Legal

MobileXtract Privacy Policy

This Privacy Policy explains how RealmChannel Sdn Bhd collects, uses, discloses, and protects information in connection with the MobileXtract mobile application and related services.

Effective date: 18 July 2026

1. Who we are

MobileXtract is operated by RealmChannel Sdn Bhd, Malaysia. If you have questions about this Privacy Policy or our handling of personal data, you may contact us at support@mobilexeroz.com.

2. What MobileXtract does

MobileXtract is a mobile investigation and remediation product designed to help users review suspicious device activity, view findings, generate reports, and follow guided remediation workflows.

3. Information we collect

  • Device and app identifiers: device ID, installation ID, or other app instance identifiers needed to operate the app or related services.
  • App diagnostics: crash data, technical logs, and reliability diagnostics.
  • Account information: if sign-in is enabled, account identifiers such as email address or user ID.
  • Security scan and remediation data: findings, remediation states, or related investigation metadata if those workflows are stored, synchronized, or submitted to backend services.
  • Cloud analysis uploads: if you explicitly choose a cloud-assisted investigation or malware analysis workflow, selected files, app artifacts, or forensic metadata may be uploaded for analysis.
  • Messaging and installation information: Firebase Cloud Messaging can support optional security notifications. The app keeps its FCM registration token locally on the device; current RealmChannel backend source does not receive, retain, or associate that token with your account. Firebase/Google processes messaging and installation information, including app-version and Firebase-installation identifier data, to provide delivery.

4. Information we do not collect in the submitted Play build

  • SMS content
  • Call log content
  • Contacts
  • Precise GPS location
  • Accessibility event streams
  • Overlay-monitoring data

5. How we use information

  • To provide device investigation, report generation, and remediation workflows
  • To maintain app reliability, support, diagnostics, and performance
  • To investigate service abuse, fraud, misuse, or security incidents
  • To communicate service notifications, product updates, or support responses
  • To comply with legal or regulatory obligations where applicable

6. Legal basis and user consent

Where required by applicable law, we process data based on your consent, our contractual need to provide the service to you, our legitimate interests in operating and securing the service, and our need to comply with legal obligations.

Where a workflow uploads app files, forensic artifacts, or other investigation material to cloud services for analysis, we require explicit user authorization before transfer.

7. Sharing of information

We do not sell personal data or share it for third-party advertising or marketing. Firebase/Google acts as a service provider for optional notification delivery. We may also use service providers that help operate the app, infrastructure, customer support, or security operations, subject to appropriate controls.

8. Retention

We retain information only for as long as reasonably necessary for service delivery, support, fraud prevention, diagnostics, legal compliance, dispute resolution, and investigation workflows. If a deletion request is affected by a legacy payment, we retain only the minimum payment-related information required for legal, accounting, fraud, dispute, chargeback, or security purposes.

9. Security

We use reasonable administrative, technical, and organizational measures to help protect information against unauthorized access, disclosure, alteration, or destruction. Data transmitted between the app and our services is intended to be encrypted in transit.

10. Your choices and rights

  • You may request deletion of the shared RealmChannel account used by MobileXeroz and MobileXtract. Verification does not itself complete deletion; verified requests are completed or placed into manual review within seven calendar days. Where minimum payment-related information must be retained, we disclose its category, purpose, and applicable retention period.
  • You may disable notifications through your device settings. On sign-out or shared-account deletion, the app clears RealmChannel-managed local notification preferences and requests deletion of its local FCM registration token; Firebase/Google retention is governed by its own policies.
  • You may stop using the service and uninstall the app at any time.

11. Children’s privacy

MobileXtract is not intended for children under the age required by applicable law to provide valid consent on their own. If we learn that personal data has been collected from a child in violation of applicable law, we will take reasonable steps to delete it.

12. International processing

Your information may be processed or stored in jurisdictions outside your home country, subject to applicable legal protections and operational requirements.

Where Malaysian personal data is transferred across borders for cloud analysis, investigation support, or storage, we apply contractual and operational controls intended to support applicable PDPA requirements.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the app, our website, or other appropriate channels. The updated version will be effective from the date shown above.