Back to Xeep

Privacy Policy

Your physiological data sovereignty is our commitment

Data Sovereignty Guaranteed

At Xeep, we believe your physiological intelligence data belongs to you. Our privacy policy ensures Malaysian-hosted, end-to-end encrypted protection of your most personal health information.

End-to-End Encryption

All your physiological data is encrypted from device to storage, ensuring only you can access your information.

Malaysian-Hosted

Your data stays within Malaysia's borders, protected by local data protection laws and regulations.

Never Shared

We never sell, share, or monetize your physiological data. Your XQ insights remain private to you.

Information We Collect

Physiological Data

  • Heart rate variability (HRV) measurements
  • Blood pressure readings
  • Sleep pattern data
  • Stress level indicators
  • Activity and movement patterns
  • SpO2 (blood oxygen) levels

Account Information

  • Email address for account creation
  • Basic demographic information (age, gender, height, weight)
  • XQ assessment responses
  • App usage patterns and preferences

How We Protect Your Data

Encryption Standards

We use industry-standard AES-256 encryption for data at rest and TLS 1.3 for data in transit. Your physiological data is encrypted before leaving your Xeep Band and remains encrypted in our servers.

Malaysian Data Residency

All your data is stored exclusively on servers located within Malaysia, ensuring compliance with local data protection laws and giving you full control over your physiological intelligence data.

Access Controls

Only you have access to your raw physiological data. Our AI systems process anonymized, aggregated data to provide insights while maintaining your privacy.

Your Rights

Data Portability

You can export all your physiological data at any time in standard formats (JSON, CSV) for use with other platforms or personal analysis.

Data Deletion

You can request complete deletion of your account and all associated physiological data. This action is irreversible and will be completed within 30 days.

Consent Withdrawal

You can withdraw consent for specific data processing activities while maintaining access to core XQ development features.

Cookie Usage

We use cookies to enhance your experience on our wellness platform. Our cookie usage is designed with privacy-by-design principles and complies with GDPR, CCPA, and Malaysian PDPA regulations.

Cookie Categories

  • Essential Cookies: Required for authentication, theme preferences, and basic functionality
  • Analytics Cookies: Help us understand platform usage to improve your experience (consent required)
  • Performance Cookies: Monitor app performance and error tracking (consent required)
  • Health Data Cookies: Encrypted session cookies for health data access (special protection)

Cookie Consent Management

You have granular control over cookie preferences. Essential cookies are required for functionality, but you can accept or reject analytics and performance cookies. You can change your preferences anytime and withdraw consent as easily as you gave it.

Manage Cookie Preferences →

Contact Us

If you have any questions about this privacy policy or how we handle your physiological data, please contact our privacy team:

Email: privacy@xeep.my

Address: Xeep Privacy Team, Kuala Lumpur, Malaysia

Response Time: Within 48 hours for privacy-related inquiries

Policy Updates

We may update this privacy policy to reflect changes in our data practices or legal requirements. We will notify you of any material changes via email and through the Xeep app. Continued use of our services after such changes constitutes acceptance of the updated policy.

Last Updated: October 1, 2024