Your privacy is important to us,Protecting your data is our priority.

1. Introduction

This Privacy Policy explains how XFun ("we", "us", or "our") collects, uses, shares, and protects your personal data when you use our mobile application and related services (the "Services"). By accessing or using XFun, you agree to this Privacy Policy.

2. Data Controller

XFun App, Inc. Contact: support@xpalapp.com
We are the data controller responsible for your personal data.

3. Data We Collect

3.1 Data You Provide
We collect personal data you provide directly, including: account information (name, email, gender, date of birth); profile data (photos, bio, preferences); payment and billing information (via third-party providers); communications (messages, customer support requests); survey responses, feedback, or participation in promotions.

3.2 Sensitive Data
You may optionally provide sensitive data (e.g. sexual orientation). We process such data only with your explicit consent, which you may withdraw at any time.

3.3 Data Collected Automatically
When you use the Services, we may collect: device data (IP address, device ID, OS, browser type); usage data (interactions, matches, activity logs); location data (if enabled); log data and analytics data.

3.4 Data from Third Parties
We may collect data from: login providers (e.g. Apple, Google, Facebook); payment platforms; analytics partners.

4. How We Use Your Data

We use your personal data to: provide and operate the Services; create and manage your account; match you with other users; process payments and subscriptions; personalize your experience; detect, prevent, and investigate fraud, abuse, and prohibited activities (e.g., harassment, exploitation, or illegal conduct); communicate with you (service messages, updates, marketing); improve and develop our Services.

Legal Basis for Processing (GDPR): Contract – to provide the Services; Consent – for sensitive data, location, marketing; Legitimate Interests – for security, fraud prevention, and improvement.

5. How We Share Your Data

5.1 With Other Users
Your profile and content may be visible to other users.

5.2 With Service Providers
We may share data with: payment processors (Apple, Google); cloud infrastructure providers (e.g. AWS); analytics providers; customer support tools. All partners are required to protect your data.

5.3 With Legal Authorities
We may disclose your data if required by law or to: prevent fraud or illegal activity; protect users’ safety; enforce our Terms.

5.4 Business Transfers
Your data may be transferred in connection with mergers, acquisitions, or asset sales.

5.5 With Your Consent
We may share data with third parties when you explicitly agree.

6. Data Retention

We retain your data while your account is active, as necessary to provide Services, and as required by law (e.g. up to 7 years for financial records).

Deletion
- You may request deletion at any time
- We process requests within 7–30 days
- Some data may be retained for legal obligations
- Deleted data may remain in backups for a limited period before being permanently removed.

7. Your Rights

You have the right to: access your personal data; correct inaccurate data; delete your data; restrict or object to processing; withdraw consent at any time; request data portability. To exercise your rights, contact: support@xpalapp.com

California (CCPA) Rights
If you are a California resident, you have the right to: request disclosure of collected data; request deletion; opt-out of sale or sharing.

8. Do Not Sell or Share Personal Data

We do not sell your personal data. If we engage in targeted advertising in the future, you will have the right to opt out at any time.

9. Data Security

We implement industry-standard safeguards: encryption (HTTPS/TLS); secure servers and storage; access controls; fraud detection systems. However, no system is completely secure.

10. International Data Transfers

Your data may be transferred to countries outside your residence (e.g. United States). We ensure protection through Standard Contractual Clauses (SCCs) and other lawful safeguards.

11. Cookies & Tracking Technologies

We use cookies and similar technologies to: improve functionality; analyze usage; personalize content. You can control tracking permissions through your device settings or system-level privacy controls.

12. Age Restrictions

XFun is strictly intended for users 18 years and older. We do not knowingly collect data from minors. If we discover such data, we will delete it immediately.

13. Safety, Moderation & Enforcement

We use automated and manual systems to detect, prevent, and address prohibited activities such as harassment, exploitation, fraud, and illegal conduct, enforce our policies, and protect user safety. Users are expected to comply with our community guidelines. We may suspend or terminate accounts violating our policies.

14. Face Data (Optional Section)

If identity verification is used: face data is used only for identity and safety verification; not used for advertising or profiling; not stored permanently; processed securely and deleted after verification.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via app notifications and email (if applicable). Continued use of the Services means acceptance of updates.

16. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us: XFun Support Team Email: support@xpalapp.com