XOXO
Privacy Policy · effective 8 September 2026
XOXO is an app for two people who share a mood. This page says what the app handles, where it goes, and what it never does. It is short because the app collects very little, and because everything it does runs on Apple's own services rather than ours.
Built on Apple's services
XOXO has no servers. Every piece of it that leaves your phone goes through an Apple service under your Apple Account, and each is named here so you know what you are agreeing to.
- iCloud (CloudKit). Your name, your mood, your drawings and the couple's progress are stored in your iCloud and shared with your partner through iCloud sharing. Apple's privacy policy covers this storage.
- Apple Intelligence and Image Playground. Character drawings are generated on your phone by Apple's on-device model. The app hands it a small crop of your photo and a description of the drawing it wants; the model runs on the device. XOXO never sends the photo anywhere.
- Apple Push Notifications. When your partner changes their mood or pours a potion, Apple's push service wakes the app. The notification text is written on your phone from the shared iCloud record.
- Local network. Pairing by holding two phones together uses Apple's peer-to-peer networking. The two phones exchange your names and the iCloud sharing link over an encrypted session between them, and only while both are on the pairing screen. iOS asks for permission the first time.
- Widgets and the Lock Screen. Faces and moods for the widgets are kept in an app container on your phone that only XOXO's own widgets can read.
What the app stores
- The name you type and the mood you pick, kept in your iCloud account and shared with your partner so their phone, widgets and notifications can show them.
- Character art. Faces you draw with Image Playground or pick as a Memoji, stored in your iCloud and shared with your partner. Eye and hair colours you choose for the drawing are kept on your phone only.
- Progress. The day you paired, your daily check-ins, gems and unlocked faces. These live in the shared iCloud record the two of you own together.
- A pairing code. When you invite your partner with a code, the code and an iCloud sharing link are kept in Apple's public CloudKit database for 15 minutes or until they join, whichever comes first, then deleted.
What stays on your phone
- The photo you build your character from. It is read once, on your device, to draw the character. The photo itself is never uploaded by the app. Only the drawing is shared.
- Settings such as sound effects, your ring arrangement, and the eye and hair colours for your drawing.
Gems
Gems are earned by opening the app, never bought. There is nothing for sale in XOXO and no payment of any kind. The gems the two of you earn go into one wallet you share, and either of you can spend them on potions. Leaving the couple deletes the shared wallet; the app says so before you leave.
What we do not do
- No advertising, no ad identifiers.
- No analytics or crash-reporting SDKs from third parties.
- No accounts, passwords or email addresses. Your Apple Account signs you in to iCloud; the app never sees it.
- No selling, renting or sharing of data with anyone other than your partner.
- No purchases.
Deleting your data
Leave the couple in Settings to delete the shared record, the wallet and your progress for both of you. Delete the app to remove everything on your phone. Data in your iCloud account can also be managed from iPhone Settings → your name → iCloud → Manage Storage.
Children
XOXO is not directed at children under 13 and does not knowingly collect information from them.
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
Questions about privacy: kylechoidsc@gmail.com