1. Who we are
StartX (“StartX”, “we”, “us”), a trademark licensed to LiquidChain Finance LLC, operates the StartX mobile app for Android and iOS and the website at thestartx.com (together, the “Service”). StartX lets founders submit startup ideas, browse and filter accepted ideas, get guidance from Xuri, our AI advisor, and create Investor, Broker and Advisor profiles.
This policy explains what personal information we collect, how we use and share it, and the choices you have. We are the controller of the personal information described here. If you have a question, write to [email protected].
2. Information we collect
Account information
- Email and password sign-up: your name, email address and password. Passwords are handled by Firebase Authentication and are never stored by us in readable form.
- Sign in with Google or Apple: your name, email address (or Apple’s private relay address if you choose to hide it) and an account identifier from Google or Apple. We do not receive your Google or Apple password.
- Two-factor authentication (2FA): to set up an authenticator app we send your email address to our 2FA service, which creates a secret key and QR code. The one-time codes you enter are checked against that key.
- Email verification and password reset: your email address is used to send these messages.
Profile information
Information you choose to add in Profile, such as your first name and surname, profile photo, phone number, country, gender and an “About you” description.
Ideas you submit
When you submit an idea we collect what you enter in the form, which may include: idea and company name, description, problem and solution, target audience, market strategy, key strengths, management team, stage, sector and region, funding requirement, amount sought, equity offered, current ownership and loan details, partner code, contact name, email address, phone number, country and city, and links (pitch, financial plan, example, YouTube video). You can also upload a logo, a cover image, a pitch deck (PDF) and other files.
Investor, Broker and Advisor profiles
If you fill in one of these forms we collect the details it asks for, such as your email address, phone number, country or region, investor type, preferred industries and investment stages, company, specialisation, advisory category, years of experience, LinkedIn profile and an “About” description, plus any file you attach.
Conversations with Xuri
The messages you send to Xuri, and any files you attach, are sent to our AI service so it can generate a reply. Do not share information in Xuri that you do not want processed this way.
Device, usage and diagnostic information
- App analytics (Google Analytics for Firebase): the screens you view and actions you take in the app (for example signing in, opening or filtering ideas, submitting an idea or profile form, using Xuri), together with an app-instance identifier, your StartX user ID and account type, device model, operating system, app version, language and approximate location derived from your IP address. Analytics is collected only in the published app.
- Crash reports (Firebase Crashlytics): when the app crashes or hits an error we receive a crash report with device and app details, a stack trace, recent in-app steps and your StartX user ID, so we can find and fix the problem.
- Push notifications (Firebase Cloud Messaging): a device token that lets us send you notifications, linked to your account.
- Advertising: your consent choice for ads (where a consent message applies), and the data described in Advertising.
Payments
The app does not collect or process payment card details.
3. Data kept on your device
- Fingerprint / Face ID: if you turn on biometric sign-in, your phone’s operating system checks your fingerprint or face. StartX never receives or stores your biometric data. For email accounts, your sign-in credential is kept in your phone’s secure storage (iOS Keychain / Android Keystore) so it can be used after a successful biometric check. If you signed in with Google or Apple, turning this on doesn’t store a password; after the fingerprint or face check, the app signs you in again through Google or Apple.
- Xuri chat history: stored encrypted in your phone’s secure storage so the conversation is still there when you reopen the chat. It is erased when you log out or delete your account.
- Idea drafts: if you choose “Save draft” on the idea form, the text you typed is stored encrypted on your phone (attached files are not kept). It is erased when you submit the idea, log out or delete your account.
- App preferences and cache: settings and recently loaded ideas and profile details are cached on your phone so the app opens quickly.
4. How we use information
- To create and secure your account, including sign-in, email verification, 2FA and biometric sign-in.
- To review the ideas you submit and, when accepted, show them to other StartX users so investors, brokers and advisors can find them.
- To show and manage your Profile and your Investor, Broker or Advisor profile.
- To provide Xuri’s AI guidance.
- To send you service messages and push notifications.
- To understand how the app is used, fix crashes and improve features.
- To show ads that help keep the Service free.
- To keep the Service safe: preventing fraud and abuse, and automatically signing you out after 7 days without use if Fingerprint / Face ID is off.
- To comply with the law and enforce our Terms of Service.
5. Legal bases (EEA and UK users)
Where the GDPR or UK GDPR applies, we rely on:
- Contract: to provide your account, idea submissions, profiles and Xuri.
- Legitimate interests: to secure the Service, prevent abuse, measure usage and fix crashes. We weigh these interests against your rights.
- Consent: for push notifications, biometric sign-in, access to your camera or photos, and personalised advertising where consent is required. You can withdraw consent at any time.
- Legal obligation: where we must keep or disclose information by law.
7. Advertising
The idea feed shows banner ads from Google AdMob. AdMob may collect your device’s advertising identifier, IP address and information about the ads you see and tap, and may use it to show ads based on your interests where the law allows.
- If you are in the European Economic Area, the United Kingdom or Switzerland, the app asks for your consent through Google’s consent message before any ads are requested. You can change your choice at any time in the app under Profile → Privacy choices.
- iPhone and iPad: StartX does not track you across other companies’ apps and websites as Apple defines tracking, and does not ask for permission to do so. Data used to show ads is not linked to your identity.
- Android: you can reset or delete your advertising ID in Settings → Privacy → Ads (wording varies by device).
- iOS: StartX does not ask for permission to track you across other companies’ apps and websites, so AdMob does not receive your device’s advertising identifier (IDFA) from StartX.
- You can learn more and adjust Google ad personalisation at adssettings.google.com.
8. App permissions
The app asks for these permissions only when you use the related feature. You can turn them off in your phone’s settings at any time.
- Photos and files: to choose a profile photo, idea logo or cover image, pitch deck or other files to upload.
- Camera: to take a profile photo.
- Fingerprint / Face ID: to sign in quickly; checked by your phone only.
- Notifications: to receive push notifications.
The app does not access your contacts, microphone or precise location.
9. How long we keep information
- Account, profile, ideas and profile forms: for as long as your account exists. When you delete your account they are deleted, as described in Deleting your account.
- Data on your device (Xuri history, drafts, cache): until you log out or delete your account, or uninstall the app.
- Analytics data: kept by Google Analytics for the retention period set in our Analytics settings (between 2 and 14 months for user-level data).
- Crash reports: kept by Firebase Crashlytics for 90 days.
- We may keep limited information longer when the law requires it or to resolve disputes and enforce our terms.
10. Security
We use safeguards that suit the sensitivity of the information, including:
- Encrypted connections (HTTPS/TLS) between the app and our services.
- Optional two-factor authentication with an authenticator app.
- Optional Fingerprint / Face ID app lock, with credentials kept in the phone’s secure storage.
- Encrypted on-device storage for Xuri history and idea drafts, erased at log-out.
- Automatic sign-out after 7 days without use when biometric sign-in is off.
- Access controls that limit who can read your data.
No system is completely secure. If you think your account has been compromised, change your password and contact us straight away.
11. Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy of it;
- correct inaccurate information (most of it you can edit yourself in Profile);
- delete your information;
- object to or restrict certain processing, including processing based on legitimate interests;
- receive your information in a portable format;
- withdraw consent at any time, without affecting earlier processing;
- complain to your local data protection authority.
California residents: under the CCPA/CPRA you have the right to know, delete and correct personal information, and to opt out of the “sale” or “sharing” of personal information for cross-context behavioural advertising. We do not sell personal information. To opt out of ad personalisation, use the settings described in Advertising or contact us. We will not discriminate against you for exercising your rights.
To make a request, email [email protected] from the address on your account. We may need to verify your identity and will respond within the time the law requires.
Other choices
- Turn push notifications on or off in Profile (Push Notification) or in your phone’s settings.
- Turn Fingerprint / Face ID sign-in on or off in Profile.
- In the EEA, UK or Switzerland, change your advertising consent in Profile → Privacy choices.
- Log out at any time to erase the Xuri history and drafts stored on your phone.
12. Deleting your account
You can delete your account in the app: open Profile → Delete Account and confirm. For security we ask you to confirm your identity first.
Deleting your account permanently removes your sign-in, your profile and profile photo, the ideas you submitted with their uploaded files, your Investor, Broker and Advisor profiles and their files, your notification tokens and notifications, and the chat history and drafts on your phone. Copies may remain in backups for a limited time before they are overwritten. Analytics and crash data are retained as described in How long we keep information.
If you can’t access the app, email [email protected] from your account’s email address and ask us to delete your account.
13. International transfers
Our service providers may process information in the United States and other countries whose data protection laws may differ from yours. Where required, we rely on safeguards such as the European Commission’s Standard Contractual Clauses to protect information transferred out of the EEA, UK or Switzerland.
14. Children
StartX is for adults involved in startups and investment. It is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
15. Changes to this policy
We may update this policy from time to time. When we do, we will change the “Last updated” date above, and if the changes are significant we will let you know in the app or by email before they take effect.
16. Contact us
If you have questions about this policy or your information, contact us at [email protected].