Privacy Policy

1. Who this policy covers

X Software Development USA, LLC (XSD Company) operates UnderRose for iPhone and Android and underrose.net. This policy explains the information used to provide these services. UnderRose does not show ads or sell your personal information.

2. Information on your phone

Your profile, identity keys, contacts, messages, chat photos, call history and settings are stored on your device. Your device or backup settings may create additional copies.

• Your display name, profile photo and the content you send are shared with the people you communicate with. They can save or export their own copies.
• Camera and microphone access enable photos and calls. Access to Photos enables choosing or saving pictures. Permissions can be changed in your phone settings. Biometric checks are handled by your device; we do not receive your biometric templates.

3. Information used to deliver calls and messages

Conversation content is end-to-end encrypted. Our services process encrypted delivery data and technical information needed to connect devices, deliver messages and prevent misuse. Encryption does not make all connection information anonymous.

• This includes app identity and authentication information, availability information, IP addresses, request times, call or message identifiers and delivery status.
• Encrypted messages may be held temporarily when they cannot be delivered immediately. We do not provide a permanent cloud archive of your conversations.
• We store notification registration identifiers, device platform, notification environment and app version to deliver incoming alerts. Apple Push Notification service and Google Firebase Cloud Messaging process notification routing and event metadata. Notification requests do not include message text, chat photos or call audio/video.
• Your conversation partner may receive technical connection information, including your IP address, as needed for communication.

4. Support, diagnostics and purchases

If you contact support, we receive your email address and the information you send. Diagnostic reports and screenshots are shared when you choose to export them; review them first because they can include identifying or technical information.

• Optional tips are processed by Apple or Google. We may receive purchase confirmations and product identifiers, but not your full payment-card details. Tips do not unlock messaging, calling or privacy features.
• Website contributions are processed on PayPal’s website under its own privacy policy. We may receive payment confirmations and payer information provided by PayPal to manage contributions and support requests. We do not collect payment-card details on this website.

5. Website and service providers

Hosting and delivery providers process technical information such as IP addresses, browser information and requested pages to operate and protect the website and services. The website is hosted on Cloudflare Pages; app infrastructure also uses cloud hosting providers.

• Website fonts are served from our own site. Loading them does not make a request to Google Fonts.
• Apple and Google also process information under their own policies for app distribution, notifications and purchases.
• The development-support pages load PayPal’s button image and tracking pixel. These requests send technical information, such as your IP address and browser information, to PayPal when you view those pages, before you choose to pay. We do not otherwise include advertising trackers or analytics scripts on the website.
• We may disclose information when required by law or necessary to protect the services and people using them.

6. Retention and deletion

Different information has different retention periods. Stopping use or uninstalling the app does not immediately remove all service records.

• Local history remains until you delete it; operating-system backups or exported copies can remain separately. Settings > Privacy > Delete all data removes local messages, chat photos and call history. It keeps your contacts and UnderRose identity.
• Undelivered encrypted messages currently stop being eligible for delivery after 24 hours. Successfully acknowledged messages are removed from the active delivery queue. Expired records are cleaned when the queue is processed; expiry is not a promise that every stored copy is erased at that instant.
• Short-lived call and connection setup information normally expires within minutes. Stored availability and notification records do not all have a fixed automatic deletion schedule. Notification registrations can be removed when unregistered or rejected as invalid by the notification provider.
• Support correspondence, diagnostic attachments and operational logs are retained for handling requests, reliability, security and applicable legal obligations. There is currently no single fixed automatic deletion period for these records. Contact us to request review or removal of information we hold.

7. Your choices and requests

You can change your profile, delete local history or individual contacts, revoke permissions in your phone settings, and choose not to share diagnostics or make purchases.

• To ask about information we hold, request correction or deletion, or withdraw an optional consent, email support@underrose.net. We may need enough information to verify your request. Do not email passwords, private keys or identity documents unless a separately agreed verification process requires them.
• Where applicable law provides these rights, you can also request access or a copy, correction, portability, restriction of processing or object to processing, and complain to your local data-protection authority. We explain local deletion and the limits of uninstalling the app on the Data & Deletion page. A request cannot erase another person’s saved copies. Information required for legitimate legal or security reasons may need to be retained; we will explain relevant limits when responding.

8. Security and international use

We use encryption and access controls to protect information. No service can guarantee perfect security. Protect your device and backups. We are based in the United States; information may be processed there or in other countries where providers operate.

9. Children and policy updates

UnderRose is not directed to children under 13, or the higher minimum age required where they live. Contact us if you believe a child has provided personal information. We publish policy changes here with an updated date.