XPASS PRIVACY POLICY

Effective Date: 28/02/2026

Xpass (“App”, “Platform”) is operated by Darb Al Tibana For Software Development Co. LLC, a company registered in the Hashemite Kingdom of Jordan under Registration No. 78252 and National Entity No. 200208005, with its registered office in Amman, Jordan (“Company”, “we”, “us”, or “our”).

If you have any questions, contact us at: support@xpassjo.com

1. INTRODUCTION

This Privacy Policy explains how we collect, use, share, store, and protect your personal data when you use the Xpass mobile application and related services.

By using Xpass or creating an account, you agree to this Privacy Policy.

2. INFORMATION WE COLLECT

We collect the following types of user data:

2.1 Personal Information

• Full name

• Email address

• Phone number

• Profile photo

• Account login credentials

2.2 Account & Subscription Data

• Subscription plan and status

• Account preferences

• User ID

2.3 Location Data

With your permission, we collect precise location data to:

• Show nearby gyms and partners

• Improve app functionality

You can disable location access in your device settings.

2.4 Usage & Activity Data

• QR check-in logs

• Visit history

• Gym attendance

• App interactions

2.5 Payment Information

Payments are processed securely via Network International (MPGS – Mastercard Payment Gateway Services).

We do NOT store:

• Full card numbers

• CVV/security codes

We may store:

• Transaction ID

• Payment status

• Subscription duration

2.6 Device & Technical Data

Collected via Firebase (Google Cloud):

• Device type

• Operating system

• App version

• Crash logs

• Usage analytics

3. HOW WE USE YOUR DATA

We use your data to:

• Create and manage your account

• Process subscriptions and payments

• Enable gym access via QR codes

• Track usage and visits

• Improve app performance

• Provide customer support

• Send notifications and updates

• Send marketing (only if you opt-in)

• Prevent fraud and misuse

4. DATA SHARING

We may share your data with:

4.1 Partner Gyms

When you check in:

• Name

• Profile photo

• Subscription type

• Check-in history

Partner gyms act as independent service providers.

4.2 Service Providers

• Payment processing: Network International

• Cloud services: Firebase (Google Cloud)

4.3 Legal Authorities

If required by applicable laws or legal requests.

❗ We DO NOT:

• Sell your personal data

• Rent your personal data

5. DATA SECURITY

We protect your data using:

• HTTPS encryption (data encrypted in transit)

• Secure cloud infrastructure

• Restricted access controls

• Secure payment processing

However, no system is 100% secure.

6. DATA RETENTION

We retain data:

• While your account is active

• As required by law (financial/legal obligations)

After account deletion:

• Personal data is deleted or anonymized

• Some data may be retained for up to 90 days or longer if legally required

7. ACCOUNT DELETION & USER RIGHTS

You have the right to:

• Access your data

• Correct your data

• Request deletion

• Withdraw marketing consent

How to Delete Your Account:

• Use the in-app delete option, OR

• Request via email: support@xpassjo.com

What Happens When You Delete Your Account:

• Your account and profile are deleted

• Access to services is removed

• Some transaction records may be retained for legal compliance

8. DATA DELETION REQUESTS (IMPORTANT FOR GOOGLE PLAY)

Users can request deletion of their data by:

• Emailing support@xpassjo.com

• Using in-app account deletion

Requests are processed within 7–14 business days.

9. MARKETING COMMUNICATIONS

We only send marketing if you opt-in.

You can opt out anytime by:

• Disabling it in app settings

• Contacting support

10. CHILDREN’S PRIVACY

Xpass is not intended for users under 13 years old.

We do not knowingly collect data from children. If detected, it will be deleted.

11. INTERNATIONAL DATA TRANSFERS

Your data may be processed on servers خارج Jordan (e.g., Google Cloud).

By using Xpass, you consent to this transfer.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy.

Updates will be posted in the app or website.

13. CONTACT INFORMATION

Darb Al Tibana For Software Development Co. LLC
Amman, Hashemite Kingdom of Jordan
Email: support@xpassjo.com