Archle is operated by XSHLabs. This notice explains how we handle information when you use archle.xshlabs.co.za. For privacy requests and support, contact admin@xshlabs.co.za.
Information we use
- Account: your authentication identifier, email address, verification status and the profile details supplied by Google or by you. Firebase Authentication handles passwords; Archle does not store your password in its application database.
- Profile and practice: username, avatar, country, time zone, preferences, written answers, table sketches, Quick choices, hints, feedback, scores, achievements, streaks and progress. Visible, recently active editing contributes practice-time and time-of-day summaries.
- Technical and support information: request timestamps, browser/network information processed by our hosting and authentication services, security events, grade reports and correspondence you choose to send us.
Account information is needed for signed-in practice and recovery. You can read public pages without creating an account. Optional sketches, hints and support messages are your choice. Do not submit passwords, customer records, employer secrets, health information or other sensitive personal information in an answer.
Why we process it
We use this information to provide and secure your account, save and evaluate practice, show your progress, operate leaderboards, answer support requests and investigate abuse. We rely on the basis applicable to each purpose, including providing the service you request, legitimate interests in security and service operation, legal obligations, or consent where required. Where processing relies on consent, you may withdraw it by contacting us; this does not undo processing already lawfully performed.
What other people can see
Your chosen username, avatar, country, level, streaks and earned achievements can appear on public profiles and leaderboards. Public profiles also show selected progress totals. Use a username that you are comfortable making public. Your email, individual written answers and Quick choices are not published by these features. Community insights use aggregated missed rubric points rather than publishing individual answers. A share card or copied result becomes visible wherever you choose to share it.
AI grading and service providers
Full answers and table sketches are sent through OpenRouter to the configured model provider, currently Xiaomi MiMo, with the question and rubric. We do not attach your email or account identifier to grading requests, but anything you include in the answer is part of the submission. Quick answers are scored by Archle without AI grading.
OpenRouter and model providers have their own processing and retention practices; we do not promise that they immediately delete a submitted prompt or never use it for improvement. Review OpenRouter’s privacy notice before submitting sensitive material. AI feedback can be wrong and is educational feedback, not a hiring or employment decision.
Google/Firebase provides authentication and database services. Our XSHhost infrastructure provides application hosting. Email providers process service and operational messages. If error monitoring is enabled, it receives limited error types, code locations and page patterns; our reporting code excludes answer text, email addresses, account IDs and authentication headers. We do not sell your personal information or run advertising trackers in Archle.
Location and international processing
Archle’s Firestore database is configured in Johannesburg. This does not mean every service processes data only in South Africa: hosting, authentication, email and AI providers may process information elsewhere. International processing must use an applicable lawful basis and safeguards. Contact us with questions about the providers used for your account.
Device storage and cookies
Authentication, preferences and recovery use browser storage. Unsynced text/table drafts are scoped to your account and tab. The last Full challenge and completed result may be stored on that device for seven days for offline access. Signing out removes those offline copies. Clearing browser storage removes local recovery data; another offline device cannot learn about a remote account deletion until it reconnects. Static page shells and assets are cached separately and do not contain saved authenticated API responses. Necessary provider storage may be used for sign-in and security; Archle does not initialise Google Analytics merely because a Firebase measurement ID exists.
Retention and deletion
We keep account and practice records while needed to provide your account, resolve support/security matters or meet legal obligations. You can request deletion in Settings, following recent authentication. The deletion process removes the Auth identity and owned profile, attempts, reports, achievements, leaderboard entries and grading records. Interrupted cleanup can be retried. Local drafts and offline copies are cleared on the device performing the deletion.
Reusable grading feedback expires after seven days. Operational counting windows expire after two days and alert records after thirty days through scheduled cleanup; these are service-side targets, not promises about third-party backups or email inboxes. Providers and lawful security/legal records may have different retention periods. See Firebase’s privacy information for its service-specific deletion and backup practices. Deleting Archle data does not recall a card you shared or automatically erase a model provider’s independent records.
Your choices and rights
Subject to applicable law, you can ask what personal information we hold, request access or correction, request deletion, object to relevant processing, or withdraw consent where consent is the basis. Contact admin@xshlabs.co.za; we may need to verify your identity without requesting your password. Some requests may be limited by lawful retention requirements. You may also complain to South Africa’s Information Regulator.
Security, age and changes
We use access controls, encrypted connections and account-scoped handling, but no online service is risk-free. Contact us if you suspect a compromise. Archle is intended for adults aged 18 and over; please do not create an account or submit personal information if you are under 18. We will update this notice as the service changes and provide appropriate notice of material changes. See also our terms of use.