Ximos Policy
How the Ximos parent dashboard collects, uses, and safeguards data — covering secure device pairing, encrypted WebRTC streaming, and our zero-storage approach to media.
com.ximexa.ximos) only. It does not cover the companion XimosKid app (package com.droid.ximexa), which is published separately with its own policy. Before publishing this page, have it reviewed by qualified legal counsel to confirm it meets the requirements of every jurisdiction and app store you operate in.
Ximos ("we," "our," "the app") is a remote monitoring and management dashboard built for parents and guardians. It lets you check on a child's device connection status, view usage statistics, and manage safety settings, and it pairs securely with the companion child app, XimosKid.
This policy explains what the Ximos parent app collects, why, how it's protected, and what control you have over it. By creating a Ximos account, you agree to the practices described below.
Ximos follows a minimal-collection approach: we only collect what's needed to run your account and keep your paired device connected securely.
- Account credentials: the email address and authentication keys or device identifiers used to sign in and verify your account.
- Connection & configuration data: pairing tokens and preference settings that keep your parent app linked to the correct child device.
- Device usage metrics: battery level, screen-time trends, Wi-Fi/cellular data usage, and unlock counts relayed from the paired device so you can review them on your dashboard.
- Live stream & media session data: connection metadata needed to establish a live camera cast or screen-mirroring session (see Section 3 for how the media itself is handled).
- Billing information: your credit balance and transaction history within the app. Payment card details are handled by our payment processor and are not stored on Ximos servers.
- To create and authenticate your account, and to securely pair it with a companion device.
- To deliver real-time metrics, alerts, and connection status to your dashboard.
- To operate the credit and billing system, including rewarded actions and pay-as-you-go top-ups.
- To maintain security, detect misuse, and keep the service reliable.
We do not use your data for third-party advertising profiles, and we do not sell or trade it.
Camera casts, screen mirroring, and other live views initiated from the parent dashboard are transmitted directly over an encrypted, peer-to-peer WebRTC connection between your device and the paired device. WebRTC sessions use industry-standard DTLS-SRTP encryption in transit, and streams are not routed through, or stored on, our servers by default.
If you choose to save a photo or clip to the optional media vault, it is stored on our cloud infrastructure only temporarily and is automatically purged after 30 days unless you manage it sooner from within the app. You can delete vault items manually at any time.
No captured media is sold, traded, or shared with third parties.
We do not sell or trade your personal information. We only share limited data with service providers who help us run Ximos, and only as needed for them to perform that function:
- Cloud infrastructure & authentication providers, to host accounts and enable secure sign-in and WebRTC signaling.
- Payment processors, to handle credit purchases without Ximos ever holding your full card details.
- Legal authorities, only if required to comply with a valid legal request.
- Account & configuration data is kept for as long as your account is active.
- Vault media is retained for up to 30 days or until you delete it, whichever is sooner.
- Deleted accounts have their profile records and stored configuration permanently wiped from our database (see Section 8).
- Connections between the app and our servers are encrypted in transit.
- Live streaming sessions run over encrypted, peer-to-peer WebRTC channels rather than being relayed and stored server-side.
- Access to account data is restricted to what's needed to operate the service.
No system is completely immune to risk, and we continue to improve our safeguards as the app evolves.
The Ximos account itself is created and controlled by the parent or legal guardian — it is not intended to be used or registered by a child directly.
Because Ximos displays information relayed from a child's paired device through the companion XimosKid app, the parent or guardian who sets up that pairing is responsible for ensuring they have the appropriate authority and consent to monitor that device under applicable law (for example, COPPA in the United States or GDPR-K in the EU/UK). We recommend being transparent with your child about the monitoring in place where appropriate for your family.
You stay in control of your data at all times. From within the app, you can:
- Review the account and configuration data associated with your profile.
- Update your account details and pairing preferences.
- Delete your account — this instantly and permanently removes your profile records and stored configuration from our database.
As the parent/controller app, Ximos requests only the permissions needed to function as a dashboard:
- Internet & network access: to communicate with our servers, authenticate your account, and handle WebRTC signaling for live sessions.
- Notifications: to deliver real-time alerts, connection updates, and usage summaries from the paired device.
Ximos uses a transparent pay-as-you-go credit system — you can add funds or earn credit through in-app rewarded actions, with no hidden recurring subscription. Payment transactions are handled by a third-party payment processor; Ximos stores your credit balance and transaction history, not your raw card details.
We may update this policy as Ximos evolves. Material changes will be reflected by updating the "Last updated" date at the top of this page, and significant changes may be highlighted in-app.
Questions about this policy or your data can be sent through the support contact listed on ximosapp.com.