Privacy Policy

1. Information We Collect

a. Information You Provide Directly

When you create an account and use XYTEEE, we collect the following personal information:

• Account Information: Email address, username, display name, and password (stored as an encrypted hash).
• Profile Information: Biography, profile photo, cover photo, date of birth, gender, location, website URL, and social media links.
• Communication Content: Text messages, photos, videos, voice messages, files, and other media you send through direct messaging and group conversations.
• User-Generated Content: Posts, stories, comments, reactions, and any content you create or share on the platform.
• Verification Documents: If you apply for account verification, you may submit identity documents (e.g., government-issued ID). These are reviewed by our team and deleted after verification is complete or denied.

b. Information Collected Automatically

• Device Information: Device name, platform (Android/iOS), and push notification token.
• Log Data: IP address, browser/user-agent string, login timestamps, and session information.
• Usage Data: Features used, interaction patterns, and app performance data.
• Online Status: Whether you are currently online and your last seen timestamp, visible to other users.

c. Information from Third Parties

• Google Sign-In: If you register via Google, we receive your name, email address, and profile photo from your Google account.
• Facebook Sign-In: If you register via Facebook, we receive your name, email address, and profile photo from your Facebook account.
• Telegram Authentication: If you authenticate via Telegram, we receive your phone number and Telegram user ID for verification purposes.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the XYTEEE platform and its features.
• To create and manage your account, including authentication and session management.
• To enable messaging, voice calls, and video calls between users.
• To display your profile, posts, and content to other users as per your privacy settings.
• To send you push notifications, email notifications, and in-app alerts (which you can disable in settings).
• To detect, prevent, and address fraud, abuse, and technical issues.
• To enforce our Terms of Service and comply with legal obligations.
• To improve and develop new features for the platform.

3. How We Share Your Information

We do NOT sell your personal information. We may share your information only in the following circumstances:

• With Other Users: Your profile information (name, username, avatar, bio) and content you choose to share publicly are visible to other users based on your privacy settings.
• With Service Providers: We share data with third-party services that help us operate XYTEEE (see Section 4 below).
• For Legal Reasons: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred with notice to you.
• With Your Consent: We may share information for any other purpose with your explicit consent.

4. Third-Party Services

XYTEEE integrates with the following third-party services. Each service has its own privacy policy:

5. Data Storage & Security

• All data is transmitted using TLS/SSL encryption.
• Passwords are hashed using bcrypt and are never stored in plaintext.
• Authentication tokens (JWT) have short expiry periods (15 minutes for access tokens).
• Media files are stored in encrypted cloud storage (Cloudflare R2).
• We implement rate limiting and abuse prevention measures.
• Data is stored in secure cloud infrastructure with regular backups.

6. Data Retention

• Account Data: Retained as long as your account is active.
• Stories: Automatically deleted after 24 hours.
• Messages: Retained until you delete them or delete your account.
• Verification Documents: Deleted after the verification process is complete (approved or denied).
• Session Data: Login sessions and device tokens are retained until you log out or revoke access.
• After Account Deletion: All personal data is permanently removed within 30 days of account deletion request.

7. Your Rights

You have the following rights regarding your personal data:

• Access: View all your data through the app settings.
• Correction: Update your profile information at any time through the app settings.
• Deletion: Delete your account and all associated data permanently through Settings > Account > Delete Account. You can also bulk-delete your posts, stories, messages, and media individually.
• Data Portability: Request a copy of your data by contacting us at support@xyteee.com.
• Consent Withdrawal: You can disable push notifications, location access, and other permissions through your device settings.

8. Children's Privacy

XYTEEE is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete it. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@xyteee.com.

9. Account Deletion

You can delete your account at any time from the app. To delete your account:

1. Open XYTEEE and go to Settings.
2. Navigate to Account > Delete Account.
3. Enter your password and the verification code sent to your email.
4. Confirm deletion.

Once deleted, all your data — including profile, posts, stories, messages, media, and account information — will be permanently removed within 30 days. This action cannot be undone.

10. Location Data

XYTEEE may request access to your device's location to help you set a location on your profile. Location data is used only when you explicitly choose to add a location and is stored as a text string on your profile. We do not continuously track your location. You can revoke location access at any time through your device settings.

11. Push Notifications

XYTEEE sends push notifications for new messages, calls, comments, reactions, and other activity. You can manage your notification preferences in the app settings or disable notifications entirely through your device settings.

12. COPPA Compliance

XYTEEE complies with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 years of age. If you are under 13, please do not use XYTEEE or provide any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of XYTEEE after any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: