Trust & safety
Where your data goes, and what the AI may do with it.
Xoof holds what you eat, what you lift, what you weigh and what you tell a coach at midnight. This page answers the three questions that follow from that: where it is stored, what the model is allowed to touch, and which safeguards sit around body-weight goals.
Your data
Four promises we can actually keep.
There is no advertising business behind Xoof that would one day need your data, and no plan to build one. Xoof Premium, when it arrives, is how it stays funded instead.
Never sold, never brokered
We do not sell your personal data, and we do not share it with advertisers or data brokers. There is no exception in the small print.
Never used to train models
Your workouts, meals, notes, transcripts and coach conversations are not used to train any AI model — ours or anyone else’s.
AI is explicit opt-in
Free-text notes, transcripts and coach messages can reveal health information, so we treat them as special-category data under UK GDPR Article 9 and process them with AI only on your explicit consent. Withdraw it any time from your profile — manual logging carries on working.
Yours to take or destroy
Export your whole account as machine-readable JSON, or delete it permanently, from inside the app. Deletion removes your logs, your coach conversations and your analytics events together.
What leaves your device, and where it goes
Voice and photos
Sent for parsing, then discarded. We do not keep the raw audio or the image. Where a transcript is produced it is saved with the entry so you can check what was heard.
Coaching context
A compact, relevant slice — not your whole history. Your training coach is never sent your meals, and your nutrition coach is never sent your sets.
Where it rests
UK-region cloud storage, over TLS. The Privacy Policy names every sub-processor, what each receives, and how long each class of data is kept.
No cookie banner, because there is nothing to consent to: no advertising cookies, no third-party analytics, not even a third-party font request on this site. Read the cookies statement.
The AI
What it is allowed to do.
A model's capabilities matter less than the job the product hands it. Here is the job we hand ours, the five things it is kept away from, and the risk that survives all five.
It does not compute your numbers
Records, volume, macros, goal pace, arrival ranges and food-quality scores are deterministic functions over your logs. The model is handed those figures. It never produces them, so it cannot quietly get your PR wrong.
It does not save anything unseen
Every AI capture returns a draft. You review and correct it, and only then does it become a record. Xoof never writes a log you have not looked at.
It does not diagnose
Coaches are instructed never to give a medical opinion, and a permanent “not medical advice” line sits in the conversation itself, not buried in a policy page.
It does not cross the streams
Each coach reads only its own domain and receives a short brief about the other. Raw meals never reach your training coach; raw sets never reach your nutrition coach.
It does not bluff
Where the evidence is thin, a coach is meant to say what it does not know and ask one focused question, rather than manufacture a confident answer.
It can still be wrong
All of the above reduces the blast radius. It does not make the model correct. Check what it tells you, especially portions, weights and anything that matters medically.
Safety by design
Where we made Xoof less persuasive on purpose.
A body-weight goal is the most sensitive thing this app does. Several obvious, engagement-friendly design choices were rejected because of it.
A range, not a countdown
We show the window your current trend supports rather than one confident arrival date. A single date would hold attention better, and it would also claim a precision that weekly weigh-ins cannot give you.
Behind never means faster
Your pace is capped once, when you set the goal. Missing it cannot raise the target rate — the engine will not let a lagging goal talk you into a steeper deficit.
Ahead of schedule is a flag
Losing faster than the rate you chose is raised as a concern rather than celebrated. The app will not applaud something it would have refused to recommend.
No streaks to protect
There is no streak counter to break, no daily nag, and no punishment for a missed day. Missing data is treated as unknown, never as a zero or a failure.
Food is never a verdict
The food-quality score rates composition — fibre, variety, processing — and shows you which foods moved it. It never scores your calories, your adherence, or you.
Nothing to earn or repay
Coaching never asks you to compensate for what you ate, to earn food with training, or to make up for yesterday.
If tracking is making things worse
Calorie counting and weight tracking are not right for everyone, and for some people they do real harm. Those safeguards reduce risk; they are not treatment, and Xoof cannot detect an eating disorder. You can delete your account and all of your data from inside the app at any time, and you do not owe us a reason.
In the UK, Beat's eating-disorder helpline is free on 0808 801 0677. Your GP is a good first step, NHS 111 handles urgent non-emergency advice, and Samaritans are on 116 123 day or night. In an emergency, call 999.
Who you are dealing with
A real, named company.
Xoof is operated by FOOX LTD, registered in England and Wales under company number 17079734. Our registered office and contact address are on every legal page and in the footer of this site — not hidden behind a form.
Xoof is for adults aged 18 and over, and is subject to the law of England and Wales. Nothing is sold through it today. When Premium arrives it will be priced in pounds sterling, inclusive of VAT where that applies.
Read the actual policies
- Privacy Policy — data, lawful bases, sub-processors, retention, your rights
- Health & Safety Disclaimer — limits, allergens, body-weight goals, where to get help
- Terms of Service — the contract, your consumer rights, complaints
- Cookies & Local Storage — why there is no banner
- Accessibility Statement — including what is not right yet
- Refund & Cancellation — why there is nothing to refund yet
Ready when you are.
Free while Xoof is in testing, with no card taken, and everything above applies from your first log.