Privacy Policy
Last updated: September 18, 2026 · Effective: September 18, 2026
The short version: your calibration answers stay on your own device. We never sell your information. We only ask for an email address if you choose to give one, and you can have everything we hold about you deleted by emailing info@neurl-os.com.
This policy explains what NEURL-OS collects, why, how long we keep it, and what control you have. It applies to neurl-os.com and to any partner-branded version of the calibration.
1. Who we are
NEURL-OS is operated by Xhibitur LLC, a New York limited liability company. Xhibitur LLC is the party responsible for the information described in this policy.
Xhibitur LLC418 Broadway, STE N
Albany, NY 12207
United States
info@neurl-os.com
2. What we collect
Information that stays on your device
When you complete a weekly calibration, your answers about sleep, workload, movement, stress, attention and fuel are saved in your browser's local storage on the device you used. Your score history and streaks are stored the same way.
This data is not uploaded to us. It does not leave your device unless you take one of the specific actions described below. If you clear your browser data or use a different device, that history is gone and we cannot restore it.
Information you choose to give us
| What | When | Why |
|---|---|---|
| Email address | Only if you tick the opt-in box | To send you calibration reminders and product updates |
| First name or display name | Only if you join a group or team board | To show you on that group's board |
| Your score and dimension scores | Only if you join a group or team board | To calculate that group's averages |
| Push notification token | Only if you allow browser notifications | To send the weekly reminder you asked for |
Information collected automatically
- Analytics. We use Google Analytics 4 to understand how many people visit, which screens they reach, and how many complete a calibration. This uses cookies and similar technology and records a truncated IP address, approximate region, device type and browser.
- Partner attribution. If you arrive through a partner link (for example a gym's QR code), we record which partner sent you, so we can tell that partner how many people their link reached. This is reported to partners only as totals, never as a list of individuals.
- Local storage. Beyond your calibration history, we store small technical values such as your reminder preference and which partner page you arrived from, so the experience stays consistent between visits.
3. How group and team boards protect you
Group boards are built so that no individual's data is exposed:
- Email addresses used to join a board are converted to an irreversible cryptographic hash (SHA-256) before being stored. We store the hash, not the address.
- Individual dimension scores are never returned to any person viewing a board, including a group's organiser or a partner.
- A group average is only calculated and displayed when at least five people have submitted recently. Below that, nothing is shown — because an average drawn from a very small group can identify the people in it.
If you are participating through an employer, gym or other organisation, that organisation receives aggregate figures only. It does not receive your individual score, your answers or your email address from us.
4. How we use information
- To calculate and display your score, forecast and weekly focus
- To send reminders and updates you have asked to receive
- To calculate group and team averages subject to the protections above
- To understand aggregate usage so we can improve the product
- To report aggregate reach to partners who refer people to us
- To meet legal obligations and to protect the service from abuse
5. We do not sell your information
Xhibitur LLC does not sell personal information, and does not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months.
We share information only in these limited circumstances:
- Service providers who run the infrastructure on our behalf — our hosting and storage provider (Netlify), and Google Analytics. They may process information only to provide their service to us.
- Partners receive aggregate figures only, as described in section 3.
- Legal requirements — if required by law, valid legal process, or to protect rights, safety or the integrity of the service.
- A business transfer — if Xhibitur LLC is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction. We will post notice here before your information becomes subject to a different policy.
6. How long we keep things
| Data | Retention |
|---|---|
| Calibration answers and score history | On your device until you clear it. We hold no copy. |
| Email address (if opted in) | Until you unsubscribe or ask us to delete it |
| Group board entries | Removed from active averages after 14 days of inactivity; deleted on request |
| Push notification token | Until you disable notifications or the browser revokes it |
| Analytics data | Retained by Google Analytics for 14 months |
7. Your choices and rights
Wherever you live, you can ask us to:
- Tell you what information we hold about you
- Delete that information
- Correct information that is wrong
- Stop sending you email or push notifications
Email info@neurl-os.com and we will respond within 45 days. We will not treat you differently for exercising any of these rights.
California residents
If you live in California, the California Consumer Privacy Act gives you the rights to know, delete, correct, and to opt out of sale or sharing of personal information. As stated in section 5, we do not sell or share personal information, so there is nothing to opt out of — but you may still exercise your other rights using the contact above. You may also designate an authorised agent to make a request for you.
Turning things off yourself
- Analytics: you can decline analytics on your first visit, use your browser's Do Not Track or blocking settings, or install the Google Analytics opt-out add-on.
- Push notifications: turn them off in your browser's site settings for neurl-os.com.
- Everything on your device: clearing site data for neurl-os.com erases your entire local history.
8. Cookies and similar technology
We use two categories:
- Strictly necessary — local storage that holds your calibration history, your reminder setting and your partner context. The product does not work without these.
- Analytics — Google Analytics cookies, which we load only after you have had the opportunity to decline.
We do not use advertising cookies, and we do not allow third-party advertising networks on this site.
9. Security
The site is served entirely over HTTPS. Email addresses used for group boards are hashed before storage. Administrative functions are protected by a credential verified on the server, never in the browser. No system is perfectly secure, and we cannot guarantee absolute security — but the design deliberately minimises what we hold in the first place, which is the strongest protection available.
10. This is not a medical service
NEURL-OS is a self-assessment and planning tool for working adults. It is not a medical device, not a diagnostic tool, and not a substitute for professional medical, psychological or clinical advice. Your score is not a health assessment and should never be used to diagnose, treat or rule out any condition. If you have concerns about your health, speak to a qualified professional.
11. Age requirement
NEURL-OS is intended for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has given us information, email info@neurl-os.com and we will delete it.
12. Where information is processed
We operate from the United States, and information is processed there. If you use NEURL-OS from outside the United States, you understand that your information will be processed in a country whose data protection laws may differ from those in your own.
13. Changes to this policy
If we change this policy we will update the date at the top of this page. If the change is significant — for example a new category of information, or a new recipient — we will give notice on the site before it takes effect.
14. Contact us
Questions, requests or complaints about privacy:
Xhibitur LLC — NEURL-OS418 Broadway, STE N
Albany, NY 12207
United States
info@neurl-os.com