Privacy Policy for xCanvas

1. Information we handle

Information stored on your device

xCanvas may store the following locally so its editing features work:

• canvas projects, autosaves, text designs, custom canvas presets, and color palettes;
• images and fonts that you choose to import;
• downloaded fonts, stock images, textures, templates, thumbnails, and catalog files;
• AI-generated images and the text prompt associated with each saved AI image;
• favorites, app language, appearance, notification, camera-prompt, and feature settings;
• subscription entitlement state, such as whether Remove Ads or Remove Watermark is active.

Images that you export are written to your device's shared media storage, normally the Pictures/xCanvas folder. Exported files can remain after xCanvas is uninstalled until you delete them. Files shared through the Android share sheet are handled by the apps or people you choose to share them with.

Information you provide to online features

• AI prompts: the prompt and requested output dimensions are transmitted when you ask xCanvas to generate an image. Do not include confidential or sensitive personal information in a prompt.
• Support communications: if you email or otherwise contact us, we receive the information you include, such as your email address, message, and any attachments. The app may prefill basic app version and device information in a support email, which you can review before sending.

Information collected automatically by online services

When xCanvas connects to an online service, that service may receive network and technical data such as IP address, approximate location inferred from IP address, request date and time, app or device information, diagnostics, and security logs. The Google Mobile Ads SDK also automatically handles advertising identifiers, app interactions, ad interactions, and diagnostic data as described below.

Clipboard access

While xCanvas is in the foreground, it may check whether the Android clipboard contains an image URI so it can offer to add that image to your canvas. Clipboard content is not sent to xType's servers. If you choose to add the image, a copy is stored locally in the app.

2. How we use information

We process information to:

• provide editing, saving, importing, exporting, sharing, AR preview, and AI-generation features;
• download content selected by you and maintain local catalogs;
• display and measure ads, apply consent choices, and prevent advertising fraud;
• process and restore subscription entitlements through Google Play;
• send local AI-completion notifications when enabled;
• operate, secure, troubleshoot, and improve xCanvas and respond to support requests;
• comply with legal obligations and enforce applicable terms.

Where applicable law requires a legal basis, we rely on performance of the service you request, your consent (including advertising and permission choices), our legitimate interests in operating and securing xCanvas, and compliance with legal obligations. You may withdraw consent through the controls described below, without affecting processing already completed.

3. Online features and third-party services

Advertising and consent

xCanvas uses Google AdMob to provide rewarded and app-open advertisements and Google's User Messaging Platform to request and record advertising consent where required. Depending on your region and choices, ads may be personalized or non-personalized. Google states that its Mobile Ads SDK automatically collects and shares IP address, product interactions, diagnostics, Android advertising ID, app set ID, and related device or account identifiers for advertising, analytics, and fraud prevention. Ad requests are disabled after xCanvas recognizes an active Remove Ads subscription.

• Google Privacy Policy
• How Google uses information from apps that use its services

Google Play Billing

Remove Ads and Remove Watermark subscriptions are purchased and managed through Google Play. Google processes your payment method and financial transaction. xCanvas receives product, purchase-token, purchase-state, and entitlement information needed to confirm and provide the subscription; we do not receive your full card or bank details. Google Play may also provide us with aggregated purchase and subscription reporting.

AI image generation

When you initiate AI generation, xCanvas sends your prompt and requested image parameters over HTTPS to an xCanvas Cloudflare Worker, which uses an AI-generation provider to fulfill the request. The generated image is returned to xCanvas and saved locally if you choose to keep it. Network, security, and provider logs may be retained by the relevant infrastructure and AI providers under their policies and legal obligations. We do not send your existing canvas, imported photos, or imported fonts as part of a text-to-image request.

Cloudflare Privacy Policy

Downloadable content

xCanvas connects to xType-controlled content infrastructure at evil-ink.site to obtain catalogs and files for fonts, stock images, textures, and templates. The server and its hosting or delivery providers may process standard request logs, including IP address, requested file, date, time, and technical or security information. These logs are used to deliver content, diagnose errors, manage capacity, and prevent abuse.

Google ML Kit subject segmentation

Background-removal and subject-selection features use Google ML Kit Subject Segmentation. Image segmentation is performed on the device. Google Play services may download the machine-learning model needed for the feature. The selected image is not uploaded to xType for segmentation.

Google Play Services for AR (ARCore)

This application runs on Google Play Services for AR (ARCore), which is provided by Google and governed by the Google Privacy Policy. xCanvas uses the camera and ARCore sensor processing to display a live augmented-reality preview. xCanvas does not use ARCore Cloud Anchors, the ARCore Geospatial API, or location permission.

Android backup and device transfer

Depending on your Android and Google backup settings, Android may back up and restore some private xCanvas app data or transfer it to another device. This system service is controlled by Google and your device settings and is governed by Google's privacy policy.

4. Android permissions

Camera and notification permissions can be denied or revoked in Android Settings. Core canvas editing remains available, although the related optional feature will not work.

5. When information is shared

We may disclose information:

• to the service providers described above, only as needed to provide their functions;
• to apps, services, or people you select when you export or share content;
• when required by law, legal process, or a valid government request;
• to protect users, xType, our services, or others from fraud, abuse, or security threats;
• in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate notice and safeguards.

We do not sell personal information for money. Advertising-related transfers may be considered "sharing," "targeted advertising," or a "sale" under certain privacy laws even when no money is exchanged. Where required, xCanvas provides consent or privacy controls to limit this processing.

6. Retention and deletion

• Local app data: remains until you delete the relevant item, clear xCanvas storage, or uninstall the app. Android backups and exported files may remain separately under your device or Google backup settings.
• AI prompts and generated images on the device: remain until you delete the saved AI image or clear app data. Deleting an AI image also removes its locally saved prompt.
• Online request and security logs: may be retained for the period reasonably needed to deliver and secure the service, investigate failures or abuse, and meet legal obligations. Infrastructure and AI providers apply their own retention rules.
• Purchases: Google retains transaction and subscription records under its policies and applicable financial or tax requirements. xCanvas stores the current entitlement state locally.
• Support communications: are retained as needed to resolve the request, maintain business records, prevent abuse, and comply with law, then deleted or anonymized when no longer needed.

xCanvas has no user-account system. You can request deletion of personal information held directly by xType by contacting us. We may need information to verify and locate the relevant records, and we may retain limited information where legally required or necessary for security and dispute resolution.

7. Your privacy choices

• Use the privacy-options entry in xCanvas, when available in your region, to revisit advertising consent.
• Use Android's privacy and advertising settings to manage permissions and advertising identifiers.
• Purchase or restore Remove Ads to disable ad requests after the entitlement is recognized.
• Disable AI-generation notifications in xCanvas or Android Settings.
• Avoid AI generation and downloadable content if you do not want the related network requests.
• Delete local projects, images, fonts, and presets in the app where controls are available, or clear the app's storage.
• Manage or cancel subscriptions through the Google Play subscription center.

8. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or information about disclosures of your personal information, and to withdraw consent. You may also have the right to opt out of targeted advertising or qualifying data sales or sharing, and to appeal a decision concerning your request. We will not discriminate against you for exercising applicable privacy rights.

Residents of the European Economic Area or United Kingdom may lodge a complaint with their local data protection authority. In Greece, the supervisory authority is the Hellenic Data Protection Authority. You may exercise applicable rights by emailing FontsApp@protonmail.com.

9. Children's privacy

xCanvas is not directed to children under 18, and we do not knowingly request personal information from children. If you believe a child has provided personal information through an AI prompt or support message, contact us so we can investigate and take appropriate deletion steps. Parents and guardians should supervise children's use of online and advertising features.

10. Security and international transfers

xCanvas uses HTTPS for its network communications and Android private storage for app-internal files. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. Keep your device protected and avoid including sensitive information in AI prompts or support messages.

Our providers may process information in countries other than your own. Where required, we rely on recognized transfer mechanisms and contractual or legal safeguards. Provider processing is also subject to the terms and privacy policies linked above.

11. Changes to this policy

We may update this Privacy Policy when xCanvas, its providers, or legal requirements change. The revised date at the top identifies the latest version. Material changes may also be communicated through the app or store listing where appropriate.

12. Contact us

For privacy questions or requests, contact: