything in it.
Registered accounts. You can sign in with an email address and password, with Apple, or with Google. Sign-in is handled by our authentication provider, Supabase, which stores your email address and sign-in details. We never see or store your password. If you sign in with Apple, Apple may share your name and email address, or a private relay email address, with us.
Your profile. You can choose to add a first name, last name, nickname and profile photo. We also store your app settings, such as language and display preferences, and when your account was last active.
On your device. The app keeps your sign-in session in your device's secure storage, and remembers the email address, display name and account ID of the last account used so it can help you sign back in. This stays on your device.
Your conversations and creations
We store your conversations so you can return to them: your messages, the Xpert's replies, and any answers you give in a Skill's form. We also store the Xperts and Skills you create, including the chat you have with the app while building them.
We keep these until you delete them. You can delete a single message, a whole conversation, or your account.
"About you"
You can choose to answer questions about yourself, such as your preferred name, age range, occupation, education, location, and questions specific to an Xpert's subject. Your answers are sent to the AI provider with each message so the Xpert's replies fit you.
We store only what you enter. We never work out or add "About you" information from your conversations. You can view, change or delete any answer at any time in the app.
Sensitive information
Some Xperts cover subjects such as health, money or legal questions, and you may choose to tell an Xpert about your health, finances or other sensitive matters. We don't ask for this information and don't need it. Before your first message, the app asks your permission to store any sensitive information you choose to share and send it to the AI provider, in the same step as the permission described in section 7. If you share it, it is stored and handled like the rest of the conversation: kept until you delete it, sent to the AI provider only to generate the reply, and never used for ads. Please share only what you are comfortable sharing. To withdraw this permission for information you have shared, delete the messages, conversations or About you answers that contain it, or delete your account.
If you live in Washington State or Nevada, our Consumer Health Data Privacy Policy explains how we handle health information.
Photos and files you attach
You can attach photos (from your camera or photo library) and files (images, PDFs and plain text) to a conversation. They are stored privately with your account, and sent to the AI provider so the Xpert can read them. Files that are no longer part of any conversation are deleted after 30 days.
Voice input
If you use the microphone button, your phone's speech recognition, provided by Apple or Google, turns what you say into text. Depending on your phone and language, the audio may be processed on Apple's or Google's servers under their privacy terms. We receive only the resulting text, never the audio.
Credits and purchases
We keep your credit balance and a record of how credits are used. For each AI request we record which AI model was used, its size, and the credits charged, but not what was said. If you buy credits or a subscription, the purchase is handled by Apple or Google; we receive the transaction details (product, price, currency, dates and any refund) but never your card details. If you watch a rewarded ad, we record the ad network's confirmation so we can add your credits.
Reports and blocks
When you report an Xpert, a Skill, a rating or a comment, we store the report: your account ID, what you reported, the reason you chose, any details you wrote, and when. We use it to review the content and act on it. We don't tell the person you reported who you are.
When you block someone, we store that you blocked them so that their ratings, comments and published Xperts are hidden from you. They aren't told.
Device information and error reports
Welcome credits. To stop the free welcome credits being claimed again by reinstalling the app, the app reads an identifier for your device. We store only a scrambled, one-way version of it (a hash). We can't turn it back into the original identifier, but we still treat it as personal information. It is kept for as long as we offer welcome credits, because preventing repeat claims is its purpose. If you delete your account, it is no longer linked to you.
Error reports. If something goes wrong, the app sends us an error report: a description of the error, technical details of where it happened, the screen, the app version, and your device's platform and operating-system version. Error reports contain no account ID or device identifier, and are deleted after 90 days.
IP addresses
Our sign-in provider, Supabase, records the IP address of each signed-in session for security. It is kept while you stay signed in, and deleted when you sign out, when you delete your account, or, for a guest account, when the account is deleted after 30 days unused. Apart from that, we use your IP address only briefly, to prevent abuse such as repeated claims of welcome credits or floods of support messages, and we don't store it ourselves: our own server logs don't contain IP addresses. Our hosting provider processes it to deliver the service, and Supabase's request and sign-in logs record it for 1 day.
What we don't do
The app doesn't send push notifications, and we don't send marketing email. We only email you about your account, such as confirming your email address or resetting your password, and to answer messages you send us.
3. What other people can see
Most of what you do in AskAnXpert is private. These are not:
- Ratings and comments. When you rate an Xpert, your stars and any comment are shown to everyone who views that Xpert, together with your nickname and profile photo. They can be viewed without signing in.
- Your profile photo is stored so that anyone with its link can view it.
- Xperts and Skills you publish are visible to everyone. Other people can add a copy of a published Xpert or Skill to their own account.
If you delete your account, your ratings and comments stay visible, shown as "Deleted User". Xperts and Skills you published stay available, no longer linked to you, and copies of them stay in the accounts of people who added them (section 11). Please don't put private information in ratings, comments, or Xperts and Skills you publish.
4. The website
Analytics. With your permission, askanxpert.ai uses Google Analytics to count page visits and clicks on the beta-signup buttons. It records the page address (without any query details), the address of the page you came from, the page title, and which button you clicked. Google Analytics also collects general information about your device and browser, and your approximate location, which Google works out from your IP address. Advertising features and Google signals are turned off, and no account ID or form content is sent. The beta-signup buttons take you to Apple TestFlight or Google Play; we collect nothing through them except the click count above. Nothing is collected unless you choose Accept in the cookie banner. You can change your choice at any time with "Cookie settings" in the site footer; choosing Reject deletes the analytics cookies.
Cookies.
| Cookie | What it does | How long it lasts | Needs your consent |
|---|---|---|---|
consent | Remembers whether you accepted or rejected analytics | 6 months | No |
nuxt-color-mode | Remembers your light, dark or system theme | 1 year | No |
_ga, _ga_* | Google Analytics | Up to 2 years | Yes |
Support form. If you write to us through the support form, we collect your name, email address, the topic and your message, along with the full address of the page you sent it from and your browser's identification (browser, version and operating system). Your message is delivered to our support email inbox and used only to answer you. We keep support emails for 2 years after the conversation ends.
Images. Xpert photos on the website and in the app are delivered directly by Unsplash, which receives your IP address and browser details in order to send them, under the Unsplash privacy policy.
5. Advertising
The free version of the app shows ads from Google AdMob: banner ads, ads within the app's screens, and optional rewarded ads that earn you credits.
- Your choice. If you are in the European Economic Area, the UK or Switzerland, the app asks whether you agree to personalized ads before showing any. On iPhone and iPad, Apple's "Allow tracking" prompt asks for permission to use your device's advertising identifier. If you decline either one, you see non-personalized ads. On Android outside those regions, the app doesn't ask, and ads may be personalized using your device's advertising ID unless you turn that off in your device's settings.
- What AdMob receives. Information about your device and the app, your approximate location from your IP address, and, if you allow it, your device's advertising identifier. For rewarded ads, AdMob also passes your account ID back to us so we can confirm the reward and add your credits.
- Changing your choice. If the app asked for your ad consent, you can change it at any time on the app's Privacy screen in your account settings. You can change Apple's tracking permission in your iPhone or iPad's Settings, and the advertising ID in your Android device's settings.
- Because the app is for adults, our ad requests are not marked as directed at children.
Google's use of this information is described in How Google uses information from sites or apps that use its services.
6. How we use your information
| Purpose | Information used | Legal basis (where GDPR applies) |
|---|---|---|
| Providing your account, conversations and Xperts | Account, profile, conversations, About you, attachments | Performance of our contract with you |
| Generating replies and search results | Conversations, About you, attachments, Xpert content, search text | Performance of our contract with you |
| Handling sensitive information you choose to share, such as health information | Conversations, About you, attachments | Your explicit consent |
| Running credits and purchases | Credit records, transactions | Performance of our contract; legal obligation for financial records |
| Showing ads | Device and ad information | Your consent for personalized ads; our legitimate interest in funding the free tier for non-personalized ads |
| Preventing abuse | IP address, device hash | Our legitimate interest in protecting the service |
| Fixing problems | Error reports | Our legitimate interest in a working app |
| Reviewing reports and enforcing our rules | Reports, and the reported content | Our legitimate interest in keeping the service safe |
| Hiding people you blocked | Your block list | Performance of our contract with you |
| Website analytics | Analytics data | Your consent |
| Answering support requests | Support messages | Our legitimate interest in helping you |
| Keeping proof of what you agreed to | Consent records | Our legitimate interest in establishing and defending legal claims |
We do not use your conversations, About you answers or attachments for any other purpose. People at Agorex look at your content only when you ask us to for support; to investigate content reported to us or abuse of the Service; to deal with a security incident; to establish or defend legal claims; or when the law requires it.
7. AI providers and training
The Xperts are powered by AI models from one or more of Anthropic, OpenAI and Google. Before your first message, the app names these providers and asks your permission to store your content and send it to them; without it, the Xperts can't reply. The provider that handles a request receives what is needed to answer it: the Xpert's instructions, your About you answers, the recent conversation, and any files you attached.
We do not use your content to train AI models. We use these providers only through their paid business services, whose terms do not allow them to train their models on your content. A provider may keep data for a limited time under its own terms, for example to detect misuse.
8. Who we share information with
We don't sell your personal information for money. We share it only with the service providers below, who process it for us, and when the law requires it.
| Provider | What it receives | Why | Where |
|---|---|---|---|
| Supabase | Your account, sign-in details, and all stored app data and files | Authentication, database and file storage | Canada |
| Amazon Web Services | Everything passing between the app or website and our servers | Running our servers and the website | United States |
| Anthropic, OpenAI, Google | As described in section 7 | Generating Xpert replies | United States |
| RevenueCat | Your account ID; purchase and subscription status | Managing purchases and subscriptions | United States |
| Apple, Google | Purchase details; sign-in if you use them; if you ask Apple for a refund, how much of the purchased credits you used and that they were delivered | Payments, sign-in, refund decisions | United States |
| Google AdMob | As described in section 5 | Advertising | United States |
| Google Analytics | As described in section 4 (website only, with consent) | Website analytics | United States |
| Unsplash | Search words for Xpert images; your IP address when images load | Xpert images | United States |
| Namecheap Private Email | Account emails we send you; support messages | Email delivery | United States |
We may also disclose information if required by law, to respond to a valid legal request, or to protect the rights and safety of our users or Agorex Inc.
US residents
Some US state privacy laws ask us to describe our practices in their terms:
- Categories we collect: identifiers (account ID, email, device hash, advertising ID), customer records (name), commercial information (purchases and credits), internet or electronic activity (app use, ad interactions), approximate location (from IP address, by AdMob), user content (conversations, About you answers, photos and files), and any sensitive information you choose to share (section 2).
- Disclosed for business purposes to the service providers in the table above.
- Sale and sharing: we don't sell personal information for money. Showing personalized ads through AdMob can count as "sharing" or "selling" under some of these laws. You can opt out at any time by turning off personalized ads, as described in section 5.
- Your rights under these laws are in section 13.
9. Where your information is processed
We are based in Canada and our main database is in Canada. Several of our service providers process information in the United States, where it may be accessible to authorities under US law. If you are in the European Economic Area, the UK or Switzerland, these transfers rely on the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework; transfers from the UK rely on the UK Addendum to those clauses or the UK Extension to the Data Privacy Framework, and transfers from Switzerland on the Swiss-U.S. Data Privacy Framework or the clauses, as applicable to each provider.
10. How long we keep information
| Information | How long |
|---|---|
| Conversations, About you answers, Xperts and Skills | Until you delete them or your account |
| Attached files no longer in any conversation | 30 days |
| Unused guest accounts | Deleted after 30 days, as in section 11 |
| Credit-use records | The link to your account is removed after 13 months |
| Purchase and credit records | While you have your account; after it is deleted, kept for financial and tax records, without your name or email (section 11) |
| Error reports | 90 days |
| Welcome-credit device hash | As long as we offer welcome credits; unlinked from your account when it is deleted |
| Consent records | While your answer is current; then 7 years (section 12) |
| Record of the deletion warnings you were shown | 7 years after your account is deleted |
| Support emails | 2 years after the conversation ends |
| Reports you send | Until we resolve them, then 2 years |
| People you blocked | Until you unblock them or delete your account |
| Our own server logs (no IP addresses) | 90 days |
| Supabase request and sign-in logs (include IP addresses) | 1 day |
| Backups | Deleted information can remain in our database provider's encrypted backups for up to 30 days, until they are replaced |
11. Deleting your account
You can delete your account in the app's settings. This deletes your profile and profile photo, conversations, About you answers, attached files, the Xperts and Skills you never published, and your sign-in account. We also ask the AI provider to delete its copies of your attached files; it may keep limited logs for a short time under its own terms.
You can also ask us to delete your account without the app, at askanxpert.ai/support or by emailing privacy@askanxpert.ai.
Some information is kept after deletion:
- Ratings and comments stay visible as "Deleted User".
- Xperts and Skills you published stay available, no longer linked to you, because other people may be using them. The chats in which you built them are deleted. To take a published Xpert or Skill down, withdraw it before you delete your account, or email us.
- Purchase and credit records are kept for financial and tax records, without your name or email. They keep the store's transaction number, which can be matched to your former account ID. RevenueCat keeps your purchase history under your account ID, so that a subscription you still pay for can be restored and refund questions answered.
- A record of the deletion warnings you were shown (that billing continues, that credits are lost) is kept with your account ID and the time for 7 years, to show you were told before you confirmed.
- Consent records are kept under your former account ID, to show what was agreed and when (section 12).
- The welcome-credit device hash is kept, because preventing repeat claims is its purpose.
- Reports you sent are kept until resolved and then for 2 years, no longer linked to you. Your block list is deleted.
Deleting your account doesn't cancel a subscription. Cancel it in your Apple App Store or Google Play account settings.
12. Records of what you agreed to
When you accept or decline our Terms of Service, this Privacy Policy, the AI limitations notice, or our request for permission to store your content and send it to the AI providers (section 7), we record your account ID, which version you were shown, a fingerprint (hash) of its exact text, your answer, the time, and the app version and platform. We deliberately don't record your IP address or browser details. We keep your current answer to each document for as long as it is in use. Once a newer answer replaces it, we keep the older one for 7 years from the date it was replaced. If you delete your account, we keep your answers for 7 years from the date you gave them. This lets us show what was agreed and when.
13. Your rights and choices
Depending on where you live, you have the right to:
- access the personal information we hold about you, and receive a copy in a portable format;
- correct information that is wrong;
- delete your information;
- object to or restrict some uses of it;
- withdraw consent where we rely on it (personalized ads, website analytics, and sensitive information you chose to share), without affecting what was done before. To withdraw it for sensitive information, delete the messages, conversations or About you answers that contain it, or your account (section 11); and
- complain to a privacy regulator.
Many of these you can do yourself in the app: edit your profile, change or delete About you answers, delete messages and conversations, change ad choices, and delete your account. For anything else, including a copy of your data, email privacy@askanxpert.ai. We will reply within 30 days, and may need to confirm your identity first. Someone you authorize can make a request for you; we may ask for proof that they are authorized.
Xperts can't reply without the permission we ask for before your first message (section 7). If you no longer want to give it, stop using the app or delete your account (section 11).
We won't treat you differently for using these rights. If we refuse a request, we will tell you why, and you can ask us to reconsider by replying to that email. We don't make decisions about you by automated means that have legal or similarly significant effects.
You can complain to the Office of the Privacy Commissioner of Canada, to the Commission d'accès à l'information du Québec if you live in Quebec, or to the data protection authority where you live.
14. Children
AskAnXpert is for adults 18 and over. We don't knowingly collect information from anyone under 18. If we learn that an account belongs to someone under 18, we will delete it. If you believe a child is using AskAnXpert, contact privacy@askanxpert.ai.
15. Security
We protect your information with encryption in transit, access controls, and private storage for your conversations and files. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.
16. Changes to this policy
When we change this policy, we update the "Last updated" date at the top. If a change is significant, we will tell you in the app before it takes effect and ask you to review it.
17. Contact us
Our Privacy Officer is the Chief Executive Officer of Agorex Inc., who is responsible for how we protect your personal information.
Email: privacy@askanxpert.ai
Mail: Privacy Officer, Agorex Inc., 42 Oakwood Avenue N, Mississauga, Ontario L5G 3L8, Canada
Website: askanxpert.ai