XTimers by Xintech LLC Privacy Policy

XTimers is operated by Xintech LLC and uses Xin Account for shared sign-in. This policy explains the information processed for Xin Account identity services and for XTimers timers, countdowns, activity tracking, synchronization, reports, custom sounds, reminders, support, and messaging features.

Xin Account Identity and Sign-In

XTimers uses a Xin Account to identify and authenticate a user. A Xin Account is the shared identity layer for XTimers and any other connected products listed in the account controls; it is not an XTimers product account and does not contain XTimers timers, reports, sounds, or SMS data.

Xin Account processes an account identifier, email address, authentication and session records, linked sign-in provider records, recovery and security records, account lifecycle records, and the association between the Xin Account and each connected product account. Xintech LLC uses this information to authenticate the user, secure and recover the account, manage sessions and linked providers, authorize connected-product access, prevent abuse, and provide identity support.

XTimers Product and Contact Information

When a user connects XTimers to a Xin Account, XTimers processes a separate XTimers account identifier, its Xin Account association, product settings, and the contact email used for requested XTimers messages. When the user enables SMS features, XTimers also processes a verified phone number and SMS consent records. XTimers uses this product information to synchronize XTimers data, deliver requested messages, prevent abuse, and provide XTimers product support.

Timer, Task, and Report Content

Signed-in users may synchronize timer and countdown names, task sets, timer state, session history, application settings, archived snapshots, reminders, and related metadata. If a user emails or publishes a report, XTimers processes the report content, title, recipient information, and delivery or link-expiration metadata needed to provide that feature. Published report links can be configured to expire after 1, 7, 30, 90, or 365 days.

Timer content synced to your devices is stored in the app's local data area, protected by your device's own security (such as FileVault and your login password) rather than app-level encryption. Sign-in credentials and protected-sync keys are stored in the system Keychain.

Email and SMS Information

XTimers currently sends email reports, verification messages, and user-created reminders only to the signed-in user's own Xin Account email address. SMS is sent only to the user's own verified, opted-in account phone number. XTimers may process message content, delivery status, scheduled time, and provider response metadata to deliver and troubleshoot these messages.

For SMS, XTimers may store the phone number, consent status and source, consent wording and version, SMS Terms URL, Privacy Policy URL, consent timestamp, verification status, user-created reminder content, scheduled time, and delivery metadata. Users can reply STOP to opt out and HELP for help.

Custom Sounds

A signed-in user can choose to synchronize custom sound files and their names and settings. XTimers stores those files with the user's account so they are available on the user's other devices.

Automatic Activity Tracking

When the user enables automatic activity tracking, XTimers records application activity on the user's Mac. Website-hostname tracking is available only in the separately distributed XTimers Pro edition (downloaded from xintechllc.com, not the App Store); it never applies to the App Store edition. The underlying activity log is maintained on the device and is not continuously uploaded. If the user explicitly emails or publishes an activity report, the selected report content, including application names (and, in XTimers Pro, website hostnames) shown in that report, is sent to XTimers' service to perform the requested action.

Personal Calendar Overlay

When the user turns on the Personal Calendar Overlay and grants permission, XTimers reads events from the calendars the user selects in Apple Calendar, including any iCloud, Google, Outlook, or subscribed calendars already configured there. XTimers does not connect to those calendar providers directly and never requests their account credentials; Apple Calendar continues to synchronize them under the user's own settings. Event details are read on the device to display them and are not uploaded to XTimers' service. XTimers stores only the user's on/off choice, the identifiers of the calendars selected on that installation, and a record of which privacy explanation was acknowledged. XTimers never creates, edits, or deletes events in the user's calendars.

Feedback and Customer Support

Users may submit feedback anonymously or choose to attach it to their signed-in account. XTimers stores the feedback text and operational metadata needed to review the request, prevent abuse, and respond or fix problems. Anonymous feedback is not attached to an account identifier, although ordinary network request metadata may still be recorded.

Device, Usage, Diagnostic, and Network Information

XTimers may process a per-installation device identifier, push-notification token, platform, app version, build number, operating-system version, device model, service command or feature interaction, response status, response duration, and error information. These records are used to provide synchronization and notifications, operate the service, measure feature use, diagnose failures, improve performance, and prevent abuse.

XTimers receives the IP address and user-agent information used to connect to its service. For security, troubleshooting, abuse prevention, and service administration, the service may retain the IP address, a derived IP key, approximate country, region, city, postal area, network organization, request time, command name, and a stable hashed account identifier for authenticated requests. The app also submits Apple MetricKit diagnostic payloads that can contain crash, hang, CPU, disk, energy, and other performance or technical information.

How Information Is Used

Service Providers

Xintech LLC uses service providers for identity and authentication, cloud hosting and storage, email and SMS delivery, push notifications, diagnostics, and website analytics. These providers may process information only as needed to perform services for Xintech LLC, subject to their applicable terms and privacy safeguards. Email and SMS providers receive the recipient, requested message content, and delivery metadata needed to send the user's message.

No Advertising Tracking, Sale, or Marketing Sharing

XTimers does not use the collected app data to track users across apps or websites owned by other companies for advertising. Xintech LLC does not sell SMS opt-in data or other app data. Xintech LLC does not share SMS opt-in data, phone numbers, or text-message consent with third parties or affiliates for marketing or promotional purposes.

Retention and Deletion

Xin Account identity data is retained while needed to provide the shared identity and connected-product associations. XTimers product data is retained while needed to provide the connected XTimers account and its requested features. Published report content is unavailable after its selected expiration and is removed by service cleanup. Message and consent records may be retained as needed for delivery, troubleshooting, abuse prevention, and carrier or legal compliance.

Sign Out and Remove From a Device

Signing out ends XTimers access on that device and pauses authenticated synchronization. Removing XTimers or its local account data from a device removes only that device's copies. Neither choice deletes the Xin Account or the server copies of connected XTimers data.

Delete XTimers Data

A signed-in user can delete one connected XTimers account. This removes that account's active timer, snapshot, sound, feedback, reminder, message, SMS configuration, and push-registration data from the XTimers service. The Xin Account, shared sign-in identity, and any other connected product accounts remain available.

Delete Xin Account

A user can separately delete the global Xin Account. The confirmation identifies every connected product to be deleted. Xintech LLC first completes deletion of those connected product accounts, including XTimers data, and then deletes the shared Xin Account identity, authentication and session records, linked-provider records, and active recovery records. An unfinished or zero-product Xin identity can be deleted without deleting XTimers data because no XTimers account is connected to it.

Separately maintained request logs, IP information, security records, deletion receipts, and diagnostic submissions may remain after either deletion scope when needed for security, troubleshooting, legal compliance, fraud or abuse prevention, or service administration. Xintech LLC deletes or de-identifies those records when they are no longer reasonably necessary for those purposes.

Privacy Choices

Users can manage synchronization and activity-tracking features in the app, sign out, remove local data from a device, delete XTimers data while keeping Xin Account, delete the global Xin Account and every listed product, and opt out of SMS by replying STOP. See the XTimers Privacy Choices page for details.

Security

Xintech LLC uses administrative, technical, and organizational measures intended to protect XTimers information. No storage or transmission system can be guaranteed to be completely secure.

Website Analytics

This website uses Umami Cloud, a cookie-free analytics service, to count page visits and basic website actions such as App Store, download, support, privacy, terms, and email-link clicks. These website metrics are separate from the XTimers app data described above.

Contact

For questions or requests, see xintechllc.com/XTimers/support.html.

Last updated: August 21, 2026.