XPAL PRIVACY POLICY

Effective Date: April 14, 2026

INTRODUCTION

XPAL.com Inc. (“XPAL,” “we,” “us,” or “our”) is committed to protecting your privacy.

This Privacy Policy explains how we collect, use, process, and safeguard information when you use XPAL applications, websites, and related services (collectively, the “Services”).

If you have questions, please contact us at: [email protected]

CONSENT

By accessing or using the Services, you consent to this Privacy Policy and agree to its terms.

SCOPE OF POLICY

This Privacy Policy applies only to information collected through XPAL Services and does not apply to information collected offline or through third-party services not controlled by XPAL.

INFORMATION WE COLLECT

XPAL is designed to minimize data collection.

Information You Provide

XPAL does not require personal information such as:

  • Name
  • Email address
  • Phone number

Users interact through a system-generated identifier (“xID”).

Limited Technical and Operational Information

To operate the Services, XPAL may process limited information, including:

  • Screen name
  • xID (unique identifier)
  • Registration date
  • Last login timestamp
  • Device operating system
  • General country-level location
  • Service usage metadata necessary for functionality and security

This information is used solely to provide, maintain, and improve the Services.

Network and Device Information

Your device may transmit technical information such as IP address during active connections to enable communication with XPAL servers.

XPAL does not retain IP addresses beyond what is necessary for real-time operation, security, and system integrity.

HOW WE USE INFORMATION

XPAL uses limited data strictly for:

  • Operating and maintaining the Services
  • Enabling secure communication between users
  • Preventing abuse, fraud, and unauthorized activity
  • Improving performance, reliability, and user experience

XPAL does not sell personal information.

ENCRYPTION AND COMMUNICATIONS

XPAL is designed to use end-to-end encryption for user communications.

  • Messages are encrypted on the sender’s device
  • Intended to be decrypted only on the recipient’s device
  • Delivered messages are removed from XPAL servers after delivery
  • Undelivered messages may be temporarily stored in encrypted form for up to 36 hours before deletion

However, you acknowledge that:

  • No system can guarantee absolute security
  • Security may be affected by device compromise, user actions, or external threats

DATA RETENTION

XPAL retains only the minimum data necessary to operate the Services.

  • Account-level data is retained while your account is active
  • Messages are not retained after delivery
  • Undelivered messages are automatically deleted within defined time limits

DATA DELETION

Users may delete account data at any time.

Deletion actions may be immediate and irreversible.

XPAL is not responsible for data stored on user devices or outside the Services.

XPAL ACCESS TO USER DATA

XPAL is designed so that message content is not accessible in readable form by XPAL.

However:

  • XPAL may process limited system-level or encrypted data necessary to operate the Services
  • XPAL may take action to enforce Terms of Service or comply with legal obligations

THIRD-PARTY SERVICES

XPAL may rely on third-party services such as app stores or payment processors.

  • XPAL does not receive personal financial information from these providers
  • Third-party services operate under their own privacy policies

XPAL is not responsible for third-party data practices.

COOKIES AND TRACKING

XPAL website may use cookies for basic functionality and user experience.

XPAL does not use cookies to track users across third-party services or for advertising purposes.

ADVERTISING

XPAL does not use third-party advertising networks and does not sell user data.

DATA SECURITY

XPAL implements security measures designed to protect data, including encryption and system safeguards.

However, no system can be guaranteed to be completely secure.

Users are responsible for securing their own devices and access credentials.

YOUR PRIVACY RIGHTS

California (CCPA/CPRA)

California residents have the right to:

  • Request disclosure of data collected
  • Request deletion of data
  • Request information about data use

XPAL does not sell personal information.

GDPR (EU/EEA Users)

Users have rights including:

  • Access to personal data
  • Correction of inaccurate data
  • Deletion of data
  • Restriction of processing
  • Objection to processing
  • Data portability

Requests can be made by contacting [email protected]

CHILDREN’S PRIVACY

xPal is not intended for individuals under the age of 17.

As part of our privacy-focused approach, xPal does not collect personal data from users of any age group. If we become aware that a user under 17 has accessed the service, we will take appropriate steps to restrict access where necessary.

INTERNATIONAL USERS

XPAL operates globally. By using the Services, you acknowledge that information may be processed in the United States or other jurisdictions.

CHANGES TO THIS POLICY

XPAL may update this Privacy Policy from time to time.

Continued use of the Services after updates constitutes acceptance of the revised policy.

CONTACT INFORMATION

XPAL.com Inc.
6475 Camden Ave
San Jose, CA 95120
USA

Email: [email protected]