What they may do · DPDP §6(4)
What Grok (xAI) does with your data
xAI uses your Grok chats to train its models, uses cookies for targeted advertising and to analyse traffic on third-party sites, and shares data with its related companies and service providers; it says it does not aim to collect biometric data.
-
Shares your data with partners
Passed to group companies, advertisers or analytics firms you never chose.
What this costs you. Your number and habits travel to companies you have never heard of and never agreed to. This is the step where the spam calls start.
Show me where they say that
Grok (xAI)’s own policy says “To our contracted service providers: To assist in providing the Service to you or performing business operations, we provide your personal information to service providers including providers of hosting, cloud, analytics, content delivery, support and safety monitoring, payment and transaction, and other technology services, for the purposes described above.”
Our summary personal information is provided to service providers including analytics vendors, and separately to xAI's related companies and to third parties the user interacts with.
-
Builds an advertising profile of you
They watch what you view, tap and buy, and use it to decide which ads you see.
What this costs you. Your attention gets priced. What you hesitate over becomes a bid — and a profile built to predict you is a profile built to persuade you.
Show me where they say that
Grok (xAI)’s own policy says “This data obtained from these cookies and similar technologies may be used for several different purposes, including to: Provide useful features to simplify your experience with our Services; Deliver relevant content and targeted advertising; Monitor, evaluate and optimize the use and operation of our Site and applications; and Analyze traffic on our sites and on third-party sites.”
Our summary data collected via cookies and similar technologies is used to deliver relevant content and targeted advertising.
-
Follows you onto other websites and apps
Their tracking carries on after you leave, through pixels and SDKs embedded elsewhere.
What this costs you. You get recognised on sites that have nothing to do with them. Closing the app does not close the file.
Show me where they say that
Grok (xAI)’s own policy says “Analyze traffic on our sites and on third-party sites.”
Our summary cookies and similar technologies are used to analyse traffic on third-party sites, not only on xAI's own properties.
-
Keeps your records long-term
Held on after you stop using the service.
What this costs you. Years after you delete the app, the record is still sitting there — and every year it sits there is another year it can leak.
Show me where they say that
Grok (xAI)’s own policy says “We retain your personal information where we have an ongoing legitimate business need to do so. In certain circumstances, we will retain your information for legal reasons after our contractual relationship has ended.”
Our summary retention is tied to an open-ended 'ongoing legitimate business need' with no stated maximum, and expressly continues after the user's relationship with xAI has ended.
-
Trains AI models on your content
Your photos, messages or activity are used to train machine-learning models.
What this costs you. This one has no undo. Once your content is inside a trained model, no erasure request can lift it back out.
Show me where they say that
Grok (xAI)’s own policy says “To develop and improve our Service and to conduct research: For example to develop new product features, to train our models, to identify usage trends, to operate and expand our business activities, to identify new customers, and for data analysis.”
Our summary model training is a stated use, and User Content (prompts, files, images, audio, voice, video and Grok's outputs) is listed as data used for this purpose.
What the policy does not mention
These are uses Grok (xAI)’s policy is silent on. Silence is not a promise — it means the document does not say, and we do not infer either way.
- Processes your face or other biometrics
Grok is one app. How many are on your phone?
Most people carry twenty to forty. Add yours and see the total in one screen — how many share your data, profile you for ads, or follow you across the web. Then take it back from all of them at once.
Manage my data with Saaph.in →Free to check · no account needed · built in India for the DPDP Act
Questions
What does Grok (xAI) do with my personal data?
According to Grok (xAI)'s own privacy policy, read on 2026-08-14, it discloses 5 of the six uses we track: shares your data with partners, builds an advertising profile of you, follows you onto other websites and apps, keeps your records long-term, trains ai models on your content.
Can I withdraw my consent from Grok (xAI)?
Section 6(4) of India's Digital Personal Data Protection Act 2023 gives you the right to withdraw consent for processing you agreed to. The Act's substantive provisions commence in stages up to May 2027, so a request made now asks for voluntary compliance and puts the date on record. Processing a company carries out under a legal obligation — such as KYC records the RBI requires — cannot be withdrawn.
Does Grok (xAI) track me for advertising?
Yes — Grok (xAI)'s published policy discloses this. The exact sentence it is based on is quoted on this page, with the date we read it and a link to the source.
Every use above is one Grok (xAI) declared in its own published privacy policy, which we
read on 2026-08-14. Quotes are verbatim; the summary beside each one is ours
and is labelled as ours. Nothing here is inferred.
Saaph.in is a DPDP consent and request management platform operated by Ronin Works
Private Limited. It is a communication facilitator, not your legal or authorised
representative. The DPDP Act 2023 commences in stages up to May 2027, so a request
made today asks for voluntary compliance and records the date you asked.
Our privacy policy