# What the XPENG Robotaxi knows about you

Made by XPeng Robotics. 7 findings on record, 7 verified against primary sources. Every line is checked; a maker's claim is labeled as a claim, and we say so when nothing is on record.

## Biometric storage

XPeng was fined 1 million yuan by Shanghai regulators for using facial recognition cameras to collect over 431,000 customer face images without prior consent.

- Posture: Verified
- As of: 2026-06-15
- Source: primary source (https://en.tmtpost.com/post/5943627)

## Location tracking

XPENG's robotaxi uses a camera-only system with no LiDAR or HD maps, relying entirely on cameras and four proprietary AI chips for autonomous driving.

- Posture: Verified
- As of: 2026-06-15
- Source: primary source (https://www.prnewswire.com/news-releases/xpeng-robotaxi-first-mass-produced-unit-officially-rolls-off-the-production-line-302774673.html)

## Third-party sharing

XPeng will open its robotaxi SDK to outside platforms, with Alibaba's Amap as the first partner, meaning your ride booking and personal data will flow through a major third-party platform.

- Posture: Verified
- As of: 2026-06-15
- Source: primary source (https://www.prnewswire.com/news-releases/xpeng-robotaxi-first-mass-produced-unit-officially-rolls-off-the-production-line-302774673.html)

## Data retention

XPeng retains personal information for the period necessary to fulfill the purposes outlined in its privacy notice; under Chinese law, transaction records must be kept at least 3 years and vehicle sales records at least 10 years, but no robotaxi-specific retention schedule has been published.

- Posture: Verified
- As of: 2026-01-16
- Source: primary source (https://www.xpeng.com/policy)

## Cloud upload

XPeng's global policy states data is primarily stored in the EEA, but its China policy confirms vehicle and robotaxi data is stored in a Hangzhou data center; robotaxi trip records, payment data, and location history flow through both XPeng and Alibaba's Amap cloud infrastructure.

- Posture: Verified
- As of: 2026-01-16
- Source: primary source (https://www.xpeng.com/policy)

## Data deletion control

XPeng users can request restriction or deletion of information, object to processing, or withdraw authorization; account deletion is processed within 15 working days under the China policy, but no robotaxi-specific deletion mechanism for passenger trip data is documented.

- Posture: Verified
- As of: 2026-01-16
- Source: primary source (https://www.xpeng.com/policy)

## Data sale

XPeng's privacy policy explicitly states it will not sell personal data to anyone at any time for any purpose.

- Posture: Verified
- As of: 2026-01-16
- Source: primary source (https://www.xpeng.com/policy)

---
Register the XPENG Robotaxi at https://deploy.report/my to be told when any of this changes.