Legal

Privacy policy

Effective date: 07/02/2026 · Applies to the XLeap iOS app and xleap.app

This policy describes how XLeap ("we") handles your information when you use the XLeap app for iOS. The short version: your financial data is yours, we collect as little as possible, and we never sell it.

Information we collect

We do not collect advertising identifiers, and the app contains no third-party advertising or tracking SDKs.

How we use information

We do not use your data for advertising, and we do not sell or rent it to anyone.

Where your data lives

Your data is stored on secure, industry-standard cloud infrastructure operated by trusted service providers on our behalf. It is encrypted in transit, and access is restricted so that only you can reach your own information.

Third parties

We rely on a small number of trusted service providers to host and operate XLeap. To connect your bank and financial accounts, we work with a trusted data-aggregation partner: you enter your login credentials directly with that partner, and XLeap never sees or stores your bank login credentials. These providers are permitted to handle your data only to provide services to us. We do not share your data with any other third parties except as required by law.

Data retention and deletion

Your data is retained for as long as you use the app. You can delete your data at any time from within the app, or request deletion of your account and all associated data by emailing support@xleap.app. We honor deletion requests within 30 days.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, contact support@xleap.app.

Children

XLeap is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

If we make material changes, we will update this page and note the new effective date above.

Contact

Questions about this policy: support@xleap.app.