Privacy notice

HospoXP is operated by Jaraldinio, based in Australia. We decide how and why your personal information is handled, which makes us the data controller. Questions go to privacy@hospoxp.app.

• Account details — email address and sign-in credentials (or your Google account identifier if you sign in with Google), so we can create and secure your account. Basis: performing our contract with you.
• Profile — nickname, profile photo, chosen job role and workplace, so the app can pick relevant tasks and show you on leaderboards. Basis: contract.
• Task activity — tasks generated, completed or skipped, XP, streaks and badges. Basis: contract.
• Photos you upload — before/after proof photos for tasks. These are stored privately and shared only with managers of the workplace you belong to, and are processed by our AI provider to check the task and to learn what your venue actually has. Basis: contract.
• A 4-digit code — stored only as a one-way hash so nobody, including us, can read it back. Basis: security.
• Technical data — device type, IP address and error logs, used to keep the service running and to prevent abuse. Basis: our legitimate interest in a secure, working product.

We do not sell your personal information, and we do not use it for advertising or profiling.

• Your workplace — if you join a venue, managers of that venue can see your nickname, photo, job, XP, task history and any proof photos you submit there.
• Hosting and database providers — to store and serve your data.
• AI provider — task text and proof photos are sent for generation and verification. They are not used to train public models.
• Paddle — our Merchant of Record for the paid Manager plan. Paddle handles payment, billing, tax and invoicing, and receives the details needed to do that.
• Professional advisers and authorities — where we're legally required to disclose.

We keep your account data while your account is open. Delete your account and we remove your profile, tasks, photos, XP history and memberships. Some records are retained where the law requires it (for example, transaction records held by Paddle for tax purposes), and backups roll off within 30 days.

You can access, correct, export or delete your personal information, object to or restrict certain processing, and withdraw consent where we rely on it. Most of this is self-serve: edit your profile in Settings, or use Settings → Delete account to remove everything immediately. For anything else, email privacy@hospoxp.app and we'll respond within 30 days. You can also complain to your local privacy regulator.

Access is protected by authentication and row-level database rules, so people can only reach their own data and the data of workplaces they belong to. Data is encrypted in transit. Proof photos and avatars live in private storage and are served through short-lived signed links.

We only use essential storage: a sign-in token that keeps you logged in and a small preference for your active workplace. No analytics or advertising cookies. Clearing your browser storage signs you out.

HospoXP is intended for people in the workforce and is not directed at children under 13. If you believe a child has created an account, contact privacy@hospoxp.app and we'll remove it.