1. Data controller
The operator of Xyxy (“we,” “us,” or “our”) is responsible for personal information processed in connection with the App. Contact: xyxycyl@163.com.
This Policy supplements the User Agreement. If you do not agree with this Policy, please do not use Xyxy.
2. Scope
This Policy applies to information we process through Xyxy on your device and through Apple-operated purchase flows linked to the App. It does not cover third-party websites or services that we do not control.
3. Information we may collect
Depending on how you use Xyxy and the permissions you grant, categories may include:
| Category | Examples |
|---|---|
| App usage and diagnostics | Feature interactions, performance logs, crash data, and similar technical data collected on-device or through Apple’s crash reporting as enabled on your device. |
| Device and technical data | Device model, OS version, language, time zone, app version, and identifiers used for app functionality (for example, identifiers Apple makes available under its frameworks). |
| Permissions-based data | If you enable notifications, we process device tokens or equivalent data needed to schedule reminders. If you enable camera, microphone, or photo library access, related content is processed to provide the features you request (for example, capturing or importing media for motion compositions). |
| Purchases | When you buy virtual currency or items through In-App Purchase, Apple processes payment; we may receive transaction identifiers, product identifiers, and purchase status from Apple to validate and deliver entitlements. |
| User-provided content | Text you enter in feedback or settings fields, and creative projects stored locally as part of normal app operation. |
We design Xyxy so that core creative workflows and timeline data can remain on your device. We do not require you to create an account to use basic features unless the App explicitly offers optional account features in a future update—in which case we will update this Policy.
4. Tracking and advertising
Where the App requests App Tracking Transparency (ATT) permission, Apple’s dialog controls whether certain identifiers may be used for cross-app tracking. If you decline, we respect that choice consistent with Apple’s rules. We do not sell personal information as “sale” is defined under the CCPA/CPRA.
5. How we use information
We use information to:
- Provide, maintain, and improve Xyxy (including motion tools, timeline, profile, coins, and settings);
- Validate and fulfill in-app purchases and virtual currency;
- Send optional notifications if you opt in;
- Secure the App, prevent fraud and abuse, and comply with law;
- Analyze aggregated or de-identified usage to improve product quality.
6. Legal bases (where applicable)
If laws such as the GDPR apply, we rely on: (a) performance of a contract (providing the App); (b) legitimate interests that are not overridden by your rights (security, analytics in aggregate form); (c) consent where required (for example, certain permissions or marketing); and (d) legal obligations.
7. Sharing and disclosure
We may share information with:
- Apple, for distribution, In-App Purchase, crash reporting, and platform services as configured on your device;
- Service providers who assist our operations under confidentiality and processing terms;
- Authorities when required by law or to protect rights, safety, and security.
We do not sell your personal information for money. We do not share personal information for cross-context behavioral advertising except as permitted after any required consent under applicable law.
8. International transfers
We may process information in the United States and other countries where we or our providers operate. Where required, we implement appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) for transfers from the EEA, UK, Switzerland, or other regulated regions.
9. Retention
We retain information only as long as needed for the purposes above, including legal, accounting, and security requirements. On-device data remains under your control until you delete it or uninstall the App.
10. Security
We use reasonable administrative, technical, and organizational measures to protect information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
11. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of personal information, and to withdraw consent where processing is consent-based. You may also have the right to appeal certain decisions.
United States — California (CCPA / CPRA)
California residents may have the rights to know categories and specific pieces of personal information collected, to delete personal information, to correct inaccuracies, to opt out of certain sharing (including “sale” or “sharing” as defined by law), and not to receive discriminatory treatment for exercising rights. We describe collection in Sections 3–5. To submit a request, email xyxycyl@163.com. We will verify your request in line with law. You may designate an authorized agent with written permission, subject to verification.
Canada
Depending on your province, you may have rights to access and correct personal information under PIPEDA or provincial statutes (including Quebec’s Law 25 where applicable). Contact us at xyxycyl@163.com to exercise applicable rights.
Singapore (PDPA)
You may request access to or correction of personal data we hold, or withdraw consent where processing is consent-based, subject to exceptions under the PDPA. Contact xyxycyl@163.com.
Australia (Privacy Act 1988)
We aim to comply with the Australian Privacy Principles (APPs). You may request access to or correction of personal information. If you have a complaint, contact us first; you may also refer unresolved complaints to the Office of the Australian Information Commissioner (OAIC).
12. Children
Xyxy is not directed to children under 13 (or the age required by local law for valid consent). We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will delete it promptly.
13. Changes to this Policy
We may update this Policy from time to time. The “Effective date” at the top will change when we do. If changes are material, we will provide additional notice as required by law (for example, in-app notice).
14. Contact
Privacy inquiries and requests: xyxycyl@163.com
Postal requests (if needed): include “Privacy — Xyxy” in the subject line and describe your request clearly.