Privacy policy

Data controller

Xiqora is responsible for the processing of your personal data under the GDPR.

What we store

• Email and sign-in credentials.
• Profile information you post yourself (username, bio, region, images).
• Messages between users — encrypted in transit, stored on servers within the EU.
• Technical metadata (IP, device) for security and fraud prevention.

We never sell your data

We don't share data with advertisers or data brokers. Full stop.

How long data is kept

• Active accounts: as long as the account exists.
• Deleted accounts: anonymised within 30 days.
• Messages: deleted once both parties delete the thread, or after 24 months of inactivity.

Your rights

• Request a copy of your data.
• Have inaccurate information corrected.
• Have your account deleted.
• File a complaint with the Swedish Authority for Privacy Protection.

Contact

For privacy enquiries: privacy@xiqora.se