Privacy
UK GDPR · Data Protection Act 2018 · PECR Version 1.2 · 19 Oct 2026Who we are
- Controller
- X-X.TECH LTD · provider of EDGE ID
- Contact
- info@x-x.tech
- Company number
- 16814552
- Registered office
- 44 Lorrimore Square, London, England, SE17 3QU
- ICO registration
- ZC226687
- Laws
- UK GDPR · Data Protection Act 2018 · PECR
What we hold and where it goes
Tap a box to filterIdentity
- Holds
- Name · email · phone · username · date of birth, if added
- Why
- Run your EDGE ID · prove facts you choose
- Lawful basis
- Contract · Art 6(1)(b)
- Special category
- No
- Shared with
- Only facts you approve · e.g. “Over 18”, never the date
- Stored
- UK · Civo hosting (earlier declaration; hosting region not verified)
- Kept
- While your account is open
- Your controls
- DownloadCorrectDelete
Device and sign-in
- Holds
- Device name · device key · passkey public key · sign-in times · IP address
- Why
- Device-bound sign-in · stop account takeover
- Lawful basis
- Contract · Art 6(1)(b) · security: legitimate interests · Art 6(1)(f)
- Special category
- No · Face ID and fingerprints stay on your device
- Shared with
- No one, unless the law requires
- Stored
- UK · Civo hosting (earlier declaration; hosting region not verified)
- Kept
- Sign-in until you sign out, up to 400 days · device key 400 days, or until removed
- Your controls
- Remove a deviceDownload
Health records
- Holds
- Results · medicines · appointments · NHS number, if you add them
- Why
- Keep your record · share it when you say
- Lawful basis
- Contract · Art 6(1)(b)
- Special category
- Explicit consent · Art 9(2)(a)
- Shared with
- Clinicians you approve · one request at a time
- Stored
- UK · Civo hosting (earlier declaration; hosting region not verified)
- Kept
- Until you delete it
- Your controls
- DownloadWithdraw consentDelete
Genetic data
- Holds
- Variant reports · test results you add
- Why
- Show what a result means · find trials
- Lawful basis
- Contract · Art 6(1)(b)
- Special category
- Explicit consent · Art 9(2)(a)
- Shared with
- Only people you approve
- Stored
- UK · Civo hosting (earlier declaration; hosting region not verified)
- Kept
- Until you delete it
- Your controls
- DownloadWithdraw consentDelete
Financial records
- Holds
- Balances · statements · payments you connect
- Why
- One view of your money · safer payments
- Lawful basis
- Contract · Art 6(1)(b) · bank access by your consent
- Special category
- No
- Shared with
- Banks you connect · people you approve
- Stored
- UK · Civo hosting (earlier declaration; hosting region not verified)
- Kept
- Until you delete it · bank access ends after 90 days
- Your controls
- DownloadDelete
Messages and files
- Holds
- Mail · chats · documents · calls you start
- Why
- Your work and your messages
- Lawful basis
- Contract · Art 6(1)(b)
- Special category
- Only if you write it
- Shared with
- People you send to
- Stored
- UK · Civo hosting (earlier declaration; hosting region not verified)
- Kept
- Until you delete it
- Your controls
- DownloadDelete
Questions to Jude
- Holds
- Your questions · Jude’s answers · records you ask about
- Why
- Answer you
- Lawful basis
- Contract · Art 6(1)(b)
- Special category
- Only what you ask about · explicit consent
- Shared with
- The service you choose: JudeAI, relaxAI, or a connected OpenAI, Anthropic or Moonshot service. Where no choice is saved, relaxAI is used. If you select Eco, it can choose between connected services.
- Stored
- UK · Civo hosting (earlier declaration; hosting region not verified)
- Kept
- Until you delete it
- Model training
- Only if you opt in
- Your controls
- Choose the modelDelete
Access receipts
- Holds
- Who opened your data · when · why · under what authority
- Why
- Show you every access · prove what happened
- Lawful basis
- Legal obligation · Art 6(1)(c) · legitimate interests · Art 6(1)(f)
- Special category
- No
- Shared with
- Only you · sealed to your own key
- Stored
- UK · Civo hosting (earlier declaration; hosting region not verified) · signed and chained
- Kept
- While your account is open
- Your controls
- See who askedDownload
Your rights
Free of chargeRights clock
ComputedOn your device
No banner needed| Name | Kind | Job | Lasts | Here now |
|---|---|---|---|---|
| __Host-edge_session | Cookie · essential | Keeps you signed in | 400 days, or until you sign out | Hidden from scripts |
| __Host-edge_device | Cookie · essential | Knows your trusted device | 400 days | Hidden from scripts |
| __Host-edge_flow_* | Cookie · essential | Sign-in handshake | 5 minutes | Hidden from scripts |
| edge.look | Browser storage | Your chosen look | Until you clear it | – |
| edge.privacy | Browser storage | Privacy View on or off | Until you clear it | – |
| edge.pane | Browser storage | Sidebar shown or hidden | Until you clear it | – |
| edge.* others | Browser storage | Other screen settings | Until you clear it | – |
Who helps us
2 earlier declarations| Processor | Does | Where | When |
|---|---|---|---|
| Civo | Hosting · storage · compute | UK (earlier declaration; region not verified) | Always |
| relaxAI | Jude’s answers · default model | UK (earlier declaration; region not verified) | When you ask Jude |
- Out of the UK
- Model destinations depend on your selection and connected services; see the location evidence below.
- Sold or rented
- Never
- Advertising
- None
- Contracts
- UK GDPR Art 28 terms with each processor · earlier declaration; current supporting records remain to be reconciled
Optional model connections
Your organisation can connect OpenAI, Anthropic or Moonshot as well as relaxAI. These are available routes; the list does not mean that a connection is enabled or that information has been sent.
A model request can contain your question, conversation, attachments and authorised record or tool results. If you choose Eco, it can select or switch between available connected providers, including after a provider request fails. Your organisation’s connections determine the available services.
Location evidence
The UK entries above are the earlier hosting and relaxAI declarations. The current source reconciliation has not established authoritative hosting-region, processor-region, contract or transfer records. These entries do not establish that every model request stays in the UK. The optional providers’ processing locations and terms are not established by this page.
Model route information updated on 19 October 2026.
Also good to know
- Children
- Accounts are for people aged 18 or over
- Online safety
- Online Safety Act assessments | JudeAI chat DPIA
- Automated decisions
- None with legal effect · a person decides
- Security
- Device-bound sign-in · AES-256-GCM sealed vault · signed receipts
- Breaches
- ICO within 72 hours · you without delay if high risk
- Changes
- Dated on this page · big changes told first
- Complaints
- Us: info@x-x.tech · ICO: ico.org.uk · 0303 123 1113
- Version
- 1.2 · 19 October 2026 · model route disclosure and evidence qualifications updated
- Revision history
- 1.0 · 12 October 2026 · original notice; 1.1 · 14 October 2026 · company details updated