Ximos Legal
🛡️ Guardian Compliance & Data Security

Privacy Policy

Complete transparency regarding user consent, real-time WebRTC streams, zero-knowledge encryption, 30-day vault retention, and Android system permissions.

Last Updated: August 14, 2026
Status: Verified Guardian Compliant
Architecture: Zero-Knowledge E2EE

Parental Consent & Purpose Limitation Statement

Ximos (formerly and also known as XimDroid) is engineered strictly for parental supervision, minor child protection, and authorized family safety management. The application functions exclusively with the explicit, informed consent of the legal guardian and device owner. Unauthorized surreptitious surveillance is strictly forbidden and actively prevented by hardware indicator protocols.

Zero-Knowledge Streaming

Live screen shares and dual-camera feeds utilize peer-to-peer WebRTC streaming. Data is encrypted and discarded immediately without persistent intermediate server logging.

30-Day Auto Purge

Cloud Media Vault snapshots, audio recordings, and video clips are stored in the user's personal database for a maximum of 30 days before irreversible automated deletion.

Visible Status Notice

To eliminate covert surveillance, a continuous, non-dismissible status bar notification is permanently displayed whenever background monitoring services are active.

No Cookies or Trackers

We do not use browser cookies, tracking pixels, advertisement IDs, or behavioral analytics beacons to profile your children or monitor web activity.

SEC 01

Information We Process & Collect

Ximos operates under a data minimization and zero-surveillance-profiling architecture. We only process data that you, as the authenticated parent or guardian, explicitly request or schedule through the parent dashboard:

  • Live Hardware Streams (Screen & Camera): Real-time screen projection, front camera, and rear camera streams are transmitted via encrypted WebRTC hardware channels. These streams are handled transiently in RAM and are never recorded or saved unless you explicitly tap "Record" or schedule an automated capture in your Cloud Vault.
  • Vault Media (Photos, Audios, Videos): Captured photos, ambient audio recordings, and video clips requested by the parent are encrypted and transmitted directly to your personal cloud storage database.
  • Device Telemetry & Hardware Metadata: To ensure accurate remote touch mapping, battery monitoring, and anti-fraud verification (preventing referral abuse), the app collects minimal non-identifying telemetry including: device manufacturer, model, screen resolution, operating system version, battery level, charging state, and network connectivity status.
  • Location Data (Geofencing & GPS): High-precision location coordinates are only gathered when the parent initiates a live geofencing check or SOS tracking event, allowing guardians to ensure child safety.
SEC 02

Consent, Guardian Authority & Transparency

Ximos is designed exclusively for legal guardians monitoring minor children under their legal custody or for personal emergency protection on user-owned devices.

Visible Foreground Notification: Unlike illicit spyware, Ximos abides by Android platform security guidelines by maintaining a visible, persistent notification in the Android notification drawer whenever the service is actively communicating with the parent portal. This guarantees that device occupants are aware of active protection services.

Any attempt to deploy Ximos for unauthorized surveillance, stalking of spouses or adults, employee tracking without formal consent, or corporate espionage constitutes a direct violation of our Terms of Use and applicable state, federal, and international wiretap legislation.

SEC 03

Data Storage, Encryption & 30-Day Auto Purge

We implement stringent data lifecycle controls to safeguard your family's personal moments:

  • Transient Data Disposal: Real-time screen broadcasts, camera previews, and bidirectional audio bytes are streamed directly peer-to-peer and are immediately discarded from memory once the active session terminates.
  • Cloud Vault 30-Day Lifespan: Photos, video clips, and audio files saved to your cloud vault are retained for a maximum period of 30 calendar days. After 30 days, files are automatically and permanently purged by server cron jobs. Users are responsible for exporting or downloading important evidence or memories prior to expiration.
  • End-to-End Encryption: Sensitive media and telemetry payloads are encrypted in transit using TLS 1.3 cryptographic protocols and authenticated with unique pairing tokens.
Automated Lifecycle & Retention Matrix Cron Purge Active
Live Screen & Camera P2P Streams
0s (Transient RAM)
Encrypted Vault Media (Photos & Video)
30 Days Auto-Purge
SOS & Geofence GPS Records
14 Days Rolling
SEC 04

No Cookies, Web Beacons or Third-Party Sharing

Ximos is a privacy-first utility. We do not sell, rent, monetize, or trade your personal data, media streams, or telemetry with any third-party marketing agencies, advertisers, or data brokers.

Our web applications and remote monitoring interfaces do not utilize tracking cookies, behavioral ad pixels, or session recording scripts. All communications are direct API calls between the authenticated parent dashboard and the child client service.

SEC 05

Android System Permissions Breakdown

To provide legitimate parental controls, device protection, and safety telemetry, Ximos requests specific Android permissions. Below is a full disclosure of each permission and its exact operational purpose:

android.permission.CAMERA Critical
Camera Access (Front / Rear)

Allows remote dual-camera streaming and photo snapshot captures when requested by the parent to verify child surroundings.

Used in: Live Cam Stream, Cloud Vault Snapshot, Silent Emergency Photo
android.permission.RECORD_AUDIO Critical
Microphone & Audio Recording

Enables remote ambient listening and audio clip recording during emergency SOS events or parental check-ins.

Used in: Ambient Listen, WebRTC Audio Stream, Vault Audio Clips
BIND_ACCESSIBILITY_SERVICE Special
Accessibility Automation & Touch Control

Enables remote screen touch emulation, home/back gesture execution, and preventing child access to restricted applications.

Used in: Remote Touch Injection, App Blocker, Guardian Overlays
android.permission.MEDIA_PROJECTION Critical
Real-Time Screen Cast & Capture

Utilizes Android MediaProjection API to broadcast live smartphone display activity securely to the parent console.

Used in: Live Screen Stream, Screen Time Auditing, In-App Safety Alert
ACCESS_FINE_LOCATION Standard
High-Precision GPS Location

Allows parents to view the real-time geographic position of the child and receive geofencing boundary departure alerts.

Used in: Geofence Safe Zones, Live GPS Radar, SOS Route Tracker
FOREGROUND_SERVICE Standard
Persistent Foreground Operation

Keeps communication channels alive in the background while displaying the mandatory persistent notification to the child.

Used in: Background Sync, Push Listener, Notification Banner
READ_EXTERNAL_STORAGE Standard
Storage & Media Gallery Sync

Allows parent-directed media vault backup and file management for saved parental recordings.

Used in: Vault Backup, Media File Management, Local Export
SYSTEM_ALERT_WINDOW Special
System-Level Alert & Overlay Window

Allows parents to display critical priority warning modals, time limit notices, or emergency SOS takeover screens.

Used in: Priority Window Alerts, Lock Screen Takeover, Bedtime Blocker
RECEIVE_BOOT_COMPLETED Standard
Automatic Startup On Device Reboot

Ensures safety services automatically resume protection immediately following a device reboot or power cycle.

Used in: Auto Boot Service, Continuity Guardian Watchdog
android.permission.WAKE_LOCK Standard
CPU Wake Lock

Prevents the operating system from abruptly terminating active emergency alarms or live WebRTC audio/video streams during sleep mode.

Used in: SOS Alarm Trigger, Live Stream Stability
POST_NOTIFICATIONS Standard
Push & Priority Notifications

Delivers instant parental text alerts, bedtime reminders, and child check-in requests directly to the notification shade.

Used in: Parent Push Messages, Task Reminders, System Alerts
BIND_NOTIFICATION_LISTENER_SERVICE Special
Notification & Threat Audit

Allows parents to review incoming threat alerts, suspicious messaging keywords, and cyberbullying alerts on monitored devices.

Used in: Cyberbullying Shield, Message Keywords, Threat Alerts
SEC 06

Children's Privacy (COPPA & GDPR Article 8)

Ximos complies strictly with the Children's Online Privacy Protection Act (COPPA) and General Data Protection Regulation (GDPR Article 8) standards for digital child safety:

  • Parental Authorization: Data processing is initiated solely under the direct affirmative consent and configuration of the child's legal parent or court-appointed guardian.
  • No Commercial Profiling: Under no circumstances is child telemetry, activity logs, or media utilized for behavioral advertising, credit profiling, or demographic sales.
  • Right to Erasure: Parents maintain the continuous right to review, export, or permanently delete all stored media and telemetry instantly via the "Remote Wipe" or "Purge Vault" buttons inside the parent dashboard.
SEC 07

Contact & Data Protection Inquiries

If you have any questions, compliance requests, or wish to exercise your data rights regarding your Ximos account, please contact our Data Protection Team at:

Email: support@ximosapp.com
Developer Lead: devloper@ximosapp.com
Web Portal: https://ximosapp.com

Legally Binding User Agreement

By accessing, installing, downloading, or using the Ximos application, software packages, or parent dashboard, you explicitly agree to be bound by these Terms of Use. If you do not agree to every provision herein, you must immediately uninstall and discontinue all use of the software.

ART 01

Eligibility & Guardian Attestation

You represent and warrant that:

  1. You are at least 18 years of age (or the legal age of majority in your jurisdiction).
  2. You are the biological parent, legal adoptive parent, or court-appointed legal guardian of the minor child whose device you configure with Ximos.
  3. You own the hardware device or possess full legal authority from the owner to install administrative device management software.
  4. You will not install this software on any device operated by an adult without their express, written, legally verifiable consent.
ART 02

Permitted vs. Prohibited Uses

Strictly Permitted Uses:

  • Supervising screen time, location, and application usage of your minor children.
  • Protecting children against online harassment, cyberbullying, or predatory interactions.
  • Locating lost or stolen family devices and executing remote emergency alarms.

Expressly Prohibited & Illegal Abuses:

  • Installing Ximos on a spouse’s, partner’s, roommate’s, or acquaintance’s device without their continuous knowledge.
  • Conducting corporate espionage, employee eavesdropping, or illicit trade secret theft.
  • Reverse engineering, decompiling, circumventing license protections, or redistributing modified proprietary binaries without authorization.
ART 03

Account Security & Pairing Credentials

You are entirely responsible for maintaining the confidentiality of your parent account credentials, device pairing tokens, and private encryption keys. Any actions executed through your paired parent dashboard are deemed to have been authorized by you.

If you suspect unauthorized access to your account or paired devices, you must immediately revoke the device pairing and trigger a "Remote Wipe" from the dashboard settings.

ART 04

Service Availability & Telemetry Accuracy

Ximos relies on third-party hardware, cellular data networks, Wi-Fi connectivity, and Android operating system power management systems. Consequently:

  • We do not guarantee 100% uninterrupted uptime or immediate WebRTC stream connection in areas with poor network coverage.
  • Certain aggressive Android battery management optimizations (e.g., Doze Mode, OEM memory killers) may delay push notifications or background sensor reads.
  • Location accuracy is subject to GPS satellite line-of-sight and cellular triangulation limitations.
ART 05

Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED UNDER APPLICABLE LAW, IN NO EVENT SHALL Ximos, ITS DEVELOPERS, AFFILIATES, OR CONTRIBUTORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF DATA, DEVICE MALFUNCTION, LEGAL DISPUTES ARISING FROM MISUSE, OR EMOTIONAL DISTRESS, ARISING OUT OF OR IN CONNECTION WITH THE USE OR INABILITY TO USE THE APPLICATION.

Critical Legal Warning on Wiretap & Surveillance Laws

Surreptitious monitoring of an individual without their consent is a serious criminal offense in most jurisdictions worldwide. The user assumes 100% legal responsibility for ensuring that their use of Ximos conforms strictly with all applicable local, state, federal, and international wiretap and privacy laws.

WARN 01

Strict Parental Supervision Scope Only

The Ximos suite is developed and distributed solely as a child safety and parental management tool. It is not licensed, marketed, or intended to be used as hidden spyware, covert trojans, or illicit surveillance equipment.

The developers and distributors of Ximos have zero tolerance for illegal spying. If law enforcement agencies present valid judicial subpoenas regarding illegal non-consensual surveillance, we will comply in full accordance with the law.

WARN 02

Not an Emergency Dispatch Replacement (911 / 112)

Ximos is NOT a certified emergency dispatch system or 911/112/999 service replacement. In the event of immediate danger, medical crises, fire emergencies, or life-threatening criminal situations involving your child, you MUST directly dial official public emergency authorities.

Emergency SOS siren alarms and geofence alerts within Ximos are software-assisted notifications that require active cellular or Wi-Fi data to function and should never be solely relied upon in life-critical events.

WARN 03

"As-Is" & "As-Available" Software Disclaimer

Ximos IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

We do not warrant that the application will meet your specific operational requirements, that operation will be error-free or uninterrupted, or that all defects can or will be corrected.

WARN 04

Indemnification Agreement

You agree to defend, indemnify, and hold harmless Ximos, its project maintainers, developers, and hosting infrastructure providers from and against any claims, liabilities, damages, losses, costs, or expenses (including reasonable attorneys' fees) arising out of your violation of these terms or your unlawful deployment of the software on unconsenting parties.

Open-Source Software & Third-Party Library Acknowledgments

Ximos is built with gratitude upon the open-source software ecosystem. In compliance with the licensing obligations of our dependencies, this page provides a comprehensive inventory of all third-party libraries, framework components, and their respective license terms.

AndroidX & Android Jetpack
Google LLC / Android Open Source Project
Apache 2.0

Core architecture components, Lifecycle, ViewModels, and modern Android runtime support libraries powering the client engine.

Google WebRTC Native Stack
The WebRTC Project Authors
BSD 3-Clause

Real-time peer-to-peer audio and video streaming engine enabling ultra-low latency screen broadcasts and dual-camera viewing.

Firebase Android SDK & FCM
Google LLC
Google / Apache 2.0

Cloud Messaging (FCM) push notification delivery, Firebase Authentication, and user-owned Firestore real-time database synchronizers.

Google Play Services & Sign-In
Google LLC
Google Open Source

Fused Location Provider for accurate GPS geofencing and Google Sign-In SDK for secure parent identity federation.

OkHttp & Okio
Square, Inc.
Apache 2.0

High-performance HTTP/2 and WebSocket client used for secure parent-child signaling and encrypted vault uploads.

Google Gson
Google LLC
Apache 2.0

Java serialization/deserialization library to convert Java Objects into JSON representation and vice versa for telemetry payloads.

Material Components for Android
Google LLC
Apache 2.0

Modular and customizable Material Design UI components for responsive child device setup screens.

Glide Image Loading Engine
Bumptech / Google
BSD / Apache 2.0

Fast and efficient image loading and caching framework for Android and smooth thumbnail generation in the Cloud Vault.

PhotoView
Chris Banes
Apache 2.0

Implementation of ImageView supporting pinch-to-zoom, multi-touch gestures, and smooth viewport panning for photo inspections.

CircleImageView
Henning Dodenhof
Apache 2.0

Circular ImageView component for Android providing rounded child avatar and disguise icon badge rendering.

ZXing Android Embedded
JourneyApps / ZXing Authors
Apache 2.0

Barcode and QR code scanning library used for instant, single-scan pairing between child devices and the parent portal.

Android Camera2 & MediaProjection
Android Open Source Project
Apache 2.0

Low-level camera control pipelines, hardware video encoding, and virtual display projection interfaces.

Chart.js
Chart.js Contributors
MIT License

Simple yet flexible JavaScript charting engine used in the parent dashboard for screen time and battery usage analytics.

Lucide Icons
Lucide Project Contributors
ISC / MIT

Community-crafted vector icon library providing clean visual indicators across the parent web interface.

NOTE

Transitive Dependencies & Disclaimer of Affiliation

Any secondary libraries or transitive sub-dependencies included as part of the above packages are distributed under their respective open-source licenses (such as MIT, Apache 2.0, BSD 2-Clause, BSD 3-Clause, or ISC).

Disclaimer of Affiliation: Ximos and its maintainers are independent entities. The use of third-party open-source libraries does not imply any official endorsement, sponsorship, or affiliation with the authors, Google LLC, Square, Inc., or the Apache Software Foundation.