Privacy Policy

XdotsY (“we”, “us”, “our”) is a small mobile-app studio based in India. We publish consumer apps on Google Play and the Apple App Store, and we run the website at xdotsy.com.

This Privacy Policy applies to the XdotsY website and to all XdotsY mobile apps, both those available today and those we release in the future. It explains what information we collect, why we collect it, and the choices you have.

By using our website or apps, you acknowledge that you have read this policy. If you do not agree with it, please do not use them.

We try to collect as little as possible. What we collect depends on whether you visit the website or use an app.

Website.

• Basic, aggregated usage statistics (such as pages viewed, country and device type) from Cloudflare Web Analytics, which does not use cookies and does not track individuals.
• Technical information that our hosting provider, Cloudflare, processes to deliver and secure the site, such as your IP address and browser details.
• The details you type into our contact form (see below).

Apps. Some of our apps may collect or access:

• Device and app information, such as device model, operating system version, language, app version and crash logs.
• Advertising identifiers and approximate location (derived from IP address) used by advertising and analytics services.
• Purchase status, so that we know which features you have unlocked. We do not receive your payment card details.
• Content you choose to use inside the app, such as photos, videos or images, if you grant the relevant permission.
• If an app offers sign-in in future, basic account details such as your email address or display name. We will tell you inside that app what is collected.

Information you give us. If you contact us through the website form or by email, we receive your name, email address, your message, and anything else you choose to include.

Permissions. Some apps may ask for permissions such as photos and media, camera, storage or notifications. These are requested only when a feature needs them, and you can change or revoke them at any time in your device settings.

We use information to:

• Provide, operate and maintain our website and apps.
• Respond to your messages and support requests.
• Fix bugs, prevent crashes and improve performance.
• Understand which features are used so we can improve them.
• Show advertising that helps fund free apps.
• Process and restore in-app purchases.
• Protect against fraud, abuse and security threats.
• Meet our legal obligations.

We do not sell your personal information in exchange for money.

Our apps are generally free to use and are supported by ads served by Google AdMob. AdMob and its partners may collect and use identifiers such as your device advertising ID, IP address and information about your interactions with ads, to show ads, measure performance and prevent fraud.

Personalised ads and consent. Where required by law, for example in the European Economic Area, the United Kingdom and Switzerland, we ask for your consent before showing personalised ads, using a Google-certified consent message. Without consent, you may see non-personalised ads, which are based on general context rather than your past behaviour.

How to opt out. You can limit ad personalisation at any time through your device:

• Android: open Settings, then Privacy (or Google), then Ads, and choose to opt out of ads personalisation or delete your advertising ID.
• iOS: open Settings, then Privacy and Security, then Tracking, and turn off tracking for our apps. You can also review Apple Advertising settings.

You can also manage Google ad settings at Google My Ad Center. To learn how Google uses data from apps that use its services, see How Google uses information from sites or apps that use its services and the Google Privacy Policy.

Some apps offer optional in-app purchases, such as removing ads or unlocking templates. Payments are processed entirely by Google Play Billing or Apple In-App Purchase. We never see or store your card, UPI or bank details.

We receive limited information from the store, such as confirmation that a purchase was completed, the product purchased and a transaction identifier, so that we can unlock the purchase and restore it if you reinstall the app.

Your payment information is handled under the privacy policies of Google and Apple.

Some of our apps may use Firebase services, such as Firebase Analytics and Firebase Crashlytics, provided by Google. These help us understand how the app is used and diagnose crashes.

They may collect app-instance identifiers, device and operating system details, crash traces, and general usage events such as screens opened. This data is used in aggregate to improve our apps. It is not used to identify you personally.

See the Firebase privacy information for details.

On our website we use Cloudflare Web Analytics, a privacy-first tool that does not use cookies and does not collect personal identifiers.

Website. The xdotsy.com website does not set tracking or advertising cookies. Our analytics are cookieless. Our contact form uses Cloudflare Turnstile, a bot-protection check that may run a short challenge in your browser to confirm you are human.

Apps. Mobile apps do not use browser cookies in the same way, but third-party SDKs inside them (such as advertising and analytics services) may use device identifiers, local storage or similar technologies to work. The controls described in the advertising section above let you limit this.

We do not sell your personal information. We share information only with service providers that help us run our website and apps, and only as needed:

• Google (AdMob, Firebase, Google Play) for advertising, analytics, crash reporting and purchases. See the Google Privacy Policy.
• Apple (App Store, In-App Purchase) for app distribution and purchases. See the Apple Privacy Policy.
• Cloudflare for website hosting, security, bot protection and analytics. See the Cloudflare Privacy Policy.
• Resend, an email delivery provider, which sends your contact-form message to our inbox. See the Resend Privacy Policy.

Contact-form submissions are emailed to us and are not stored in a database by us. They remain in our email inbox.

We may also disclose information if required by law, court order or government request, or to protect our rights, users or the public. If XdotsY is ever merged with or transferred to another business, your information may be transferred as part of that process, and this policy would continue to apply to it until you are told otherwise.

Retention. We keep information only as long as needed for the purposes in this policy:

• Emails and contact-form messages are kept for as long as needed to respond and for a reasonable period afterwards, then deleted.
• Analytics and crash data held by Google or Cloudflare follow their own retention periods.
• Content you create in our apps generally stays on your device, and you can delete it at any time.

We may keep some information for longer where the law requires it.

Security. We use reasonable technical and organisational measures to protect information, including encrypted connections (HTTPS) and trusted providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please protect your device and any credentials you use.

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• ask us to correct information that is inaccurate;
• ask us to delete your information;
• withdraw consent you have previously given;
• nominate someone to exercise your rights on your behalf; and
• make a complaint to a data protection authority.

India. We handle personal data in line with the Digital Personal Data Protection Act, 2023 and its rules, as they apply to us. Where we rely on your consent, you may withdraw it at any time.

Outside India. If you are in the European Economic Area, United Kingdom or Switzerland, you may have rights under the GDPR, including to object to or restrict processing and to data portability. If you are a California resident, you may have rights under the CCPA, including to know, delete and correct your information, and to opt out of the sale or sharing of personal information. We do not sell personal information, and we will not treat you differently for exercising your rights.

To exercise any right, reach us through our contact form. We may need to verify your identity first, and we aim to respond within a reasonable time. Because we collect very little, we may not hold personal information about you. Advertising and analytics data held by Google or Apple can be managed through their own settings.

Our apps and website are not directed at children under 13, or under the higher age required by local law in your country. We do not knowingly collect personal information from children under that age.

In line with COPPA and Google Play’s Families Policy, we do not knowingly show personalised ads to children. If you are a parent or guardian and believe a child has given us personal information, please reach us through our contact form and we will delete it promptly.

We are based in India, but the third-party services we use (such as Google, Apple, Cloudflare and Resend) may process information on servers located in other countries, including the United States and countries in Europe and Asia.

Those countries may have data protection laws that differ from those in your country. By using our website and apps, you understand that your information may be transferred and processed outside your country of residence, subject to the safeguards our providers maintain.

We may update this policy from time to time, for example when we release a new app or add a new service. When we do, we will change the effective date at the top of this page. For significant changes we will take reasonable steps to let you know, such as a notice on the website or in the app.

Your continued use of our website or apps after an update means you accept the updated policy.

If you have questions about this policy or want to exercise your rights, please contact XdotsY at our contact form.

This policy is a general consumer notice and is not legal advice.