Transparency

Data Safety

How XYTEEE collects, shares, and protects your data

This page provides a summary of how XYTEEE handles your data. For complete details, please refer to our Privacy Policy.

Data We Collect

Personal Information

Name, email address, username, date of birth, gender, profile photo, cover photo, bio, and location (set by you).

Purpose: Account creation & profile

Contacts & Social Graph

Friend connections, followers, followings, blocked users, and group memberships.

Purpose: Social features & messaging

User-Generated Content

Posts, stories, comments, reactions, messages (text, photos, videos, voice messages, files), and story highlights.

Purpose: Core app functionality

Messages

Direct messages and group messages are stored on our servers and encrypted in transit. We do not read or analyze your private messages.

Purpose: Messaging functionality

Photos & Media

Images, videos, audio files, and documents you upload for posts, stories, profile pictures, and message attachments. Stored in encrypted cloud storage.

Purpose: Content sharing & profile

Device Information

Device name, platform (Android/iOS), and push notification token.

Purpose: Push notifications & service improvement

Usage Data

Login timestamps, session duration, IP address, and feature usage patterns.

Purpose: Security & service improvement

Financial Information

Not collected. XYTEEE is free and does not process payments.

Not applicable

How We Use Your Data

🔧 App Functionality

Provide messaging, calling, social feed, and other core features.

🔒 Security & Fraud Prevention

Detect abuse, unauthorized access, and technical issues.

📧 Communications

Send notifications, alerts, and account-related emails.

📊 Analytics & Improvement

Understand usage patterns to improve the app experience.

⚖️ Legal Compliance

Respond to legal requests and comply with applicable laws.

🎯 Personalization

Customize your feed, recommendations, and experience.

How We Share Your Data

We do NOT sell your personal data.

We may share limited data with service providers who help us operate the app (cloud hosting, push notifications, authentication). These providers are contractually obligated to protect your data and use it only for the purposes we specify.

Cloudflare

Media storage & call connectivity

Data: Files you upload, temporary connection data

Firebase (Google)

Push notifications

Data: Push notification token

Google OAuth

Sign-in

Data: Authentication token (name, email, photo)

Facebook

Sign-in

Data: Authentication token (name, email, photo)

Telegram

Phone verification

Data: Phone number

GIPHY

GIF/Sticker search

Data: Search queries

How We Protect Your Data

Encryption in Transit

All data transmitted between your device and our servers uses TLS/SSL encryption.

Password Hashing

Passwords are hashed with bcrypt and never stored in plaintext.

Encrypted Storage

Media files are stored in encrypted cloud storage (Cloudflare R2).

Secure Tokens

Authentication tokens (JWT) expire after 15 minutes and are refreshed automatically.

Rate Limiting

API endpoints are rate-limited to prevent abuse and brute force attacks.

Access Controls

Only authorized personnel can access user data, and only when necessary.

Data Retention & Deletion

You can delete your account anytime

Go to Settings > Account > Delete Account. Enter your password and email verification code. All data — including profile, posts, stories, messages, and media — is permanently removed within 30 days.

  • Stories: Automatically deleted after 24 hours.
  • Messages: Retained until you delete them or your account.
  • Posts: Retained until you delete them or your account. You can bulk-delete posts from Settings > Storage.
  • Verification Documents: Deleted after the review process (approved or denied).
  • Account Data: Permanently deleted within 30 days of account deletion.

Your Data Rights

Access

View all your data through the app settings and profile.

Correction

Update your profile information at any time.

Deletion

Delete individual content (posts, stories, messages, media) or your entire account.

Portability

Request a copy of your data by emailing support@xyteee.com.

Opt-Out

Disable push notifications, location access, and other permissions in device settings.

Withdraw Consent

Revoke data sharing permissions through your device settings.

Children's Privacy

XYTEEE is not designed for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will delete it immediately. If you believe a child has provided us with data, please contact support@xyteee.com.

Questions about your data?

Contact us at support@xyteee.com

See our Privacy Policy for full details.