Last updated: July 2026 · Prompt Engine LLC, Santa Fe, NM, USA · info@promptengineppc.com
The whole policy in one line: we store nothing.
No accounts. No cookies. No analytics. No ads. No tracking. No message ever stored. No logs.
xox works without phone numbers, emails or sign-ups. We have no user database because there are no users to record.
Messages and calls are encrypted on your device (ML-KEM-768 post-quantum key exchange + ECDH P-256, AES-256-GCM, Double Ratchet). We could not read them even if we wanted to.
Live chats travel directly between devices. Asynchronous messages exist only as encrypted blobs we cannot read, deleted on delivery or automatically shortly after. Nothing persists.
The app and the website use no cookies, no third-party analytics, no advertising SDKs, no fingerprinting. Nothing to accept, because there is nothing to track.
If you create an optional xox identity, only your public key (never private keys, never your name) and — if you enable alerts — a push token are held temporarily in a directory so contacts can reach you. Entries expire automatically; you can delete or regenerate your identity anytime, instantly, from the app. Push notifications carry zero content: they only wake your device. Delivery uses Google Firebase Cloud Messaging, which processes the token under Google's own policy.
Any internet connection technically exposes an IP address to the server it connects to; anyone claiming otherwise is not being honest. What matters is what happens next: we do not log, store, correlate or share IP addresses. Calls are relayed through our own servers so participants never see each other's IPs.
Sell data. Profile you. Add trackers. Read your messages. There is nothing to hand over, subpoena or leak — by architecture, not by promise.
xox is not directed at children under 13.
Any update will be posted at this address.