Ximos Legal
🛡️ Guardian Compliance & Data Security

Privacy Policy

Complete transparency regarding user consent, encrypted peer-to-peer WebRTC streams, 30-day vault retention, and Android system permissions — including where the app can be hidden, and how that's disclosed to the device it's installed on.

Last Updated: September 5, 2026
Status: Reviewed for Parental Supervision Use
Architecture: Encrypted Peer-to-Peer (WebRTC)

Parental Consent & Purpose Limitation Statement

Ximos (formerly and also known as XimDroid) is engineered strictly for parental supervision, minor child protection, and authorized family safety management. The application functions exclusively with the explicit, informed consent of the legal guardian and device owner. Unauthorized surreptitious surveillance is strictly forbidden and actively prevented by hardware indicator protocols.

Encrypted Peer-to-Peer Streaming

Live screen shares and dual-camera feeds utilize peer-to-peer WebRTC streaming (DTLS-SRTP encrypted). The signaling server exchanges connection info only — it never receives or stores the stream itself.

30-Day Auto Purge

Cloud Media Vault snapshots, audio recordings, and video clips are stored in the user's personal database for a maximum of 30 days before irreversible automated deletion.

Notification Cannot Be Silenced

A continuous, non-dismissible status bar notification is always displayed while any monitoring service is active — even on builds where the parent has chosen to hide XimosKid's app icon. Full disclosure of that icon-hide option is in our Trust Center.

No Cookies or Trackers

We do not use browser cookies, tracking pixels, advertisement IDs, or behavioral analytics beacons to profile your children or monitor web activity.

Advisory, Not Restrictive

Ximos does not remotely block apps or filter web/video content — by design. We give parents visibility and a way to communicate directly with the child's device, not a remote lockdown switch. Optional app blocking and content filtering are being explored for a future update; see our public roadmap.

SEC 01

Information We Process & Collect

Ximos operates under a data minimization and zero-surveillance-profiling architecture. We only process data that you, as the authenticated parent or guardian, explicitly request or schedule through the parent dashboard:

  • Live Hardware Streams (Screen & Camera): Real-time screen projection, front camera, and rear camera streams are transmitted via encrypted WebRTC hardware channels. These streams are handled transiently in RAM and are never recorded or saved unless you explicitly tap "Record" or schedule an automated capture in your Cloud Vault.
  • Vault Media (Photos, Audios, Videos): Captured photos, ambient audio recordings, and video clips requested by the parent are encrypted and transmitted directly to your personal cloud storage database.
  • Device Telemetry & Hardware Metadata: To ensure accurate remote touch mapping, battery monitoring, and anti-fraud verification (preventing referral abuse), the app collects minimal non-identifying telemetry including: device manufacturer, model, screen resolution, operating system version, battery level, charging state, and network connectivity status.
  • Location Data (Planned, Not Yet Active): SOS trigger and live GPS location are in development and not part of the current shipping release. This section will be updated with the exact data collected and retention period before that feature launches — see the Community & Roadmap page for current status.
SEC 02

Consent, Guardian Authority & Transparency

Ximos is designed exclusively for legal guardians monitoring minor children under their legal custody or for personal emergency protection on user-owned devices.

Persistent Notification: Ximos abides by Android platform security guidelines by maintaining a visible, non-dismissable notification in the Android notification drawer whenever the service is actively communicating with the parent portal.

Icon visibility, disclosed directly: XimosKid shows its own name and icon in the device's app list by default. A parent can optionally hide the launcher icon; when hidden, the persistent notification above remains in place regardless, and a hidden dial code can restore the icon from the child's device at any time. We document this trade-off in full, including what it does and does not guarantee, in our Trust Center — a notification is only a meaningful signal if it's read, and we'd rather say that plainly than oversell it here.

Any attempt to deploy Ximos for unauthorized surveillance, stalking of spouses or adults, employee tracking without formal consent, or corporate espionage constitutes a direct violation of our Terms of Use and applicable state, federal, and international wiretap legislation.

SEC 03

Data Storage, Encryption & 30-Day Auto Purge

We implement stringent data lifecycle controls to safeguard your family's personal moments:

  • Transient Data Disposal: Real-time screen broadcasts, camera previews, and bidirectional audio bytes are streamed directly peer-to-peer and are immediately discarded from memory once the active session terminates.
  • Cloud Vault 30-Day Lifespan: Photos, video clips, and audio files saved to your cloud vault are retained for a maximum period of 30 calendar days. After 30 days, files are automatically and permanently purged by server cron jobs. Users are responsible for exporting or downloading important evidence or memories prior to expiration.
  • End-to-End Encryption: Sensitive media and telemetry payloads are encrypted in transit using TLS 1.3 cryptographic protocols and authenticated with unique pairing tokens.
Automated Lifecycle & Retention Matrix Cron Purge Active
Live Screen & Camera P2P Streams
0s (Transient RAM)
Encrypted Vault Media (Photos & Video)
30 Days Auto-Purge
SOS & Location Records
Planned feature — not yet active
SEC 04

No Cookies, Web Beacons or Third-Party Sharing

Ximos is a privacy-first utility. We do not sell, rent, monetize, or trade your personal data, media streams, or telemetry with any third-party marketing agencies, advertisers, or data brokers.

Our web applications and remote monitoring interfaces do not utilize tracking cookies, behavioral ad pixels, or session recording scripts. All communications are direct API calls between the authenticated parent dashboard and the child client service.

SEC 05

Android System Permissions Breakdown

To provide legitimate parental controls, device protection, and safety telemetry, Ximos requests specific Android permissions. Below is a full disclosure of each permission and its exact operational purpose:

android.permission.CAMERA Critical
Camera Access (Front / Rear)

Allows remote dual-camera streaming and photo snapshot captures, started only when a parent initiates a live session from the dashboard. During a live session, the parent can flip between front/rear camera and toggle the flashlight.

Used in: Live Cam Stream, Camera Flip, Flashlight Toggle, Cloud Vault Snapshot
android.permission.RECORD_AUDIO Critical
Microphone & Audio Recording

Enables one-way remote ambient listening during an active screen or camera session, started only by parent action. Unlike screen/camera streaming, this feature draws from account balance (minimum $0.10) rather than free bonus seconds.

Used in: Surrounding Audio Listening (balance-billed)
BIND_ACCESSIBILITY_SERVICE Special
Accessibility Automation & Touch Control

Enables remote screen touch emulation, home/back gesture execution, and preventing child access to restricted applications.

Used in: Remote Touch Injection, App Blocker, Guardian Overlays
android.permission.MEDIA_PROJECTION Critical
Real-Time Screen Cast & Capture

Utilizes Android MediaProjection API to broadcast live smartphone display activity securely to the parent console.

Used in: Live Screen Stream, Screen Time Auditing, In-App Safety Alert
ACCESS_FINE_LOCATION Planned — Not Yet Active
High-Precision GPS Location

Not requested by the current shipping release. Documented here in advance because it's on our public roadmap for a future SOS/location feature — this card will be updated with real behavior before that permission is ever requested on a device.

Planned for: SOS Trigger, Live Location (see Roadmap)
FOREGROUND_SERVICE Standard
Persistent Foreground Operation

Keeps communication channels alive in the background while displaying the mandatory persistent notification to the child.

Used in: Background Sync, Push Listener, Notification Banner
READ_EXTERNAL_STORAGE Standard
Storage & Media Gallery Sync

Allows parent-directed media vault backup and file management for saved parental recordings.

Used in: Vault Backup, Media File Management, Local Export
SYSTEM_ALERT_WINDOW Special
System-Level Alert & Overlay Window

Allows parents to display critical priority warning modals, time limit notices, or emergency SOS takeover screens.

Used in: Priority Window Alerts, Lock Screen Takeover, Bedtime Blocker
RECEIVE_BOOT_COMPLETED Standard
Automatic Startup On Device Reboot

Ensures safety services automatically resume protection immediately following a device reboot or power cycle.

Used in: Auto Boot Service, Continuity Guardian Watchdog
android.permission.WAKE_LOCK Standard
CPU Wake Lock

Prevents the operating system from abruptly terminating active emergency alarms or live WebRTC audio/video streams during sleep mode.

Used in: SOS Alarm Trigger, Live Stream Stability
POST_NOTIFICATIONS Standard
Push & Priority Notifications

Delivers instant parental text alerts, bedtime reminders, and child check-in requests directly to the notification shade.

Used in: Parent Push Messages, Task Reminders, System Alerts
Device Admin (Uninstall Protection) Special
Accidental-Removal Protection

Requires a parent PIN before XimosKid can be uninstalled through normal Android settings, preventing impulsive removal. Does not lock the device, wipe data, or block uninstallation permanently — see full scope in the Trust Center.

Used in: PIN-Gated Uninstall Only
SEC 06

Children's Privacy (COPPA & GDPR Article 8)

Ximos is designed with the principles of the Children's Online Privacy Protection Act (COPPA) and General Data Protection Regulation (GDPR Article 8) in mind. We have not sought a third-party certification of formal compliance, and we'd rather say that directly than claim a status we can't point to an auditor for.

  • Parental Authorization: Data processing is initiated solely under the direct affirmative consent and configuration of the child's legal parent or court-appointed guardian.
  • No Commercial Profiling: Under no circumstances is child telemetry, activity logs, or media utilized for behavioral advertising, credit profiling, or demographic sales.
  • Right to Erasure: Parents can review, export, or permanently delete stored vault media and their account's data at any time via account deletion or the vault's delete controls in the parent dashboard. Account deletion is permanent — see Retention & Deletion for the exact flow.

Legally Binding User Agreement

By accessing, installing, downloading, or using the Ximos application, software packages, or parent dashboard, you explicitly agree to be bound by these Terms of Use. If you do not agree to every provision herein, you must immediately uninstall and discontinue all use of the software.

ART 01

Eligibility & Guardian Attestation

You represent and warrant that:

  1. You are at least 18 years of age (or the legal age of majority in your jurisdiction).
  2. You are the biological parent, legal adoptive parent, or court-appointed legal guardian of the minor child whose device you configure with Ximos.
  3. You own the hardware device or possess full legal authority from the owner to install administrative device management software.
  4. You will not install this software on any device operated by an adult without their express, written, legally verifiable consent.
ART 02

Permitted vs. Prohibited Uses

Strictly Permitted Uses:

  • Supervising screen time, location, and application usage of your minor children.
  • Protecting children against online harassment, cyberbullying, or predatory interactions.
  • Locating lost or stolen family devices and executing remote emergency alarms.

Expressly Prohibited & Illegal Abuses:

  • Installing Ximos on a spouse’s, partner’s, roommate’s, or acquaintance’s device without their continuous knowledge.
  • Conducting corporate espionage, employee eavesdropping, or illicit trade secret theft.
  • Reverse engineering, decompiling, circumventing license protections, or redistributing modified proprietary binaries without authorization.
ART 03

Account Security & Pairing Credentials

You are entirely responsible for maintaining the confidentiality of your parent account credentials, device pairing tokens, and private encryption keys. Any actions executed through your paired parent dashboard are deemed to have been authorized by you.

If you suspect unauthorized access to your account or paired devices, you must immediately unpair the affected device from your dashboard and change your account password. Ximos does not currently offer a remote device-wipe capability; unpairing stops the monitoring session and access to that device.

ART 04

Service Availability & Telemetry Accuracy

Ximos relies on third-party hardware, cellular data networks, Wi-Fi connectivity, and Android operating system power management systems. Consequently:

  • We do not guarantee 100% uninterrupted uptime or immediate WebRTC stream connection in areas with poor network coverage.
  • Certain aggressive Android battery management optimizations (e.g., Doze Mode, OEM memory killers) may delay push notifications or background sensor reads.
  • Location accuracy is subject to GPS satellite line-of-sight and cellular triangulation limitations.
ART 05

Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED UNDER APPLICABLE LAW, IN NO EVENT SHALL Ximos, ITS DEVELOPERS, AFFILIATES, OR CONTRIBUTORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF DATA, DEVICE MALFUNCTION, LEGAL DISPUTES ARISING FROM MISUSE, OR EMOTIONAL DISTRESS, ARISING OUT OF OR IN CONNECTION WITH THE USE OR INABILITY TO USE THE APPLICATION.

Critical Legal Warning on Wiretap & Surveillance Laws

Surreptitious monitoring of an individual without their consent is a serious criminal offense in most jurisdictions worldwide. The user assumes 100% legal responsibility for ensuring that their use of Ximos conforms strictly with all applicable local, state, federal, and international wiretap and privacy laws.

WARN 01

Strict Parental Supervision Scope Only

The Ximos suite is developed and distributed solely as a child safety and parental management tool. It is not licensed, marketed, or intended to be used as hidden spyware, covert trojans, or illicit surveillance equipment.

The developers and distributors of Ximos have zero tolerance for illegal spying. If law enforcement agencies present valid judicial subpoenas regarding illegal non-consensual surveillance, we will comply in full accordance with the law.

WARN 02

Not an Emergency Dispatch Replacement (911 / 112)

Ximos is NOT a certified emergency dispatch system or 911/112/999 service replacement. In the event of immediate danger, medical crises, fire emergencies, or life-threatening criminal situations involving your child, you MUST directly dial official public emergency authorities.

Emergency SOS siren alarms and geofence alerts within Ximos are software-assisted notifications that require active cellular or Wi-Fi data to function and should never be solely relied upon in life-critical events.

WARN 03

"As-Is" & "As-Available" Software Disclaimer

Ximos IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

We do not warrant that the application will meet your specific operational requirements, that operation will be error-free or uninterrupted, or that all defects can or will be corrected.

WARN 04

Indemnification Agreement

You agree to defend, indemnify, and hold harmless Ximos, its project maintainers, developers, and hosting infrastructure providers from and against any claims, liabilities, damages, losses, costs, or expenses (including reasonable attorneys' fees) arising out of your violation of these terms or your unlawful deployment of the software on unconsenting parties.

Open-Source Software & Third-Party Library Acknowledgments

Ximos is built with gratitude upon the open-source software ecosystem. In compliance with the licensing obligations of our dependencies, this page provides a comprehensive inventory of all third-party libraries, framework components, and their respective license terms.

AndroidX & Android Jetpack
Google LLC / Android Open Source Project
Apache 2.0

Core architecture components, Lifecycle, ViewModels, and modern Android runtime support libraries powering the client engine.

android.googlesource.com
Google WebRTC Native Stack
The WebRTC Project Authors
BSD 3-Clause

Real-time peer-to-peer audio and video streaming engine enabling ultra-low latency screen broadcasts and dual-camera viewing.

webrtc.org
Firebase Android SDK & FCM
Google LLC
Google / Apache 2.0

Cloud Messaging (FCM) push notification delivery, Firebase Authentication, and user-owned Firestore real-time database synchronizers.

firebase.google.com
Google Play Services & Sign-In
Google LLC
Google Open Source

Fused Location Provider for accurate GPS geofencing and Google Sign-In SDK for secure parent identity federation.

developers.google.com
OkHttp & Okio
Square, Inc.
Apache 2.0

High-performance HTTP/2 and WebSocket client used for secure parent-child signaling and encrypted vault uploads.

github.com/square/okhttp
Google Gson
Google LLC
Apache 2.0

Java serialization/deserialization library to convert Java Objects into JSON representation and vice versa for telemetry payloads.

github.com/google/gson
Material Components for Android
Google LLC
Apache 2.0

Modular and customizable Material Design UI components for responsive child device setup screens.

material.io/develop/android
Glide Image Loading Engine
Bumptech / Google
BSD / Apache 2.0

Fast and efficient image loading and caching framework for Android and smooth thumbnail generation in the Cloud Vault.

github.com/bumptech/glide
PhotoView
Chris Banes
Apache 2.0

Implementation of ImageView supporting pinch-to-zoom, multi-touch gestures, and smooth viewport panning for photo inspections.

github.com/Baseflow/PhotoView
CircleImageView
Henning Dodenhof
Apache 2.0

Circular ImageView component for Android providing rounded child avatar and disguise icon badge rendering.

github.com/hdodenhof/CircleImageView
ZXing Android Embedded
JourneyApps / ZXing Authors
Apache 2.0

Barcode and QR code scanning library used for instant, single-scan pairing between child devices and the parent portal.

github.com/journeyapps
Android Camera2 & MediaProjection
Android Open Source Project
Apache 2.0

Low-level camera control pipelines, hardware video encoding, and virtual display projection interfaces.

source.android.com
Chart.js
Chart.js Contributors
MIT License

Simple yet flexible JavaScript charting engine used in the parent dashboard for screen time and battery usage analytics.

chartjs.org
Lucide Icons
Lucide Project Contributors
ISC / MIT

Community-crafted vector icon library providing clean visual indicators across the parent web interface.

lucide.dev
NOTE

Transitive Dependencies & Disclaimer of Affiliation

Any secondary libraries or transitive sub-dependencies included as part of the above packages are distributed under their respective open-source licenses (such as MIT, Apache 2.0, BSD 2-Clause, BSD 3-Clause, or ISC).

Disclaimer of Affiliation: Ximos and its maintainers are independent entities. The use of third-party open-source libraries does not imply any official endorsement, sponsorship, or affiliation with the authors, Google LLC, Square, Inc., or the Apache Software Foundation.