Privacy Policy

This Privacy Policy explains how XRadar, Inc. (“XRadar,” “we,” “us,” or “our”) collects, uses, shares, and safeguards information when you use the XRadar mobile application and related services, including the XRadar+ subscription (collectively, the “Service”).

By accessing or using the Service, you acknowledge and agree to the practices described in this Privacy Policy.

1. Information We Collect

A. Information You Provide

We collect limited information you voluntarily provide, including:

• Email address (used for authentication, account access, and subscription management)
• Authentication credentials via:
  • Email-based password-less login
  • Google Sign-In
  • Sign in with Apple

We do not require users to provide their name.

B. Information Collected Automatically

When you use the Service, we may automatically collect:

• Device information (device type, operating system, app version)
• Device identifiers used for functionality, security, and analytics
• Usage data (feature interactions, timestamps, navigation flows)
• Location data (precise or approximate) only while the app is in use, to support real-time transportation features

XRadar does not collect background location data unless explicitly enabled by you in your device settings.

C. Subscription & Payment Information

XRadar+ subscriptions are processed through Stripe.

XRadar does not store full payment card numbers. We may receive:

• Subscription status
• Billing cycle and renewal information
• Purchase and cancellation timestamps
• General billing region and currency

D. Analytics & Diagnostics

We use third-party tools to improve reliability and performance:

• Mixpanel - product analytics and usage insights
• Sentry - crash reporting and error diagnostics

These providers may collect device and usage metadata in accordance with their own privacy policies.

E. Marketplace & Community Board Data

When you create a post on the XRadar Marketplace & Community Board, we collect the following information:

• Post content, including title, description, and category selection
• Images uploaded as part of a post
• Pricing information (if applicable)
• Event date and time (if applicable)
• Campus location tag (if provided)
• Preferred contact method (e.g., iMessage, Instagram, email)

Images are uploaded to and stored on XRadar’s servers. Posts are publicly visible to all authenticated XRadar users.

All Marketplace posts, including text and images, are processed by automated content screening systems, including third-party artificial intelligence services, prior to publication. These systems analyze content to detect potentially prohibited material, including but not limited to drugs, weapons, alcohol, nudity, sexual content, hate speech, harassment, threats, and personally identifiable information. The categories screened for are described in our Terms of Service.

Post content (text and images) may be transmitted to the following third-party services for content moderation purposes:

• OpenAI (text moderation)
• Sightengine (image moderation)

These third-party processors operate under their own privacy policies. XRadar transmits only the minimum data necessary for content screening and does not share user account information with these services.

XRadar stores your preferred contact method to display on your Marketplace posts but does not transmit messages on behalf of users and does not facilitate or monitor communications between users.

2. How We Use Information

We use collected information to:

• Provide, operate, and maintain the Service
• Authenticate users and manage accounts
• Enable and manage XRadar+ subscriptions
• Deliver real-time transportation features
• Send optional push notifications
• Improve functionality, performance, and reliability
• Conduct internal analytics and product optimization
• Measure engagement with sponsored content and offers
• Generate business insights and reporting
• Comply with legal and regulatory obligations
• Process, screen, and publish Marketplace posts
• Detect and prevent prohibited, fraudulent, or harmful content on the Marketplace
• Archive and retain Marketplace posts for platform integrity and analytics
• Facilitate user-to-user discovery through public Marketplace postings

3. Anonymous & Aggregated Data

XRadar may generate and use fully anonymized and aggregated data derived from user activity, including offer and redemption-related trends.

How this data is handled:

• Data is aggregated across groups of users
• All direct and indirect identifiers are removed
• Data cannot reasonably be used to identify any individual
• Aggregation thresholds are applied to prevent re-identification

How this data is shared:

XRadar may share anonymous, aggregated insights with business partners (such as participating merchants), including metrics such as:

• Total redemptions
• Conversion rates
• Time-of-day or day-of-week trends
• General usage patterns

Businesses never receive user-level data, personal data, email addresses, or device identifiers.

4. Personalized Features

Users may choose to favorite routes or customize app preferences.

• This data is stored locally on the device
• It is not linked to your account
• It is not transmitted to XRadar servers

5. Advertising & Sponsored Content

XRadar may display sponsored listings or promotional content within the Discover tab or other areas of the Service.

• XRadar does not sell personal data
• Sponsored content is displayed contextually
• Advertising partners do not receive user-level personal information

6. Push Notifications

Push notifications are optional and can be enabled or disabled at any time through device settings.

Notifications may include:

• Bus arrival alerts
• Service updates
• App-related announcements

XRadar does not send third-party marketing notifications without user consent.

7. Data Sharing & Disclosure

We may share information in the following limited circumstances:

• With service providers who help operate the Service (analytics, crash reporting, payments)
• With business partners, but only in anonymous and aggregated form
• With third-party content moderation services (OpenAI, Sightengine) to screen Marketplace posts for prohibited content. Only post text and images are shared; no user account data is transmitted
• For legal compliance or to respond to lawful requests
• To protect rights, safety, or security
• In connection with a corporate transaction (e.g., merger or acquisition)

XRadar does not sell personal information.

8. Data Retention

We retain personal data only as long as necessary to:

• Provide the Service
• Maintain subscriptions
• Meet legal and regulatory requirements
• Resolve disputes

De-identified and aggregated data may be retained indefinitely for analytics, reporting, and business intelligence purposes, even if a user deletes their account.

Marketplace Data Retention

Marketplace posts are publicly visible for seven (7) days from the date of publication. After expiration, posts are automatically moved to an archived database and are no longer publicly visible. Archived posts are retained by XRadar for platform integrity, analytics, legal compliance, and dispute resolution purposes.

Posts that are rejected by automated content screening systems are stored separately for administrative review and platform safety purposes. Rejected post data is retained for a period of ninety (90) days, after which it is permanently deleted unless required for ongoing legal proceedings.

Users may delete their own Marketplace posts at any time while the post is live. Upon deletion, the post is removed from public view. Archived and rejected post records associated with a deletion request will be purged within thirty (30) days, unless retention is required by law.

9. Your Rights & Choices

Depending on your location, you may have rights regarding your personal data. XRadar is committed to honoring these rights in accordance with applicable law.

A. General Rights

All users may:

• Access, correct, or request deletion of personal data
• Withdraw consent for optional features (such as push notifications or location access)
• Opt out of certain analytics where applicable
• Delete individual Marketplace posts at any time

California residents may exercise rights under the California Consumer Privacy Act (CCPA), including the right to know what personal data is collected, the right to request deletion, and the right to opt out of the sale of personal data. XRadar does not sell personal information.

B. Your Data Rights (EEA/UK Users)

Users located in the European Economic Area or the United Kingdom have the following rights under the General Data Protection Regulation (GDPR):

• The right to access personal data we hold about you
• The right to rectification of inaccurate or incomplete personal data
• The right to erasure (“right to be forgotten”) of your personal data
• The right to restrict processing of your personal data
• The right to object to processing of your personal data
• The right to data portability (receiving your data in a structured, commonly used format)

You may request deletion of your account and all associated personal data at any time by using the account deletion feature within the XRadar app settings or by emailing info@thexradar.com.

Upon receiving a verified deletion request, XRadar will erase your personal data within thirty (30) days, including:

• Account information and authentication records
• Marketplace post content, images, and metadata
• Associated records in active, archived, and rejected post databases
• Post report records associated with your account

XRadar will also direct third-party data processors to delete your data where technically feasible.

Certain data may be retained beyond the 30-day period where required by law, to comply with legal obligations, or for the establishment, exercise, or defense of legal claims. De-identified and aggregated data that cannot reasonably be used to identify you may be retained indefinitely for analytics and reporting purposes.

D. Exercising Your Rights

To exercise any of the rights described above, contact us at:

Email: info@thexradar.com

We will respond to verified requests within thirty (30) days. We may request additional information to verify your identity before processing your request. There is no fee for exercising your data rights unless requests are manifestly unfounded or excessive.

10. Data Security

We use reasonable administrative, technical, and physical safeguards to protect information.

No system is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

XRadar is not intended for children under 13 years of age.

We do not knowingly collect personal information from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Material changes will be communicated through the Service or our website. Continued use of the Service constitutes acceptance of the revised policy.