Privacy Policy

Introduction

Xtools ("we", "us", or "our") is committed to safeguarding your privacy and data security. This Privacy Policy explains how we collect, use, store, share, and protect information when you use the app, and how you can manage that information. Where separate consent is required, we provide an additional notice and request your permission before the relevant processing begins.

Information We Collect

We follow the principle of data minimization and collect only information needed to provide features you actively use, maintain service security, and manage subscription entitlements:

• Content you provide: Photos, videos, audio, documents, and text that you capture or select from Photos, Files, the clipboard, or other entry points, together with selected styles, platforms, check scopes, and other processing parameters.
• Results and task records: AI-generated content, check reports, rewritten drafts, exported results, and source content, result content, resource paths, counts, file sizes, session identifiers, and timestamps needed for history, result recovery, or cloud processing.
• Device, usage, and diagnostic data: A device or installation identifier generated by the app and stored in the keychain, device name and model, operating system and app version, language and region settings, time zone, installation source, feature identifiers, entry source, operation result, network status, request or session identifiers, error information, and model-service responses. Network requests may also expose your IP address to the receiving server.
• Subscription and quota data: Subscription product ID, transaction ID, original transaction ID, signed transaction information, transaction environment, subscription, expiration and renewal status, and records of AI credit checks, usage, and remaining balance.
• System permissions: Camera, photo library, media library, or file access is requested only when needed for a related feature. You can change these permissions at any time in system settings.

We currently do not require account registration or ask you to enter account details such as your name or email address. However, your device name, submitted content, or an email you send us may itself contain information that identifies you. When you subscribe through the App Store, Apple processes your payment card details and Apple Account password; we do not receive that information.

User Content and Artificial Intelligence Services

When you actively use an online AI feature, such as portrait generation, image enhancement, copywriting checks or rewrites, or document organization, the app sends the user content, prompts, and parameters needed for that task to our servers, cloud storage, and third-party AI providers. These providers may include Alibaba Cloud services, such as Qwen Image and Object Storage Service, and other model providers configured for the app.

• Uploads occur only after you select content and start the relevant feature. Processing that can reasonably be completed on the device is performed locally where practical.
• The data is used only to perform the analysis, generation, recognition, export, result recovery, troubleshooting, and security operations you request. We do not sell your personal information or use your content to build targeted advertising profiles.
• Your uploads may contain personal information or third-party content. Submit only content you have the right to process, and avoid including sensitive information unrelated to the feature.
• Third-party providers process data under their applicable terms, privacy rules, and arrangements with us. We require service providers to process data only as needed to deliver the service and to provide protections no less protective than those described in this policy.

How We Use Your Information

Your information is used to:

• Provide core features: Process content you actively submit and return AI generation, recognition, checking, rewriting, conversion, or export results.
• Maintain feature records: Display history or recover results where a feature offers those capabilities, and support saving, copying, and sharing.
• Verify subscriptions and quotas: Confirm subscription status, restore purchases, unlock entitlements, check and consume AI credits, and prevent duplicate charges or abuse.
• Protect and improve the service: Understand feature outcomes, diagnose model and network errors, improve stability, and detect security risks.
• Meet legal obligations: Respond to lawful requests, disputes, refunds, fraud prevention needs, and applicable legal requirements.

Subscriptions and App Store Transactions

Xtools offers auto-renewable subscriptions through Apple's StoreKit and the App Store. Apple handles payment processing, billing, and payment-data protection. We receive and synchronize transaction information needed to validate entitlements, but we do not receive your full payment-card details or Apple Account password.

• Transaction information is used to validate purchases, synchronize subscription status, restore purchases, provide entitlements across devices, and manage AI credit allowances.
• An auto-renewable subscription continues until you cancel it through Apple. You can view, change, or cancel it in your Apple Account subscription settings.
• Subscription payments, refunds, and billing records are also governed by Apple's terms and privacy policy. See the Apple Standard End User License Agreement.

Sharing and Third-Party Services

We do not sell your personal information. We share data only where necessary in the following circumstances:

• AI and cloud providers: To process AI or cloud tasks you initiate, store task resources, and return results.
• Apple: To complete App Store purchases, manage subscriptions, validate transactions, process refunds, and restore entitlements.
• Technical service providers: To provide networking, error diagnostics, security protection, or essential app infrastructure, limited to data needed for those services.
• Legal and safety requirements: Where disclosure is required by law, legal process, or to protect users, the public, or our legitimate rights.

Some providers may process data outside your country or region. We take reasonable measures based on applicable law and service-region configuration to protect data processed across borders.

Storage, Retention, and Deletion

• On-device data: Local files, drafts, caches, and exported results are generally retained until you delete them, clear the relevant storage, or uninstall the app.
• Server records: Feature records, resource paths, subscription and quota records, usage logs, and error logs are retained for as long as needed to provide history, validate entitlements, protect the service, resolve disputes, and meet legal obligations. They are deleted or anonymized when no longer needed.
• Third-party processing data: Retained and deleted by the relevant provider under its applicable terms, our service arrangements, and legal obligations.

Uninstalling the app removes on-device data but may not automatically delete data already sent to our servers or third-party services. You may contact skyzizhu@gmail.com to request access to or deletion of data under our control. Some records may need to be retained for security, fraud prevention, transaction audits, dispute resolution, or legal compliance.

Data Security

We use technical and organizational measures appropriate to the nature of the data and processing risks, including secure transmission, access controls, permission restrictions, log monitoring, and security review where appropriate. No internet transmission or electronic storage method is completely secure, so we cannot guarantee that all risks can be eliminated.

Your Rights

You have the right to:

• Learn about and access personal data we hold about you.
• Request corrections to any inaccurate or incomplete data.
• Request deletion, subject to legal, security, transaction-audit, and dispute-resolution obligations.
• Stop using the relevant AI feature and contact us to withdraw consent. Withdrawal does not affect processing lawfully completed before withdrawal.
• Manage camera, photo, and other permissions in system settings, and manage subscriptions through your Apple Account.

To exercise these rights, contact us at skyzizhu@gmail.com. We may need to verify information necessary to match your request with the relevant records.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any significant changes by updating the "Last updated" date and, if necessary, providing additional notice through the app.

Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us at skyzizhu@gmail.com.