Privacy Policy

Privacy at a Glance

Information We Collect and Do Not Collect

Because your loans never reach us, we cannot view, share, sell or hand them over, and we are unable to recover them for you if they are lost.

Data Stored on Your Device

Everything you enter in the App is stored locally on your device:

iCloud Sync and Backups

iCloud sync is optional and off until you turn it on. When it is on, your loans are stored in the App's private database in your own iCloud account through Apple's CloudKit, so they stay in sync across your iPhone and iPad. Only you can access that database; we cannot read it. Your use of iCloud is subject to Apple's terms and privacy policy.

You can also export your data yourself: an encrypted backup file that only someone with your backup password can open, or a CSV file of your schedules. These files are created on your device and go only where you choose to save or send them.

Optional Sign-In

You can use XLoan without an account. If you choose to sign in with Apple, or type in your name and email, they are saved on your device only, to label your backups and greet you in the App. XLoan has no account server, so they are never sent to us. With Sign in with Apple you can choose to hide your email address.

Device Permissions

The App only asks for a permission when you use the feature that needs it, and works without any of them:

• Camera and photos: to scan a loan statement or attach a document. The text is read on your device and the image is never uploaded
• Face ID: to lock the App. Apple handles Face ID; the App never receives your face data
• Notifications: payment reminders and weekly check-ins are scheduled on your device, not sent from a server

Exchange Rates

To show a loan in another currency, the App downloads current exchange rates from ExchangeRate-API. The request contains no information about you or your loans; like any web request, it includes your device's IP address.

Purchases

Premium is a one-time purchase handled by Apple. We never receive your payment details. To verify the purchase and restore it on your other devices, the App uses RevenueCat, an in-app purchase service:

RevenueCat acts as our service provider and processes this data under its Privacy Policy. It is not used for advertising or to track you across other apps.

Advertising and Tracking

• The free plan may show ads after some calculations and on some screens, served by Google AdMob. Premium removes all ads
• Ads for loans, credit and other financial services are blocked
• Your loan data is never shared with advertisers or used to choose ads
• The ad provider may use your device's advertising identifier only if you allow it when the App asks (App Tracking Transparency). If you don't, ads are not personalised. You can change this at any time in Settings → Privacy & Security → Tracking
• Google processes ad requests under its own Privacy Policy; see also how Google uses information from apps that use its services
• We do not use any analytics SDKs. If you opt in to share analytics with developers in your device settings, Apple may provide us with anonymous crash data that does not identify you

Data Sharing and Disclosure

We do not sell, rent or share personal information. The App only uses these service providers, each for the purpose described: RevenueCat for purchases (section 8), Google AdMob for ads on the free plan (section 9) and ExchangeRate-API for currency rates (section 7). None of them receives your loan data. When you export a backup, a CSV or a PDF, the file goes only where you choose to send it.

If you email us for support, we use your email address and message only to reply to you, and we never share them.

Data Security

Data Retention and Deletion

Your data stays under your control for as long as you keep it:

• Delete any loan, payment or document inside the App at any time
• Deleting the App removes all of its data from that device
• To delete your iCloud copy, turn off iCloud sync in the App, then remove the XLoan data in Settings → [your name] → iCloud → Manage Storage
• Backup and CSV files you exported are yours to delete wherever you saved them
• Purchase records held by RevenueCat are kept only as long as needed to provide and verify Premium, and can be deleted on request by contacting us
• Support emails are kept for up to 2 years, or deleted sooner on request

Your Rights (GDPR, CCPA and Others)

Depending on where you live, you may have the right to access, correct, delete, export or restrict the processing of your personal data, and to withdraw consent. Because your loans are held on your device and in your own iCloud, you can exercise these rights directly in the App and in your Apple Account, without needing to ask us. We do not sell or share personal information as defined by the CCPA.

For any request about purchase records held by RevenueCat or support emails you have sent us, contact us at the address below. You may also lodge a complaint with your local data protection authority.

Children's Privacy

XLoan is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has sent us personal information by email, contact us and we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and, for material changes, let you know in the App. Continued use of the App after changes take effect means you accept the updated policy.

Contact Us