XHelpers Pro Privacy Policy
Effective date: 2026-09-22
XHelpers Pro is a local-first macOS menu-bar utility. A web copy of this policy is available at https://xintechllc.com/XHelpersPro/privacy.html.
Scope and Controller
This policy explains how XHelpers Pro processes information on your Mac and when information may be sent to Xintech LLC or a service provider. Xintech LLC is the controller of information it receives through licensing, support communications, and its website.
XHelpers Pro does not require an account for its local tools, contain analytics, advertising, or crash-reporting SDKs, or send background usage telemetry to Xintech LLC. It offers an optional Xin account for XHelpers membership and server entitlement, described under Optional Xin Account and Sign-In below. You can use the local tools and the trial, and activate a license, without signing in. Initial license activation requires an internet connection, and the app periodically validates saved licenses as described under Network Services below. Xintech LLC does not sell personal information or use it for cross-context behavioral advertising.
Local Data
XHelpers Pro processes and stores information locally when needed to provide features you enable. Local processing is not the same as sending information to Xintech LLC. Local information may include:
- display settings, identifiers, topology, brightness behavior, custom resolution manifests and backups, shortcuts, keyboard-backlight settings, Wi-Fi switching, and Start at Login preferences;
- window and app-focus shortcuts, app bundle identifiers or paths, arranged window state, highlight appearance, and conflict-helper preferences;
- Finder settings, selected editor, terminal, compatible apps, file or folder paths, and security-scoped bookmarks needed to remember access you granted;
- Safe and archive workflow preferences and folder choices;
- installed-font family and PostScript names, selected-font preferences, and managed font files, license notices, and ownership records;
- plain-text Text Editor crash-recovery drafts containing unsaved source text, the original file path, format, language and editor-profile metadata, and update time;
- Redundancy & Clutter scan-scope paths, file identities and metadata, a local digest cache, and move-to-Trash recovery journals;
- installed-app inventory and history, app paths and signing or receipt identifiers, cleanup candidates, operation journals, preference snapshots, Trash recovery records, and system-quarantine files used by Uninstall & Clean Up and Reclaim Disk Space;
- eligible plain-text Clipboard History entries, the source app's bundle identifier, copy time, and pin state while Clipboard History is not paused;
- pointer-device identifiers and profiles, scrolling settings, key/button mappings, Audio Mixer preferences, and Live Translated Subtitles language, selected audible application, appearance, subtitle display-duration, translation-timing, and speaker-separation preferences;
- a playlist import document, written only when you choose Save Queue as Playlist… in Quick Video, containing the playlist name you type, the file paths of that queue's videos and their order, a request identifier, and the time it was created, kept so that Tonale can read it and removed after 24 hours;
- when Mac Health watching or a two-minute check is running, local process identity and names, CPU counters, memory counters, startup-volume capacity, thermal state, bounded in-memory summaries, and watching, notification, and snooze preferences;
- images, captures, PDFs, document feature warnings, in-memory edit plans, and output choices while you use Image Tools, Capture & Mark Up, or PDF Quick Actions;
- the videos you add, their audio track details, and the output folder and format you choose while you use Extract Audio;
- managed Screen Shelf image copies, thumbnails, creation time, dimensions, type, size, and file names for items you place on the shelf;
- Wi-Fi SSIDs, BSSIDs, signal and band information, and short-lived scanning or roaming state when Auto Wi-Fi Switch is enabled;
- trial markers, license timestamps, and, after activation, the license key and license-instance identifier in Keychain;
- optional AI provider profiles, selected model identifiers, readiness status, and the default-profile identifier in local preferences, with provider API keys stored separately in This-Device-Only Keychain items; and
- bounded diagnostic messages described below.
Except for the current unsaved Text Editor recovery drafts described below, XHelpers Pro does not otherwise build histories of typed text, pointer events, audio, transcripts, translations, URLs or page, media, or window titles from the selected application, or subtitle cues. It does not read or store Wi-Fi passwords. Safe passwords and derived encryption keys exist only for the operation in progress and are not stored or logged.
Clipboard History
When Clipboard History is not paused, XHelpers Pro starts monitoring the macOS general pasteboard when the app launches. It checks for changes and stores eligible plain text, the source app's bundle identifier, and the copy time in a local JSON file under the app's Application Support folder. Clipboard History does not upload entries to Xintech LLC.
Before storage, XHelpers Pro rejects entries marked concealed, transient, or automatically generated, entries whose source app cannot be identified, and entries attributed to a built-in list of common password managers. These are best-effort filters, not a guarantee that copied passwords, tokens, health or financial details, or other sensitive text from every app will be recognized. Do not copy sensitive text while history is active if you do not want it saved.
By default, unpinned history is limited to the newest 200 entries, 48 hours, one MiB per entry, and a 32 MiB aggregate text budget. Up to 100 entries may be pinned; pinned entries do not expire with the ordinary 48-hour limit. You can pause or resume capture, unpin or delete individual entries, or choose Clear All in Clipboard History. The pause choice is stored locally and applies on later launches.
Text Editor and Maintenance Records
Text Editor writes one plain-text crash-recovery draft for each window with unsaved changes about two seconds after changes settle. A draft contains the current unsaved source text, capped at 64 MiB, and may include the original file path, storage format, language selection, editor profile, and update time. Saving, returning the buffer to its saved state, or choosing Discard removes the draft. Choosing Not Now at the next recovery prompt leaves it for a later launch. A draft can otherwise remain until it is saved or discarded or local app data is removed.
Redundancy & Clutter reads file names, paths, sizes, timestamps, identities, and contents in locations you choose so it can compare files locally. Custom scan paths remain in preferences until you remove them. Its private digest index stores device and file identity, size, modification time, digest, and last-seen time, but not file paths or contents. Each time the tool opens, it prunes at most 10,000 index entries not seen for 90 days; Clear Index clears all cached entries. If you move results to Trash, private recovery journals store original and Trash paths, identities, sizes, digests, synchronized-folder provider information, timestamps, and operation state for session Undo and failure recovery. Those journals do not contain file contents and remain until local app data is removed.
Uninstall & Clean Up and Reclaim Disk Space scan local applications and storage locations to identify apps and reviewable cleanup candidates. The shared app inventory cache can include app names and paths, bundle, team, signing, application-group, Keychain-group and receipt identifiers, file identity, scan failures, and capture time. A cached scan is reused only while less than 24 hours old. Historical app identity, path, and first- and last-seen dates are kept for up to one year so possible leftovers can be suggested; Clear History removes that history and the shared cache, although currently installed apps are recorded again on the next scan. Optional Trash Watch is off by default and, when enabled, watches the local Applications and Trash directories for changes that can trigger another local inventory and leftover scan.
When you approve an uninstall or reclaim action, XHelpers Pro writes private operation and recovery records containing selected app and residue metadata, original and resulting paths, identities, sizes, choices, results, error details and timestamps. For Undo, it may also retain registration records and a copy of a preference domain that it cleared. User-owned items moved to Trash remain under macOS Trash controls. Approved root-owned items are moved to a private system quarantine under `/Library/Application Support/XHelpersPro` with their restore records. They are normally eligible for automatic permanent deletion after 30 days when the privileged helper next runs; a run may remain longer if it cannot be validated safely. Manage Quarantine lets you restore a run or delete it permanently sooner. Other uninstall and reclaim journals, recovery indexes, acknowledgements, and preference snapshots have no automatic expiry and remain until the related local app data is removed.
Finder, Archives, and Third-Party Apps
When Finder opens the context menu, the extension receives selected or targeted URLs and uses paths and basic metadata to determine which actions apply. For supported ZIP or 7z files, it may read a small bounded header to determine whether an encrypted-archive action applies. File-content reading, writing, encryption, decryption, moving, pasting, and app handoff occur only after you choose the corresponding action.
Safe and compatible archive operations run locally. This version does not upload Safe archives or provide a Xintech-hosted Safe transfer or link-sharing service. When you choose to open an item in another application, XHelpers Pro passes the path to that app. The other app's privacy policy and network behavior then apply.
Screen Tools, Images, Captures, and PDFs
Screen Tools, Image Tools, Capture & Mark Up, and PDF Quick Actions inspect and transform selected screen regions, recognized text or barcodes, images, and PDFs locally on this Mac. Screen-region recognition uses Apple's local Vision framework. Image and PDF contents are not automatically uploaded to Xintech LLC or another service. Original image and PDF inputs remain untouched; an export is written as a separate file only after you choose an output.
A selected screen region, recognized text, barcode result, or rendered image normally remains in memory unless you explicitly copy, share, pin, place it on the Screen Shelf, or save an output. Copy places content on the macOS clipboard, where other apps you use may read it. Share passes the rendered image to the macOS sharing app or service you select; that recipient's privacy policy and network behavior apply. A pin remains in memory for the pin window's session.
Screen Shelf stores a managed image copy, thumbnail, and bounded metadata in the app's Application Support folder. Shelf items expire after 24 hours by default and are also bounded to 100 items, 512 MiB total, and 100 MiB per item; older items are pruned when needed. You can delete an item, clear the shelf, or save a separate permanent copy before an item expires.
Extract Audio reads the videos you add with Apple's AVFoundation framework and writes each audio track to a new file in the folder you choose. Video files are opened read-only and are never modified, uploaded, or indexed; a partially written output is discarded when a job is cancelled or fails.
Quick Video plays local video files you open or drop with Apple's AVKit player and never uploads, indexes, or modifies them. A captured frame stays in memory until you open it in Image Tools, add it to the Screen Shelf, or copy it to the clipboard. The only Quick Video settings stored on this Mac are the playback speed, loop, shuffle, always-on-top, and window-position choices. Starting Live Subtitles from Quick Video captures XHelpers Pro's own playback audio on this Mac, under the same on-device transcription and translation rules as browser capture, for as long as the player is open.
Image files may contain location and other metadata. Image Tools lets you preserve metadata, remove location metadata, or remove all metadata for a saved copy. PDF passwords stay in memory only while the related PDF window is open and are never saved or logged. Finder's Open in PDF Quick Actions command passes the complete selected PDF list to the app and does not upload it.
Window, Pointer, Remapping, Audio, Subtitles, and Permissions
Window arrangement and highlighting operate on local windows. Pointer profiles and remapping process local input events without storing typed text. Audio Mixer uses macOS system-audio permission to adjust per-app volume locally and does not record, save, upload, or send audio content.
Quick Audio's Open File and Open With player plays only local, user-supplied MP3; M4A (AAC or ALAC); AAC/ADTS; WAVE/BWF; AIFF; AIFF-C; FLAC; and CAF files that AVFoundation validates as playable. That player does not scan a music library, import or save playlists, or accept network streams. Its queue is session-only and is discarded when the player window closes or the app quits.
For the current session, Quick Audio may read file tags and artwork and ask macOS for a thumbnail; those values stay in memory. For this local-file playback, XHelpers Pro makes no explicit network request for playback or metadata and does not persist or upload audio-file paths, the queue, playback history or position, tags, artwork, or thumbnails. A file-provider or mounted-volume implementation may perform system-managed retrieval when you open a file stored there.
Installing XHelpers Pro only makes it available in Open With for these exact formats. Becoming their default player is a separate opt-in action in Audio Player Settings, and the prior defaults can be restored while XHelpers Pro still owns them. The only Quick Audio data kept in preferences is volume, window state, the audio-effects chain chosen for each output device, and the shuffle and repeat choices, plus a default-handler predecessor ledger containing application-handler identities rather than audio paths. Playback adds no new macOS privacy permission.
Music & Playlists is no longer part of XHelpers Pro. That feature, with its library, saved playlists, Apple Music connection, YouTube entries and the optional YouTube account connection, moved to Tonale, a separate Xintech LLC app that has its own privacy policy. The Music & Playlists row in the XHelpers Pro menu opens or brings forward Tonale when it is installed. When Tonale is not installed, XHelpers Pro offers to install it. If you agree, it downloads Tonale's update feed from xintechllc.com and the Tonale disk image from GitHub, checks that the download is signed by Xintech LLC, copies Tonale to your Applications folder, and opens it. These downloads send only what any web request sends, such as your IP address; XHelpers Pro sends no account, library, or usage information with them. XHelpers Pro keeps no music library, playlist database, or library recovery snapshots, does not ask for Apple Music access, holds no YouTube data, YouTube account connection, or browser-extension connection, and makes no music or playlist metadata request to YouTube, Google, or Xintech LLC's DOL service. It does not read Tonale's library, playlists, or settings. How Tonale handles that information is described in Tonale's own privacy policy.
Quick Video's queue stays in memory and is discarded when the window closes or the app quits. When you choose Save Queue as Playlist…, XHelpers Pro writes one playlist import document in its own Application Support folder, containing the playlist name you type, the file paths of that queue's videos in their queued order, a request identifier, and the time it was created, and then asks macOS to open that document, together with those video files, in Tonale so that Tonale can read them. Nothing else from the queue is written down: XHelpers Pro saves no tags, artwork, durations, or security-scoped bookmarks for it, never copies or changes your video files, and does not send the queue or its file paths to Xintech LLC. XHelpers Pro deletes its own import documents older than 24 hours the next time you save a queue; reading their modification times for that cleanup is declared in the app privacy manifest under Apple's required reason 3B52.1. What Tonale keeps after an import is described in Tonale's own privacy policy.
Live Translated Subtitles runs only after you explicitly start a session. It captures audio from the selected audible application, transcribes it with Apple's on-device speech model, translates finalized phrases and optional tentative previews with Apple's on-device translation model, and displays cues in a click-through overlay. Captured audio, transcripts, translations, URLs or page, media, or window titles from the selected application, and cues are not written to files, preferences, logs, diagnostics, analytics, the clipboard, Xintech LLC, or an AI provider. They are cleared when the session stops. Application selection covers all audio attributed to that application, not a single window, tab, or media item, so simultaneous audio from the selected application may be mixed.
When you start subtitles from a video playing in XHelpers Pro's own player, the audio comes from that player inside XHelpers Pro rather than from a capture of this application's audio process, so only the item you are playing is listened to. Subtitles started for another application, and subtitles for audio played by the Audio Player, still use the system audio capture described above. Nothing about which path is used changes what is kept: captured audio, transcripts, translations, and cues are never written to files, preferences, logs, diagnostics, analytics, the clipboard, Xintech LLC, or an AI provider.
The optional Try to Separate Different Speakers setting estimates anonymous speaker changes using a bounded recent-audio window and session-only acoustic clustering inside XHelpers Pro. It does not identify people. Temporary acoustic signatures and speaker identifiers remain in memory, are never saved, logged, or transmitted, and are cleared when the subtitle session stops. Results are best effort and may be inaccurate for overlapping voices, music, or short phrases.
Depending on enabled features, macOS may request Accessibility, Input Monitoring, Screen Recording, System Audio Recording, Speech Recognition, Location, Automation, or Full Disk Access. Automation may be used for a user-requested Finder or front-window action, Rectangle conflict cleanup, or restart/shutdown. A privileged helper may apply display or custom-resolution changes requiring administrator authorization. These permissions and helpers are used only for the local feature or action you enable and can be reviewed or revoked in macOS System Settings.
Mac Health
Mac Health watching is off by default. When you enable it, or explicitly start a two-minute check, XHelpers Pro reads local CPU and memory counters, measurable process identity and names, startup-volume capacity, and thermal state. It uses that evidence on this Mac to explain sustained slowdown signals and offer safe handoffs such as Activity Monitor, Startup & Background Inspector, Reclaim Disk Space, or System Settings.
XHelpers Pro keeps bounded recent evidence and diagnostic summaries in memory and clears active samples when watching stops or the app quits. It does not persist or upload continuous process, CPU, memory, storage, or thermal samples. Watching, notification, and snooze choices remain in local app preferences. Mac Health alert text may identify a likely contributing app and summarize local CPU or memory observations. macOS Notification Center may retain that delivered text according to your system notification settings.
Bring Your Own AI
Bring Your Own AI is optional and supports only OpenAI Codex SDK, Anthropic Claude Agent SDK, Grok Build over its local Agent Client Protocol runtime, and the OpenAI Responses API. A local agent runtime is a local harness; it does not mean the model runs offline or on your Mac.
XHelpers Pro does not distribute or download the Codex SDK, Claude Agent SDK, or either SDK's CLI. Those two provider options are enabled only when XHelpers Pro validates the exact reviewed SDK and vendor-signed executable already installed in a supported global npm location on this Mac. The OpenAI Responses API option is separate and does not require local ChatGPT, Codex, or an agent SDK.
XHelpers Pro stores an API key you enter in a separate This-Device-Only Keychain item and does not place it in preferences, app resources, diagnostics, or command arguments. If you select Grok's runtime-managed sign-in, an explicit test may read the current user's protected Grok authentication file and copy it only into the test's short-lived, private runtime directory. The copy is removed when that process exits.
Test AI runs only when you choose it. It sends a fixed, minimal instruction to the selected provider to check authentication and model access, so it may incur provider usage or charges. The test does not send your files, Finder selections, workspace, free-form text, XHelpers Pro diagnostics, or product data; it disables agent tools and local product actions. XHelpers Pro keeps only bounded readiness metadata, not the provider response or a transcript.
The selected provider receives the credential or runtime authentication, fixed test instruction, selected model identifier, and ordinary network metadata such as IP address and time. Provider processing, retention, billing, and account terms are controlled by OpenAI, Anthropic, or xAI as applicable. Xintech LLC does not receive the provider request or response. Selecting a default AI grants no permission to read files, run commands, or control XHelpers Pro features, and this version includes no general chat or background AI task.
Diagnostics and Support
XHelpers Pro writes messages to Apple's local unified log and keeps a bounded app-local diagnostic log. Messages may include app state, versions, display identifiers or topology, brightness and DDC results, power and wake events, Wi-Fi SSID, BSSID, signal and roaming decisions, and feature errors. They are not intended to include file contents or paths, clipboard entries, captured pixels, recognized text or barcode results, Screen Shelf contents, image or PDF contents, PDF or Safe passwords, typed text, audio, transcripts, translations, URLs or page, media, or window titles from the selected application, subtitle cues, acoustic speaker signatures, or speaker identifiers. Mac Health release messages use bounded reason and coverage codes and are not intended to contain app or process names, bundle identifiers, executable paths, notification text, or per-app CPU or memory measurements.
The app-local log is limited to 800 entries, 4,096 characters per message, and approximately 8 MB. It rolls over as limits are reached and otherwise remains until local app data is removed. Apple controls unified-log retention.
Report a Bug prepares an editable email draft. It normally uses relevant entries from the previous 20 minutes and may look back up to 24 hours, with a maximum of 180 lines and 16,000 characters. Nothing is sent unless you send the email, and you can remove details first. If sent, Xintech LLC and involved email providers receive the address, message, attachments, and details you included.
Network Services
Before a Live Translated Subtitles session starts, macOS may download a selected speech or translation language model from Apple. No captured application audio, transcript, translation, URL, title, cue, or acoustic speaker signature is included in a model download. Speaker separation uses no network model. Once the language models are installed, the active subtitle pipeline runs on-device and XHelpers Pro sends no subtitle content over the network. Apple may process non-content operational metadata from its system frameworks under Apple's terms; XHelpers Pro does not author or receive that telemetry.
Font Manager reads installed font family and PostScript names locally to avoid conflicts. When you choose Install, XHelpers Pro downloads the selected, revision-pinned Google Fonts files and license notices over HTTPS from GitHub's raw-content service. It verifies their expected sizes and SHA-256 hashes, stores managed copies, notices, and ownership records in the app's Application Support folder, and registers the fonts persistently with macOS. When a Remove Font operation succeeds, XHelpers Pro unregisters the affected fonts and deletes their managed copies, notices, and ownership records. GitHub and its delivery providers receive ordinary request metadata, including IP address, time, user agent, and requested URLs, and process it under their own terms.
When you explicitly use Install Apps & Dev Tools, XHelpers Pro may ask Apple's software-update service to install Apple's Command Line Tools. If Homebrew is absent, it downloads a version-pinned Homebrew source archive from GitHub over HTTPS, verifies its SHA-256 hash, and installs it under `/opt/homebrew`. It then runs Homebrew to download and install only the apps or developer tools you select. Those package downloads may contact Homebrew, GitHub, a selected package's vendor, or other delivery providers. XHelpers Pro sets `HOMEBREW_NO_ANALYTICS=1` and `HOMEBREW_NO_AUTO_UPDATE=1` for Homebrew commands it starts. This suppresses Homebrew analytics and Homebrew's automatic update during those commands, but does not control a provider's own logging or network behavior or prevent installed software from later updating itself. These services receive ordinary request metadata such as IP address, time, user agent, and requested package or URL, and process it under their own terms.
Installing apps or developer tools can add or change applications, command-line tools, supporting files, and system locations. If its enabled shell-environment option is left on, XHelpers Pro appends Homebrew's standard `shellenv` line to `~/.zprofile`; you may turn that option off before installing. Installed software, `/opt/homebrew`, and that optional profile line remain until you remove or edit them.
Sparkle may automatically contact the public HTTPS update feed or do so when you choose Check for Updates. Requests include ordinary network metadata such as IP address and date and time, plus a user agent that identifies the app and Sparkle versions. XHelpers Pro does not enable Sparkle's optional system-profile submission. Hosting and delivery providers, including GitHub Pages where used, may process the request.
License activation, automatic validation, and deactivation use Lemon Squeezy, Xintech LLC's licensing and merchant-of-record provider. After a key is saved, validation normally occurs shortly after launch and approximately every 12 hours, subject to an offline grace period. Requests may include the license key, product or variant, instance identifier, an instance name based on the local computer name, IP address, and time. Lemon Squeezy returns entitlement-related license, product, order, and customer metadata.
When you explicitly choose Test AI, XHelpers Pro contacts the selected OpenAI, Anthropic, or xAI service as described in Bring Your Own AI above. It does not test providers in the background.
When Screen Tools or Live Translated Subtitles needs an Apple speech or translation language model that is not installed, macOS may ask you to download it from Apple. The download does not contain your captured pixels, recognized text, captured application audio, transcript, translation, URL, title, subtitle cue, or acoustic speaker signature.
When you use the optional Xin account, XHelpers Pro contacts Supabase, Xintech LLC's identity provider, for sign-up, sign-in, sign-in codes, password recovery, Google and Apple identity exchange, and session refresh, and contacts Xintech LLC's XHelpers account service for account creation, XHelpers enrollment, membership and entitlement status, license linking, and deletion. These requests carry the current session or operation, the values you enter for that step, and ordinary request metadata such as IP address and time. Confirmation, sign-in code, and recovery messages are delivered by Xintech LLC's email provider. No account request is made until you open Account and start a sign-in or account action.
Website Analytics
The XHelpers Pro website uses Umami Cloud, provided by Umami Software, Inc., to count visits and measured link actions. Umami may process page path and search, referrer, title, browser, operating system, device type, screen size, language, campaign parameters, approximate location derived from IP address, and measured event names and target links. Umami states that it does not use analytics cookies or conventional fingerprinting and does not store IP addresses. Website analytics are retained according to Xintech LLC's current Umami Cloud plan and account settings; the configured retention is currently up to six months. See https://umami.is/privacy.
Retention and Your Choices
Local preferences remain until changed or removed. Keychain license and AI credential data remain until removed or related app data is cleared. Removing an AI profile makes its credential reference unreachable and requests deletion of the corresponding Keychain item. Xintech LLC retains support correspondence only as reasonably needed to answer requests, maintain business records, prevent abuse, and comply with law. Service providers retain data under their own terms.
Fonts installed by Font Manager and their managed copies, license notices, and ownership records remain until you successfully use Remove Font or remove them another way. Deleting only the app-data folder may leave fonts registered with macOS; use Font Manager's removal command before clearing its records if you want XHelpers Pro to unregister them.
Mac Health's in-memory evidence and summaries are cleared when watching stops or XHelpers Pro quits. In-memory PDF passwords are cleared when their PDF window closes. Delivered notifications are retained by macOS according to the notification settings you control.
Unpinned Clipboard History entries follow the 200-entry, 48-hour, and 32-MiB defaults described above; pinned entries remain until unpinned, deleted, or cleared. Screen Shelf items follow the 24-hour and quota limits described above. Clipboard contents remain under macOS control after a copy, and a sharing app or service retains shared content under its own terms. You can pause or clear Clipboard History and delete or clear Screen Shelf items from their windows.
Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, or portability and to complain to a competent data-protection authority. Because most app data never leaves your Mac, Xintech LLC may not possess data responsive to an app-data request; Xin account, XHelpers membership, entitlement, and sign-in identity records are the exception when you create an account.
If you create a Xin account, those records remain with Xintech LLC and Supabase until you delete them, and signing out clears only this Mac's session. What each deletion removes, and the periods that apply afterwards, are described under Account Deletion and Data Requests below.
Optional Xin Account and Sign-In
The Xin account is optional. A Xin account is the Xintech account that XHelpers Pro shares with other Xintech products. You can use the local tools and the trial, and activate a license, without an account or signing in. Initial license activation requires an internet connection, and the app periodically validates saved licenses as described under Network Services above. Account features open from Account in the XHelpers Pro menu and run only when you start them.
When you sign in, XHelpers Pro supports four methods: email with a password, an emailed sign-in code, Google, and Sign in with Apple. Password sign-up confirmation, password recovery, and passwordless sign-in codes are separate email messages.
Supabase, Xintech LLC's identity provider, processes the email address or the Google or Apple identity you choose, provider identifiers, authentication events, session data, and ordinary request metadata such as IP address and time. XHelpers Pro never asks for or stores your Google or Apple password.
Session, callback-attempt, PKCE, and narrowly scoped recovery state are stored only in Keychain items on this Mac that do not synchronize to iCloud or another device. Passwords, one-time codes, and OAuth tokens are not kept in the interface or in logs. Google and Sign in with Apple both run in the system browser: XHelpers Pro opens Supabase's authorization page there, you authenticate with Google or Apple on that page, Supabase completes the provider exchange at its own callback, and XHelpers Pro receives only a single-use authorization code at its own scheme. XHelpers Pro never receives or stores an Apple authorization code, an Apple identity token, or an Apple refresh token.
Supabase owns provider identity and session convergence. When its configured provider contract confirms the same verified email address, two provider identities may converge on one user. Neither XHelpers Pro nor the XHelpers account service looks up an account by email address or performs a custom merge. Adding a Google or Apple identity that uses a different email address is a separate action you start while signed in, and Manage Sign-In Methods shows the authoritative list of linked methods.
A sign-in identity, a Xin account, an XHelpers membership, local activation, and server entitlement are separate states, and creating one never silently creates the next. Supabase stores and authenticates the sign-in identity and its sessions. Xin stores the account and the product memberships it shows. The XHelpers product service stores a product-local membership identifier, the active membership generation, lifecycle state, and server entitlement state. Local activation stays the authority for local Pro features and creates no account, membership, or server entitlement.
If you choose Link Local License, XHelpers Pro sends the already-activated license key and its activation instance for provider verification only. Only the verification outcome and the resulting server entitlement state are stored. The raw license key and instance value are not stored in Xin account records, XHelpers operation records, logs, analytics, or release evidence.
If you use Sign in with Apple with Hide My Email, Apple gives Xintech LLC a private relay address instead of your own address, and account email reaches you through Apple's relay; turning that relay off in your Apple ID settings stops account email from arriving. Apple, Google, and Supabase control their own availability, verification, and recovery. If you lose access to every linked sign-in method, you lose access to the account and to the membership and entitlement behind it, because Xintech LLC cannot reassign, merge, or recover an identity from an email address, a display name, a receipt image, or knowledge of a license key. Signing out clears this Mac's session and leaves server data and local activation unchanged.
Account Deletion and Data Requests
The account window offers three different terminal operations, and each one asks you to type its exact name before it starts:
- Delete XHelpers Data deletes the XHelpers membership, the server entitlement, and the XHelpers data held for you on the server. It leaves the Xin account, other product memberships, the sign-in identity, this Mac's session, local files, and local Pro activation intact.
- Delete Xin Account Everywhere fences and deletes every product membership shown in the account, deletes the Xin account and the sign-in identity, and clears this Mac's session. Deleting an Apple-linked sign-in identity removes it at the identity provider but does not revoke the authorization on Apple's side; remove XHelpers from Sign in with Apple in your Apple ID settings if you want that. It does not deactivate the local license or erase local-only data.
- Delete Sign-In Identity applies when you have signed in but no Xin account was created. It deletes that sign-in identity without creating an account only to delete it.
Each of these needs a fresh sign-in with a method that is available and already linked to the current identity. Once a deletion is accepted it is irreversible.
After a deletion is accepted, XHelpers Pro keeps the minimum operation identity and a random resume credential needed to finish it. An interrupted, offline, or signed-out deletion is resumed as the same operation instead of being restarted as a new one, and those values are removed when the operation ends.
After a deletion completes, the account service keeps a minimal record of it indefinitely: the deleted state, timestamps, non-reversible digests of the account, membership, and entitlement identifiers, and the opaque provider subject of the sign-in identity. That record holds no email address, name, or content; it exists so that a deletion is never run twice, so that a deleted account, membership, or entitlement is not brought back, and so that support can confirm a deletion was completed. XHelpers entitlement records are removed outright when XHelpers data is deleted, and aggregated, non-identifying provider-link statistics are deleted after 90 days. Operational request logs used for service monitoring and abuse prevention, which contain a hashed identifier, the requesting IP address, coarse location derived from it, the user agent, the request path, and the time, are retained indefinitely and are not deleted when an account is deleted. Supabase keeps its own authentication logs under its policy. Xintech LLC does not keep backup snapshots of the account service, so there is no backup copy from which a deleted account could be restored.
XHelpers Pro has no in-app account export and there is no Xin export file. To ask for access to, correction of, or deletion of information Xintech LLC holds about you, write to admin@xintechllc.com; requests are handled through that address.
Contact
Questions about privacy or requests concerning information held by Xintech LLC can be sent to admin@xintechllc.com.