No data collection, no network
Xfill has no servers and makes no network calls of its own. Your photos, the metadata read from them, and the cleaned copies never leave your device. There are no accounts, no analytics, no advertising, no tracking, and no third-party data sharing.
Photos and metadata
When you pick a photo (or send one to Xfill from another app), the app reads that image and its embedded EXIF metadata — including GPS location, device and camera identifiers, timestamps, and author fields — only so it can strip that information out. This processing happens on-device and in the moment; Xfill does not build a library of your photos or their data.
Permissions and why they're used
- Photos/media access (
READ_MEDIA_IMAGES/ storage): to open the photos you choose so they can be cleaned. - Media location (
ACCESS_MEDIA_LOCATION): to read a photo's stored GPS coordinates so the app can remove them. Location data is used only to delete it, and is never transmitted. - Notifications (
POST_NOTIFICATIONS): only if you enable auto-clean, to let you know when a new photo needs a one-time permission to be cleaned.
You can revoke any of these in Android Settings at any time.
Where cleaned copies go
Cleaned copies are written to the app's private cache while you share them, and — only if you tap "Save a copy" — to your device gallery (Pictures/Xfill). They stay on your device under your control. Xfill never uploads them.
Purchases (Xfill Pro)
If you buy Xfill Pro, the purchase is processed by Google Play Billing. Xfill never sees or stores your payment details; Google handles the transaction under Google's own privacy policy. The app stores only a local flag indicating whether Pro is active.
Children
Xfill is not directed to children under 13 and collects no personal information from anyone.
Changes and contact
If this policy changes, the updated version will ship with a new app version and a revised effective date. Questions or requests: scasino983@gmail.com.