Privacy Policy

1. Overview

XReplay is designed to keep videos on your device. Gesture recognition runs locally, and frames analyzed for this purpose are not sent to the XReplay backend.

2. Data we process

• Account: identifier, email, name and photo when supplied, language, time zone, verification status and accepted-document versions.
• Sessions: device identifier and name supplied by the app, creation, last use, expiry and revocation.
• Quota: replay identifiers, quota day and reservation, completion or release states. The backend does not receive video content.
• Subscription: product, plan, offer, status, validity and a protected purchase token. Full payment data is processed by Google Play.
• Security: technical identifiers, error records and a cryptographic digest of the network address used for abuse prevention.

3. Videos, camera and gestures

The temporary buffer, exported replays and pose recognition operate on the device. Videos remain local by default. A video is sent to a partner only after you connect the integration and authorize the upload.

Custom gestures are represented by normalized data on the device without requiring the enrollment images to be stored.

4. Purposes

We use data to authenticate accounts, protect sessions, recover access, apply the free quota, validate XReplay PRO, restore purchases, handle requests, prevent fraud and keep the service operating.

5. Services involved

Firebase provides authentication; Google Play processes subscriptions and reports their status; the website infrastructure hosts the API and structured records. Integrations such as Timinho are optional and receive data only after authorization. Each service also applies its own policy.

6. Retention and protection

We retain data while the account is active or as needed for security, billing, fraud prevention, legal claims and applicable obligations. Sensitive tokens are protected at rest and are not written to logs. No system is risk-free, but we apply controls proportionate to the data involved.

7. Your choices and rights

You may view or update basic data, terminate sessions, disconnect integrations, request an export and delete the account. You may also control camera, microphone, media and notification permissions in Android settings.

Deletion can be initiated in the app or on the public account-deletion page. Certain records may be retained when required for legal obligations, disputes, fraud prevention or legitimate security needs.

8. Children and teenagers

Where required by law, children or teenagers should use the service with a parent or guardian’s participation and authorization. Anyone recording games involving minors must also follow image permissions and the rules of the event, school, club or competition.

9. Changes and contact

We may update this policy to reflect product or applicable-requirement changes. When needed, the new version will be presented in the app. Account requests can be made through the official channels shown in the app or through the deletion page.