Privacy Policy and Terms of Use
Last Updated: July 2026
1. Purpose of the Application
XMail is a Temporary Disposable Email service designed to protect your primary email address from spam, phishing, and unwanted newsletters. The application generates short-lived email addresses that can be used for registrations, testing, or any situation where you do not wish to share your personal contact information.
-
Email Generation: Users can create custom or randomized temporary email addresses.
-
Lifespan: Emails are ephemeral. Users can select a retention period of 1 day, 3 days, 7 days, or 30 days. After the chosen period, addresses and their received content are automatically deleted from our systems.
-
Real-time Notifications: The app uses Firebase Cloud Messaging (FCM) to notify you instantly when a new email arrives.
To provide its services, XMail requires the following permissions:
-
INTERNET: Required to communicate with our servers, receive emails, and perform logins.
-
POST_NOTIFICATIONS: (Android 13+) Required to alert you about new incoming emails.
-
ACCESS_NETWORK_STATE: Used to check if the device is online before attempting operations.
-
BILLING: Used for the optional "VIP" subscription service.
-
GET_ACCOUNTS / USE_CREDENTIALS: Required for the "Sign in with Google" functionality to provide a secure user experience.
4. Security and Data Protection
-
Encryption: All communications between the app and the backend are encrypted via SSL/TLS.
-
Data Storage: Received messages are stored in a secure Firestore database with strict security rules that allow only the authenticated owner to read them.
-
Automatic Deletion: All data (email address metadata and message content) is subject to an automatic TTL (Time-To-Live) policy, ensuring nothing persists after the selected expiration period (1, 3, 7, or 30 days).
5. Usage Recommendations (Critical)
XMail is NOT recommended for:
-
Financial Transactions: Never use a temporary email for banking, credit cards, or payment services (e.g., PayPal).
-
Primary Accounts: Do not use for important accounts (e.g., Government IDs, main Social Media) where you might need password recovery in the future.
-
Sensitive Personal Data: Do not receive or store highly confidential documents.
Warning: Since the email address is temporary and disposable, once it expires, you will lose access to all messages and will NOT be able to recover the address to receive password reset links.
The VIP service provides additional features (such as custom domains and ad removal). Subscription data is managed securely by the Google Play Billing system.
-
Lawful Use: You agree to use XMail only for legal purposes. Using our service for spamming, phishing, fraud, or distributing illegal content is strictly prohibited.
-
Account Management: You are responsible for any third-party accounts you create using our temporary addresses. We recommend switching to a permanent email if you decide to keep an account long-term.
-
Service Integrity: You must not attempt to circumvent app limitations or interfere with the backend infrastructure.
8. Limitation of Liability and "As-Is" Service
-
No Warranty: XMail is provided "as is" and "as available". We do not guarantee that the service will be uninterrupted, error-free, or that all incoming emails will be successfully delivered (due to third-party spam filters or network issues).
-
Data Loss: We are NOT liable for any damages, loss of data, or loss of access to external accounts resulting from the scheduled deletion of temporary emails or service expiration.
-
Third-Party Links: Emails received may contain links to external sites. We are not responsible for the content or safety of these third-party websites.
9. Data Retention and Privacy
-
Minimal Collection: We only collect the data necessary to provide the service (Google UID for authentication and FCM tokens for notifications).
-
Third-Party Providers: We use Firebase (Google) for data storage and notifications, and Google Play Billing for payments. These providers may collect technical data as per their own privacy policies.
-
No Selling of Data: We do not sell your personal information or the content of your messages to third parties.
For any questions regarding this policy, please contact us at contactappmega@gmail.com or through the official support channels in the app.