Legal

Privacy policy

Effective date: September 26, 2026 · Last updated: October 3, 2026 · Applies to the XLeap iOS app and xleap.app

This policy describes how Xleap Finance ("XLeap", "we") handles your information when you use the XLeap app for iOS. The short version: your financial data is yours, and we never sell it.

Information we collect

We do not collect advertising identifiers, and the app contains no third-party advertising or tracking SDKs.

How we use information

We do not use your data for advertising, and we do not sell or rent it to anyone.

AI features

The AI assistant is optional, and XLeap asks for your permission before sharing anything with an AI provider. When you use it with sharing on, we share your messages, recent conversation history, and relevant financial information with our AI service provider, currently OpenAI, to generate responses. This may include profile and account details, balances, transactions, holdings, and goals. You can turn sharing off at any time in Settings; the rest of XLeap keeps working.

Where your data lives

Your data is stored on cloud infrastructure operated by trusted service providers on our behalf. We use industry-standard safeguards, including encryption and access controls, to protect your information. Access is limited to authorized personnel and service providers as needed to operate, support, and secure XLeap.

Face ID

If you turn on Face ID or Touch ID, iOS performs the check on your device. XLeap never receives or stores your biometric data.

Third parties

We use service providers to host and operate XLeap, connect financial accounts, and provide AI features. They process information on our behalf to provide these services. When connecting financial accounts, you authenticate directly with the connection provider or your financial institution. XLeap never sees or stores your bank login credentials. We do not share your data with advertisers. We may also disclose information when required by law.

Data retention and deletion

Your data is retained for as long as you use the app. You can delete your data at any time from within the app, or request deletion of your account and all associated data by emailing support@xleap.app. We honor deletion requests within 30 days.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, contact support@xleap.app.

Children

XLeap is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

If we make material changes, we will update this page and note the new effective date above.

Contact

Questions about this policy: support@xleap.app.