Effective October 28, 2026. AllMyXs is an 18+ early-access app operated by the AllMyXs developer, with cloud services currently restricted to approved beta accounts. For privacy, access, correction, deletion or other applicable rights requests, contact support@allmyxs.com. Identify the app account involved; do not email your password. We may verify your control of the account before acting.
We process your Firebase account ID, verified email, sign-in provider and selected profile information; library and stitching records stored on your device; cloud files and their metadata when you upload; Circle membership, friendships, invitations, sharing permissions and text contributions; subscription or complimentary/beta access status; blocks, reports, support tickets and moderation records; notification device registrations and security/session/rate-limit records. Network/security records can include IP addresses, user-agent details and request times/statuses. Firebase/App Check can process app-installation identifiers and device/app attestation to authenticate requests and prevent abuse; notification registration uses private delivery tokens. This necessary service/security processing is separate from optional beta performance samples. Password sign-in is handled by Firebase Authentication. App and admin-portal passwords are not included in support reports or diagnostic samples.
Optional beta diagnostics send AllMyXs your app version, Android version, device manufacturer/model, memory and display specifications, and sampled app timing, memory, frame and error-category measurements. They are linked to your account so the developer can investigate your reports. They do not include pattern files, filenames, private messages, contacts, location, advertising IDs, passwords or raw error logs. Collection starts only after beta approval and your affirmative opt-in. You can turn it off in Settings; existing samples expire after 30 days. Declining does not prevent requesting beta access.
Website-distributed Android builds can use Firebase App Check with Google reCAPTCHA Enterprise to detect automated abuse without asking you to register a device or solve a challenge. Google processes security signals that can include IP address, app package and SDK version, action labels, device integrity, app interactions, information about some installed apps and device identifiers. These necessary fraud/security checks are separate from the optional AllMyXs performance samples and are not disabled by declining those samples. AllMyXs does not include pattern files, private message bodies, passwords or raw logs in its security-check requests. Google processes its SDK security signals under the applicable service terms.
Support reports include the text and any screenshots you explicitly choose to submit. The developer and authorized support/moderation administrators can review them. A report may include an optional technical snapshot only when you choose to include it. Screenshots and text can contain personal information: review them and omit unrelated private details. Support correspondence is handled through the admin panel and support@allmyxs.com. A queued delivery is not proof that an email has already been sent.
Other members see profile details and activity that you make available through friendships, Circles or sharing. A Circle’s members can see its shared tiles, group text and notes subject to access controls; downloads need the sharer’s permission and can be blocked by a Circle administrator. Only a private conversation’s participants can browse it in the app. Moderators may read a specifically reported private message for review; they do not have a general conversation browser. Authorized cloud operators can technically access stored server data. The service does not provide end-to-end encryption. Other users control copies they have already downloaded.
Google/Firebase provides authentication, App Check, the API and database infrastructure. Cloudflare provides private R2 file storage and the website/admin/mail infrastructure. Cloud records currently use a United States database region; providers may process supporting service data in other locations. Data is used to deliver the app, enforce permissions, prevent abuse, resolve reports, operate early access and diagnose reliability. AllMyXs does not sell personal information or use this beta’s diagnostic data for advertising. No advertising SDK, automatic message-content analytics or analytics access to uploaded patterns is enabled by beta enrollment. Service providers process data to operate these services, and data may be disclosed when legally required or necessary to address security or abuse.
Private message bodies expire from ordinary access after 90 days and are removed by scheduled cleanup. Pattern notes remain until deleted, unshared or erased/anonymized with the account. Circle chat and other social records follow their deletion/account-erasure controls. Raw beta diagnostic samples are kept for at most 30 days, including when you later turn collection off. Beta requests expire after 12 months without an update; admission is a separate administrator record. Support tickets and their submitted diagnostic snapshots are kept for up to 12 months after their last update. Security, moderation and legal records may be kept longer when reasonably needed to investigate abuse or meet legal obligations. Expired records are removed by scheduled cleanup, so deletion is not instantaneous. Backups age out under their configured rotation, and deletion requests must be respected if data is restored.
You can edit available profile/privacy settings, stop sharing, block users, delete your own eligible content, and withdraw optional diagnostics consent in Settings. Turning diagnostics off stops new diagnostic uploads; you can also ask support to remove retained diagnostic samples. Request account deletion from the app’s account controls, or use the Account deletion page linked below to contact support outside the app. Server cleanup removes personal cloud grants and erases or anonymizes associated records. Shared objects may remain while another authorized owner references them; other people’s independently downloaded copies and their own contributions are not recalled. Files exported to device storage remain under your device’s controls. We may retain limited records for security, dispute or legal requirements.
Where applicable, you may request access, correction, deletion or restriction of personal information and raise concerns with the relevant supervisory authority. Contact support for a verified request. Material changes to the published policy will have a new version and require renewed acceptance before affected online contributions. This policy describes the implemented early-access services; new billing, public discovery or additional data collection requires updated disclosure.
Contact support@allmyxs.com.