Privacy Policy

X1 Corp ("X1", "we"), located at Miami, Florida, USA, is responsible for personal data collected through https://x1corp.net and through mobile applications published under X1's developer account on the App Store and Google Play.

When X1 builds an application for a client and it is published under the client's account, the client is the data controller and X1 acts as a processor following the client's instructions. In that case the client's privacy policy, linked in the app listing, applies.

Privacy contact: info@x1corp.net.

Website:

• Contact and support forms: name, company, email, phone (optional) and message content.
• Technical data logged by the server: IP address, browser type, operating system, requested pages and date/time. Used for security and diagnostics.

Applications:

• Account data: name, email, phone and password (stored only as a hash, never in plain text).
• Content you create or upload in the app (for example orders, photos or documents), depending on each app's features.
• Diagnostics and usage: crash reports, performance metrics, device model, OS and app version.
• Push notification token, only if you allow notifications.
• Location: only if a feature requires it and you grant the system permission. You can revoke it at any time in your device settings.
• Payments: processed by Apple, Google or the processor indicated in the app (for example Stripe). X1 does not receive or store your full card number.

We do not request sensitive data (health, ethnicity, beliefs, biometrics) unless an app feature requires it; in that case we will ask for your express written consent before collecting it.

Purposes required to provide the service:

• Create and manage your account and authenticate you.
• Provide the app features you use.
• Respond to support, contact and privacy rights requests.
• Detect errors, prevent fraud and protect the security of the service.
• Comply with legal and tax obligations and lawful requests from authorities.

Secondary purposes (you can object at any time by emailing our privacy address, without affecting the service):

• Aggregated statistics to improve the apps.
• Notices about new features or relevant changes to the service.

We do not use your data for personalized advertising and we do not sell it.

In Mexico we process data under the Federal Law on the Protection of Personal Data Held by Private Parties, based on your consent and on the legal relationship arising from your use of the service. In the United States we apply the applicable federal and state laws, including the California Consumer Privacy Act (CCPA/CPRA). Where the EU General Data Protection Regulation applies, the basis is performance of a contract, legitimate interest (security and diagnostics), legal obligations or your consent.

Only with service providers who are contractually bound to use the data solely for that purpose:

• Cloud infrastructure and hosting (servers and databases).
• Crash reporting and app performance analytics.
• Email delivery and push notifications (Apple Push Notification service, Firebase Cloud Messaging).
• Payment processing (Apple, Google and the processors indicated in each app).
• Electronic invoice certification (SAT-authorized PAC in Mexico), when applicable.

We may also disclose data to authorities when required by law or court order.

Some providers are located in the United States or Mexico, so your data may be transferred between both countries. These transfers use the contractual safeguards required by applicable law.

We do not sell personal data or share it for cross-context behavioral advertising.

Our apps do not track your activity across third-party apps or websites for advertising. If an app ever needs to, it will ask for your permission through Apple's App Tracking Transparency prompt first.

This website does not use advertising or third-party analytics cookies.

• Account data and content: while the account is active.
• After a deletion request: removed from production systems within 30 days at most. Backups are overwritten in cycles of up to 90 days and are not used for any other purpose.
• Tax and billing records: for the period required by law (in Mexico, five years under the Federal Tax Code).
• Support and contact messages: up to 24 months after the request is closed.
• Record of the deletion request itself (reference, date and outcome): kept as evidence of compliance.

We use encryption in transit (TLS), hashed passwords, role-based least-privilege access control, audit logs and encrypted backups. No system is completely infallible; if a breach affects your data, we will notify you as required by law.

Depending on the law that applies to you, you may exercise:

• Mexico: rights of Access, Rectification, Cancellation and Opposition (ARCO), withdrawal of consent and limitation of use or disclosure.
• United States (California and other states with privacy laws): to know what data we hold, request deletion or correction, opt out of sale or sharing (X1 does not sell data) and not be discriminated against for exercising these rights. You may act through an authorized agent.
• European Union (where applicable): additionally, portability and restriction of processing.

To exercise them, email info@x1corp.net with your name, your account email, the right you wish to exercise and the data concerned. We verify identity using the account email. We respond within 20 business days (Mexico) or 45 calendar days (California); if the request is granted, it takes effect within the following 15 business days. There is no charge.

You can delete your account in two ways:

• In the app: Profile › Settings › Delete account.
• Without signing in, using the form in this section.

What is deleted: account data, profile, content you uploaded, notification identifiers and usage data linked to your account.

What is kept: only information we are legally required to retain (for example, issued invoices) and the record of your request. This information is locked and not used for any other purpose.

Important: deleting your account does not cancel subscriptions purchased through Apple or Google. Cancel them in your store settings to avoid future charges.

Our apps are not directed to children under 13 and we do not knowingly collect their data. If a parent or guardian finds that a child provided us data, they can request its deletion using the form on this page.

We will post any changes on this page with the update date. If a change is material, we will notify you in the app or by email before it takes effect.

Privacy: info@x1corp.net · Address: Miami, Florida, USA.

If you believe your data protection rights were violated, in Mexico you may contact the Secretaría Anticorrupción y Buen Gobierno, which assumed this function in 2025. California residents may contact the California Privacy Protection Agency.