PRIVACY

27 OCTOBER 2026

What we keep, and what we can’t see.

An account is a username and a password

That is all it takes to read, post write-ups and look round. No real name, no college, no photo. The password is checked and stored by our database host, hashed — we never see it. Accounts made before 14 September 2026 could add an email for recovery; it stays with the account and is never used to write to you.

Before your first doubt: your birthday, a number and an email

Xorics is for people 18 and over. The first time you press Speak, you give your date of birth — your browser works out whether you are 18 or over, and only that is kept, never the date — and you check a mobile number and an email address once, each with a code sent to it. That keeps one person to one account, so a suspension can’t be dodged with a new one. Nobody you meet ever sees any of it, and none of it is ever sent to an AI model. The codes go out through a text-message service and an email service; of a code we keep only a one-way fingerprint, for ten minutes.

A recovery code, if you make one

Only a one-way fingerprint of it is kept, so nobody here can read it back. It works once. Using it signs every other device out.

When you speak

When you’re signed in, each phrase you say goes from your browser, through our server, to a speech-to-text service, and comes back as words — and while you’re still saying a phrase, what you’ve said of it so far goes the same way, so the words show up as you talk. Only phrases with a voice in them are sent — silence and background noise stay in your browser — and the microphone turns itself off when nobody is talking. We never store the audio, and we opt out of the speech service using it to improve its models. Signed out, your browser’s own engine does it instead, which for Chrome and Edge means their company’s service. Nothing said inside a room is ever sent to either.

When you talk to Xorics

Your voice goes from your browser straight to an AI voice service, which hears it and answers out loud. It never passes through our servers, and we never have the audio. What was said, both ways, comes back as words: we keep those words on your account with a short note on what it was about, so you can read any conversation back, and so Xorics remembers what you’ve talked about before. In your first conversation it asks three quick questions (college or work, what you’re learning, a problem you got stuck on); your answers are read into a few short lines about you, shown on You. It is told those lines, so it can talk to you as you - remove a line on You and it is no longer told. If you choose quiet, its voice stays silent and your microphone is never opened: you type, and read what it says. If a word of yours comes back written in another script, that part of your voice is sent once to our own speech service, which writes it in English and keeps nothing. Your username is never sent. Delete a conversation and it’s gone - the words, the note, and what it remembered from it. Some AI services have free plans whose terms let the provider use what is sent to improve their models; while we use a free plan, that applies here too.

What gets read, and by what

The text of what you say on Speak, after a room, when you introduce yourself, and in a write-up is sent to an AI model to be read: what you are asking, the problem said back so the person you sit with can follow it, the lines on your record, the shape of an interview. Your username is not sent with it. After a room, the lines already on your record go too, as text, so the same thing comes back in the same words. When you ask for a worked answer or what to learn first, your doubt goes, with what you said after the room. Now and then, to decide whether a short spoken check would help and to write one for you, your recent doubts and the lines on your record go as text; when you talk a check through, what you say goes too, so it can end on what you did well and the idea underneath. Some AI services have free plans whose terms let the provider use what is sent to improve their models; while we use a free plan, that applies.

What we keep

  • Your checked mobile number and email, and that your birthday says 18 or over.
  • Your doubt, and the problem as you let it stand, until you close it, sit with somebody, or take it down.
  • A doubt a room did not solve, on your account, until you say it is solved or let it go.
  • Your record: what you said and what we noticed, each line with where it came from. It lives on this device and, signed in, in our database. Any line can be corrected or deleted, and all of it at once, on You.
  • Rooms: who you sat with, when, for how long, and your answers afterwards. Never what was said in them.
  • People you kept: the messages between the two of you, until either lets the other go.
  • Write-ups, which are public — without your username or your college.
  • Your conversations with Xorics: the words both ways and a short note on each, until you delete them - one at a time, or all of them with your account.
  • Reports and blocks you make.
  • Which puzzles you have had, so the same one doesn’t come round again — never your answers.
  • Spoken checks: whether one is waiting for you, when you last did one, and which ideas they covered — never what you said, unless you keep its one line on your record.
  • Numbers about how you get on with kinds of problems, and how people you sat with answered afterwards. Used only to decide who to pair you with; never shown to anybody, you included.
  • How much reading you used today, for the daily limit.
  • Page visits, counted without room codes, people, or anything you typed.

Rooms are between the two of you

Voice, screen and notes go from one browser to the other, encrypted. When two networks won’t connect directly, a relay service passes the call along still sealed — it can’t open it either. Nothing is recorded, and we can’t hear it — which is also why we can’t police it. You can silence the other person at any moment, their shared screen stays hidden until you choose to see it, and block and report are how you tell us.

Who sees what

The person you sit with sees your doubt, the problem as you let it stand, and whatever you choose to say — never your username, your number, your email, your record, or your college. Write-ups are open to anyone. Your record is yours alone.

Leaving

Delete my account, on You, removes the account and everything tied to it: record, doubts, rooms, conversations with Xorics, kept threads, write-ups, reports you made. It can’t be undone. If the account is suspended at the time, a one-way fingerprint of its number and email is kept until the suspension would have ended — so it can’t be used to come straight back — and nothing else.