1. Introduction

Xcobean Systems Limited ("we", "us", "our") operates the Xcobean Cloud mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App.

By using the App, you agree to the collection and use of information in accordance with this policy. We process personal data in compliance with the Data Protection Act, 2019 (Kenya) and applicable international data protection laws.

2. Information We Collect

2.1 Account Information

When you log in to the App, we access information from your Xcobean hosting account:

• Name, email address, and company name
• Billing address and phone number
• Service, domain, and invoice details associated with your account

2.2 Authentication Data

• Credentials: Email/password or one-time passwords (OTP) sent via SMS or email
• Social sign-in: If you use Google or Apple Sign-In, we receive your name, email, and account identifier from those providers. We do not receive or store your Google/Apple password.
• Biometric data: If you enable biometric login (fingerprint or Face ID), authentication is handled entirely on your device. We never receive or store your biometric data.
• Passkeys: If you use passkey authentication, keys are stored securely on your device or cloud keychain. We only store a public key identifier.

2.3 Device & Technical Data

• Device type, operating system, and app version
• Push notification tokens (Firebase Cloud Messaging)
• Crash logs and performance data (collected anonymously)

2.4 Data We Do NOT Collect

• We do not collect precise location data
• We do not access your contacts, photos, or files
• We do not track you across other apps or websites
• We do not sell your personal data to third parties

3. Device Permissions

The App may request the following permissions:

Permission	Purpose	Required
Internet	Connect to Xcobean services	Yes
Push Notifications	Invoice reminders, service alerts, support replies	Optional
Biometric / Face ID	Quick login without typing password	Optional
Camera	Live chat support — share photos with agents	Optional
Microphone	Live chat support — voice calls with agents	Optional

You can revoke any optional permission at any time through your device settings.

4. How We Use Your Information

• Provide services: Display your hosting services, domains, invoices, and support tickets
• Authentication: Verify your identity and secure your account
• Notifications: Send payment reminders, service alerts, and support updates
• Live chat: Enable real-time support conversations
• Improve the App: Diagnose crashes and improve performance

5. Third-Party Services

The App integrates with the following third-party services, each governed by their own privacy policies:

Service	Purpose	Data Shared
Google Firebase	Push notifications, crash reporting	Device token, anonymous crash data
Zoho SalesIQ	Live chat support	Name, email (for chat context)
Google Sign-In	Social authentication	Email, name (from Google)
Apple Sign-In	Social authentication	Email, name (from Apple)
M-Pesa / Pesapal	Payment processing	Phone number, payment amount

We do not share your personal data with any third parties for advertising or marketing purposes.

6. Data Storage & Security

• Your account data is stored on secure servers managed by Xcobean Systems Limited
• All communication between the App and our servers uses TLS/HTTPS encryption
• Authentication tokens are stored securely on your device using platform-provided secure storage
• We implement industry-standard security measures to protect against unauthorized access

7. Data Retention

• Account data: Retained while your Xcobean account is active
• Authentication tokens: Deleted when you log out or uninstall the App
• Push notification tokens: Removed when you disable notifications or uninstall
• Chat history: Retained per Zoho SalesIQ's retention policy

8. Your Rights

Under the Data Protection Act, 2019 (Kenya) and applicable laws, you have the right to:

• Access your personal data held by us
• Correct inaccurate or incomplete data
• Delete your personal data (subject to legal obligations)
• Withdraw consent for optional data processing
• Data portability — receive your data in a structured format
• Object to processing of your data

To exercise any of these rights, contact us at privacy@xcobean.com.

9. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy in the App or sending a push notification. The "Last updated" date at the top indicates when the policy was last revised.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Xcobean Systems Limited
Purvi House, Mpaka Road
P.O. Box 4949 00200 Nairobi, Kenya
Email: privacy@xcobean.com
Phone: +254 702 324 532