Privacy Policy

Last Updated: July 2026

At Xplore, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website. This policy is strictly designed to comply with Google Play Developer Policies.

1. Information We Collect

We collect information you provide directly to us and information collected automatically, including your Name, email address, phone number, and profile pictures. For Travel Assistants, we also collect ID documents for identity verification. We also collect device identifiers, operating system versions, and battery status (used to warn emergency contacts during an active trip if your phone is about to die).

2. App Permissions: What, Why, and Where

To provide our services, Xplore requests certain device permissions. We are committed to transparency regarding how these permissions are used within our application:

• Prominent Disclosure on Background Location (ACCESS_BACKGROUND_LOCATION, ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION):
  What it does: Accesses your precise geographic location.
  Why and Where it is used: Xplore collects location data to enable the "Live Tracking" and SOS features for safety purposes during active trips. This app collects location data to enable sharing your real-time whereabouts with emergency contacts and your assigned guide/wanderer, even when the app is closed or not in use. Location services are utilized on the map screens, booking screens, and continuously during an active trip.


• Foreground Services (FOREGROUND_SERVICE, FOREGROUND_SERVICE_LOCATION):
  What it does: Runs a visible ongoing process in the background.
  Why and Where it is used: Used to ensure that "Live Tracking" remains active and is not terminated by the Android system while you are on a trip. It displays a persistent notification so you are always explicitly aware when your location is being tracked and shared.


• Storage and Media (READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE, READ_MEDIA_IMAGES):
  What it does: Accesses files, images, and photos on your device.
  Why and Where it is used: Used to allow you to select and upload a profile picture. For Travel Assistants, it is used to upload required KYC (Know Your Customer) identity verification documents directly from your device's gallery. This is accessed specifically in the Profile Settings and Identity Verification screens.


• Phone Calling (CALL_PHONE):
  What it does: Initiates a phone call directly from the app.
  Why and Where it is used: Used to quickly and safely connect you with your assigned guide, wanderer, or emergency contacts. This permission is triggered via the "Call" buttons on the active trip screen and SOS safety screen.


• Notifications and Alarms (POST_NOTIFICATIONS, SCHEDULE_EXACT_ALARM, VIBRATE):
  What it does: Sends push notifications, schedules precise alerts, and triggers device vibration.
  Why and Where it is used: Used to instantly inform you about new trip requests, trip acceptances, SOS emergency alerts, and important account updates. Alarms and vibrations ensure you do not miss critical safety alerts or booking confirmations even if your phone is in your pocket.


• Internet and Network (INTERNET, ACCESS_NETWORK_STATE):
  What it does: Checks your internet connection and accesses the web.
  Why and Where it is used: Used continuously across the entire app to connect to our secure servers (Firebase), load map data, sync live tracking information in real-time, and process secure payments via Razorpay.


• Boot Completed (RECEIVE_BOOT_COMPLETED):
  What it does: Notifies the app when your device has finished restarting.
  Why and Where it is used: Used to automatically restore pending notifications and ensure that safety background services (if a trip was active) can properly resume after a device reboot.

3. How We Use Your Information

• To create and manage your account securely.
• To operate our core Live Tracking, booking, and SOS safety features.
• To verify the identity of Travel Assistants to maintain a safe community.
• To process transactions securely via integrated third-party payment gateways.

4. Third-Party Services

We share necessary data with trusted third-party service providers to operate the platform:

• Firebase (Google): Used for secure database hosting, user authentication, and push notifications.
• Razorpay: Used for processing wallet recharges and payments. Your sensitive financial data is directly processed by Razorpay and is not stored on our servers.

5. Data Deletion and Retention

We retain your personal information only for as long as necessary to provide our services. You have the right to request the deletion of your account and all associated personal data at any time by contacting our support team at xplore-support@theiqnex.com or via the in-app "Delete Account" settings. Upon request, we will delete or anonymize your data unless required by law to retain it.

6. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. While we take reasonable steps to secure your data, please be aware that no security system is completely impenetrable.