Privacy Policy

Last updated: August 27, 2026. This Privacy Policy explains exactly what data RootX collects, how it is used, and how it is protected across the Android app, web platform, and cloud services.

Introduction

RootX ("we," "our," or "the App"), developed by AurixHQ (website: rootx.aurixofficial.in), is committed to transparency and user privacy. This Privacy Policy describes all data that RootX collects across its Android application, web platform, cloud account system, AI assistant, and payment system — and explains how we process, store, and protect it.

1. Account Creation & Google OAuth 2.0 Sign-In

RootX uses Google OAuth 2.0 (powered by Firebase Authentication) to create and manage developer accounts. When you sign in with Google, we receive the following data from your Google account:

Display Name — Used to personalize your developer profile.
Email Address — Used as your unique account identifier and for billing receipts.
Profile Photo URL — Displayed in your in-app account profile header.
Google UID (unique ID) — Used internally to link your cloud workspace, subscription, and license records.

Important: RootX does NOT request access to your Google Drive files, Gmail, Google Contacts, or any other Google service beyond basic profile identification, unless you explicitly enable optional Google Drive cloud backup.

2. Account Profile & Subscription Data

When you sign in to RootX, basic profile and subscription information is stored securely in our database to manage your account access:

Full Name & Email Address: Used for account identification and authentication.
Subscription Plan Details: Your active plan status (Free Tier, Monthly Pro, or Annual Pro) to unlock Pro features.

This basic account data is kept secure and is never sold or shared with any unauthorized third parties.

3. AI Assistant & OpenRouter API Integration

RootX includes an AI Coding Assistant feature powered by the OpenRouter API.

BYOK (Bring Your Own Key): Users must provide their own OpenRouter API key in the RootX app settings to enable AI features.
Local Key Storage: Your OpenRouter API key is stored securely on your local device only. RootX and AurixHQ servers never see, collect, or store your API keys.
Direct API Requests: All AI code queries and prompts are transmitted directly from your device to OpenRouter's official API endpoints.
No Chat History Retention: RootX does not retain or store your AI conversation history on external cloud servers.

4. Payment Processing & Third-Party Data (Cashfree Payments)

When you purchase a RootX Pro subscription (₹120/month or ₹999/year), all payment transactions are securely handled by Cashfree Payments (Cashfree Payments India Private Limited), a PCI-DSS Level 1 certified payment gateway.

Information Processed by Cashfree: Cashfree Payments securely handles your email address, phone number, and billing details required for order verification, invoice generation, and tax compliance.
Zero Storage of Financial Credentials: RootX and AurixHQ NEVER collect, view, or store card numbers, CVVs, Net Banking passwords, or UPI PINs. All payment authentication is handled entirely by Cashfree's 256-bit SSL encrypted checkout.

For Cashfree's data handling practices, refer to the Cashfree Payments Privacy Policy.

5. Local Project Data & On-Device Storage

All source code, project files, scripts, and workspace data created in RootX are stored locally on your Android device.

App Internal Storage Path:/data/user/0/aurix.root.x/files/

Android Sandbox Security: Android OS ensures your workspace data is isolated in a secure container. Other apps cannot access it without explicit export.
Uninstall Warning: If you uninstall RootX, all local project files are permanently deleted by Android. Always back up your work to Git repository or cloud storage before uninstalling.
No Code Telemetry: We do not upload, scan, or transmit your project source code to any RootX server.

6. Browser Cookies & Local Storage (Website & App)

RootX uses local storage (localStorage) for the following functional purposes:

OpenRouter API Key: Saved locally on your device to enable AI assistant features.
Firebase Authentication Tokens: Firebase Auth uses secure browser/device storage to maintain your login session between launches.

We do not use advertising cookies, third-party tracking pixels, or analytics cookies.

7. External Network Connectivity

RootX connects to external servers only for these user-initiated purposes:

Linux Engine Downloads: Fetching Alpine Linux, Ubuntu 24.04 LTS, or Kali Linux ARM64 rootfs images from verified sources.
Language Toolchain Installation: Downloading compilers and runtimes (Python, Node.js, Kotlin, C++, Rust, Go, PHP, etc.) via apt, pkg, or npm.
Git Operations: Pushing/pulling code to remote repositories (GitHub, GitLab, Bitbucket) that you explicitly configure.
OpenRouter AI: Transmitting your code queries to OpenRouter API using your user-provided API key.
Firebase & Account Sync: Syncing your subscription status, Pro license, and profile to Firebase Firestore.
Pro Deployment (Annual Plan): One-click deployment to Netlify, Vercel, or Firebase Hosting (Annual Pro subscribers only).

8. Android Permissions

RootX requests only the minimal Android permissions required to function:

INTERNET: Required for downloading Linux toolchains, Git operations, AI assistant queries, Firebase auth, and payment verification.
READ/WRITE_EXTERNAL_STORAGE: Only requested if you choose to open or export project files to external storage (e.g., SD card). Not used otherwise.
No Microphone, Camera, Contacts, or Location access is ever requested by RootX.

9. Data Retention & Account Deletion

Subscription Records: Your billing history and subscription records are retained for up to 3 years as required by Indian tax laws (GST compliance).
Account Deletion: To permanently delete your RootX account and associated Firestore profile data, email hello@aurixofficial.in with the subject Delete My Account. We will process it within 30 days.

10. Changes to This Policy

We may update this Privacy Policy when new features are added (e.g., new integrations or payment methods). Significant changes will be communicated via your registered email. The "Last Updated" date at the top reflects the most recent revision.

11. Contact Us

For privacy concerns, data access requests, account deletion, or payment refund queries, contact:

hello@aurixofficial.in