Last updated: 2026-04-23
Effective date: 2026-04-23
Below we explain, in plain terms, how COSTRINITY LLC treats personal data and personal information when you run Xme Hub on Android and obtain it from Google Play. Nothing here is intended to cover a product we do not ship on Android through that channel.
Data controller / developer identity: COSTRINITY LLC
Address: 100 Canyon Vista Ln, Morrison CO 80465, US
General privacy contact: harrywashingt76@gmail.com
Data Protection Officer (DPO). Our Data Protection Officer is COSTRINITY LLC Data Protection Officer. You may contact the Data Protection Officer (DPO) about this policy or our processing at harrywashingt76@gmail.com.
Age and eligibility. Only users 18 years of age or older may use the service. There is no separate age-gate product and no independent technical age verification beyond the first-use age declaration shown in the app. We do not knowingly allow registration or purchase activity for anyone below that age.
Account model. Account creation, registration, and login are supported. Using the service is subject to your acceptance of this Privacy Policy and the Terms of Use where we surface them in the in-app confirmation experience. Login mechanisms may evolve by release; they are always used strictly to operate the functionality described.
In-app purchases. Purchases are in-app purchases fulfilled by Google through Google Play Billing. Ordinarily we do not receive full card numbers from Google; we may rely on order identifiers, entitlements, and related signals to deliver content or features and to meet Google Play obligations.
We do not sell personal and sensitive user data.
This notice governs privacy for the Android Google Play edition of Xme Hub, covering live video and audio, chat, shared media, profiles, block and report, account administration, and billing-related flows tied to Google Play. It does not describe other distribution channels unless we expressly say so in a future update.
Because we support account creation and login, we offer two ways to ask for account deletion:
Account deletion may not delete every Google Play order history field that Google retains on its side, and it may not cancel subscriptions you manage through the Play Store.
We limit collection to what is needed to operate the service, honor Data safety declarations, and stay secure. Each line below repeats the data_type, its purpose, and the required / optional quality you will also see reflected on Google Play.
Where analytics partners are involved, Device ID may appear under Analytics / Performance Monitoring, consistent with Data safety.
Where GDPR or UK GDPR applies, we rely on appropriate legal bases / lawful bases, including performance of a contract for features you request (accounts, live sessions, purchases); legitimate interests for integrity, fraud prevention, and reliability; legal obligation where statutes require retention or disclosure; and consent when we expressly ask—consent you may withdraw without undoing processing that was lawful before withdrawal.
Day-to-day purposes include delivering calling and messaging features you start, tying activity to your account where needed, verifying purchases with Google Play, investigating abuse reports, and maintaining service security.
We disclose personal information to categories of vendors when they process data on our behalf or as otherwise described here. This section maps to our Data safety responses and to the partner categories below.
Cloud Hosting / CDN. We engage Cloud Hosting / CDN infrastructure so we can work with Photos and videos uploaded by users, Media file metadata, and Storage access related file metadata to Store, deliver, and accelerate media content for core app features.
Content Moderation Service. We send User-uploaded photos and videos plus Related moderation metadata to a Content Moderation Service to Detect and prevent illegal, abusive, or policy-violating content.
Analytics / Performance Monitoring. We share Usage events, Device and app diagnostics, and Device ID with Analytics / Performance Monitoring solutions to Measure performance, troubleshoot issues, improve product quality, security, fraud prevention, and analytics.
Google Play (payments). We exchange Order and entitlement information and Transaction identifiers processed in connection with Google Play Billing with Google under Google Play (payments) to Process in-app purchases, deliver digital goods or features, and reconcile entitlements. Google also processes information under its own platform rules.
We do not intend these transfers to constitute a sale as that term may be understood in certain U.S. statutes for this offering. We do not sell personal and sensitive user data.
California law, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), can treat the word “share” or “sharing” as covering certain transfers, such as those that support cross-context behavioral advertising, and the specific definition under California law in the statute and regulations also matters. We therefore describe our third parties in this document and on Google Play. You may exercise the right to know whether we share or sell your personal information, subject to verification, by emailing harrywashingt76@gmail.com; we aim to reply within 15 business days when that timeline applies.
California residents may contact the same address for access and other CCPA/CPRA rights. We tie the word share to cross-context behavioral advertising and specific definition under California law in this Privacy Policy so the right to know whether your personal data is shared is practical, not symbolic. We do not sell personal and sensitive user data.
The Virginia Consumer Data Protection Act (VCDPA) may give Virginia residents choices about certain processing.
You can also limit ad personalization for the Android advertising identifier via Settings > Google > Ads (opt out of Ads Personalization wording may differ) or by resetting the advertising ID when your OEM menu supports it. These device opt out choices do not replace account or purchase processing through Google Play.
Camera. The Camera activates for features you open that show or capture video. The Camera is not in the background for covert capture. Disable the Camera permission in Android settings if you decline that use.
Microphone. The Microphone supports live video and audio when you join those sessions. The Microphone is not in the background for always-on listening. Turn it off in Android settings to block that path.
Photos and videos (read; Android READ_MEDIA_IMAGES / READ_MEDIA_VIDEO or scoped access as applicable). We ask for Photos and videos access so you can pick and send photos and videos in chat. This access is not in the background for silent indexing. Revoke it in Android settings if you prefer not to attach media.
Photos and videos (write / MediaStore) when saving or sharing images or clips from the app: saving or exporting items you initiate may require write access; revoking it can block saving. Runtime prompts must match your shipping build and Data safety.
Location. We do not currently collect precise location or use background location for Xme Hub in this policy version. If that changes, we will refresh this Privacy Policy and Data safety before release.
We do not sell personal and sensitive user data.
We keep records for as long as necessary to fulfill the purposes in this notice, defend or bring legal claims, maintain Google Play audit expectations, and meet security needs. Where the law demands a longer window, we follow it.
You may request deletion of your account and eligible associated data subject to exceptions. Start with Settings > Account > Delete account or visit harrywashingt76@gmail.com. The same channels support related requests.
Children. This experience is not directed at children and is consistent with our 18+ rule.
We apply administrative, technical, and organizational controls—access restrictions, encryption in transit where appropriate, vendor review, and training—to protect information. No safeguards are flawless; please keep your device locked and credentials private.
Depending on where you live, you may ask to access, delete, port, restrict, or object to certain processing. You may request correction or rectification if personal data or personal information is inaccurate or incomplete, by emailing harrywashingt76@gmail.com with enough detail for us to verify you. Many responses ship within 15 business days when that SLA applies.
Virginia (VCDPA): See the bullet opt out paths above—targeted advertising, sale of personal data, and profiling—each has its own instructions rather than a single vague line.
EU / UK / CH: You may complain to your supervisory authority and may reach our DPO at harrywashingt76@gmail.com.
Legal bases (summary). We rely on performance of a contract, legitimate interests, legal obligation, and, when applicable, consent you can withdraw.
Processing may occur where you use the app and in other countries where we or Google and subprocessors operate. Where GDPR-style transfer rules apply, we implement safeguards such as standard contractual clauses when required.
Account creation is supported. To exercise account deletion, use Settings > Account > Delete account inside the app or the website harrywashingt76@gmail.com. Account deletion might not erase purchase artifacts Google stores separately.
We do not sell personal and sensitive user data.
We may revise this Privacy Policy periodically. When we do, we will adjust the Last updated / Effective date header and may surface an in-app notice for material changes consistent with Google Play norms.
You may submit requests for access or other privacy topics through either channel where appropriate.