Privacy Policy
Last updated: 13 July 2026
1. Information We Collect
When you create an account we collect your email address, a password (stored as a cryptographic hash, never in plain text), and any profile information you choose to provide — name, username, bio, profile photo. As you use the app we collect content you create (posts, comments, chat messages, voice messages, photos, videos, reactions), the people you follow or block, your in-app preferences (such as dark mode and paused notifications), and basic technical data such as device type and language for compatibility. If you tag a post with a location, the place name and coordinates are stored with the post. We do not access your contacts, calendar, or any other data outside what you explicitly share.
2. How We Use Your Information
We use your information to operate the app: deliver posts and messages to the right people, send password-reset codes by email, show you a personalized feed, and let other users interact with content you choose to make public. We may also review reported content, including private messages that are reported to us, to enforce our rules and keep users safe (content moderation). Your email is used only for security communications such as verification and password reset. We do not show advertising in the app and we do not use your content to train AI models or to profile you for advertising.
3. Information Sharing
We never sell your personal information. We share data only with infrastructure providers strictly required to operate the service — for example cloud hosting and the email provider used for transactional emails — under contractual confidentiality. We may disclose information if required by a valid legal order or to protect the safety of users. Posts, comments, and other content you make public are visible to other xhour users; that is the nature of the social product.
4. Data Security
Passwords are hashed using industry-standard algorithms; password-reset codes are also hashed and expire after 15 minutes. Authentication tokens are stored securely on the device. All network traffic is transmitted over HTTPS. Messages are not end-to-end encrypted: chat messages, voice messages, and other content are encrypted in transit and stored on our servers, which means xhour is technically able to access them. We access private message content only when necessary to operate the service, to investigate reports and enforce our rules, to keep users safe, or to comply with a valid legal request — never to read your conversations for any other reason. We use rate limiting on authentication endpoints to mitigate brute-force attacks. No system is perfectly secure — we encourage you to use a strong, unique password.
5. Your Rights
You can view, edit, or delete your profile and content at any time inside the app. To permanently delete your account, go to Settings → Account → Delete Account; this removes your account and associated content from our active systems. You can request a copy of the data we hold about you by emailing privacy@xhour.app. If you are an EU resident you have additional rights under the GDPR, including the right to object, restrict processing, or lodge a complaint with your local data protection authority.
6. Children's Privacy
xhour is not intended for users under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with information, please contact us at privacy@xhour.app and we will delete the account.
7. Data Retention
We retain account information for as long as your account is active. When you delete your account, content is removed from our active systems within 30 days; minimal records may be kept longer where required by law (for example to comply with legal or tax obligations).
8. Changes to This Policy
We may update this policy from time to time. When we make material changes we will notify you in the app or by email before the changes take effect. The 'Last updated' date at the top of this page always reflects the most recent version.
9. Contact
If you have questions about this policy or about how we handle your data, contact us at privacy@xhour.app.