MobileXeroz Privacy Policy

1. Who we are

MobileXeroz is operated by RealmChannel Sdn Bhd, Malaysia. If you have questions about this Privacy Policy or our handling of personal data, you may contact us at support@mobilexeroz.com.

2. What MobileXeroz does

MobileXeroz Guard helps users review security status and voluntarily open Android system Private DNS settings. It does not create or operate a VPN, route or intercept traffic, or change Private DNS automatically. Private DNS configuration remains under the user’s control through Android settings.

3. Information we collect

• Device and app identifiers: device ID, installation ID, or other app instance identifiers used to operate the service.
• App diagnostics: crash data, reliability logs, and technical diagnostics used to keep the app functioning properly.
• Account information: if sign-in is enabled, we may collect account identifiers such as email address or user ID.
• Security-status and service metadata: limited metadata used to show security status, support troubleshooting, and prevent abuse.
• Messaging and installation information: Firebase Cloud Messaging can support optional security notifications. The app keeps its FCM registration token locally on the device; current RealmChannel backend source does not receive, retain, or associate that token with your account. Firebase/Google processes messaging and installation information, including app-version and Firebase-installation identifier data, to provide delivery.

4. Information we do not collect in the submitted Play build

• SMS content
• Call log content
• Contacts
• Precise GPS location
• Accessibility event streams
• Overlay-monitoring data

5. How we use information

• To provide security-status review, voluntary Private DNS settings guidance, and app functionality
• To maintain service reliability, diagnostics, and product performance
• To investigate service abuse, fraud, misuse, or security incidents
• To communicate service notifications, product updates, or support responses
• To comply with legal or regulatory obligations where applicable

6. Legal basis and user consent

Where required by applicable law, we process data based on your consent, our contractual need to provide the service to you, our legitimate interests in operating and securing the service, and our need to comply with legal obligations.

If MobileXeroz offers cloud-assisted threat analysis that uploads selected app or device artifacts, we require explicit user authorization before that transfer occurs.

7. Sharing of information

We do not sell personal data or share it for third-party advertising or marketing. Firebase/Google acts as a service provider for optional notification delivery. We may also use service providers that help operate the app, infrastructure, customer support, or security operations, subject to appropriate controls.

8. Retention

We retain information only for as long as reasonably necessary for service delivery, support, fraud prevention, diagnostics, legal compliance, and dispute resolution. Retention periods may vary depending on the type of information and the applicable legal or operational need. If a deletion request is affected by a legacy payment, we retain only the minimum payment-related information required for legal, accounting, fraud, dispute, chargeback, or security purposes.

9. Security

We use reasonable administrative, technical, and organizational measures to help protect information against unauthorized access, disclosure, alteration, or destruction. Data transmitted between the app and our services is intended to be encrypted in transit.

10. Your choices and rights

• You may request deletion of the shared RealmChannel account used by MobileXeroz and MobileXtract. Verification does not itself complete deletion; verified requests are completed or placed into manual review within seven calendar days. Where minimum payment-related information must be retained, we disclose its category, purpose, and applicable retention period.
• You may disable notifications through your device settings. On sign-out or shared-account deletion, the app clears RealmChannel-managed local notification preferences and requests deletion of its local FCM registration token; Firebase/Google retention is governed by its own policies.
• You may stop using the service and uninstall the app at any time.

11. Children’s privacy

MobileXeroz is not intended for children under the age required by applicable law to provide valid consent on their own. If we learn that personal data has been collected from a child in violation of applicable law, we will take reasonable steps to delete it.

12. International processing

Your information may be processed or stored in jurisdictions outside your home country, subject to applicable legal protections and operational requirements.

Where Malaysian personal data is transferred across borders for cloud analysis, threat intelligence processing, or storage, we apply contractual and operational controls intended to support applicable PDPA requirements.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the app, our website, or other appropriate channels. The updated version will be effective from the date shown above.