Privacy Policy

1. Scope and developer identity

This Privacy Policy applies to the Android application XAPK Toolbox (the “App”), published by MRD APP WORLD (OPC) PRIVATE LIMITED (“MRD App World,” “we,” “us,” or “our”). It explains how information is accessed, processed, stored, shared, retained, and deleted when you use the App.

The App is a user-controlled utility for opening, inspecting, extracting, creating, managing, and initiating Android’s system installation flow for APK and supported XAPK package files selected by the user.

2. Privacy summary

Our core privacy practices are:

• Package files selected by you are processed locally on your device.
• We do not upload your APK or XAPK files to our own servers.
• We do not require you to create an account.
• Package history, preferences, cache, and temporary working files are stored locally.
• You control which files the App can open through Android’s file picker or sharing flow.
• Every package installation remains user initiated and is handled through Android’s system installation interface.
• The App displays ads through Google AdMob, which may collect and share certain data as explained below.

“Collected” in this policy generally means transmitted off your device. Data that is only read or processed locally is described separately so that you understand the App’s access.

3. Package files and local processing

When you choose or share an APK or XAPK file with the App, the App may access and analyze the file to provide the feature you requested. Depending on the package and selected operation, local processing may include:

• Reading the filename, file type, size, archive structure, and checksum.
• Reading package metadata such as app name, icon, package name, version, minimum and target Android version, supported architectures, split components, requested permissions, and signing-certificate fingerprint.
• Checking whether the selected package appears compatible with the current device.
• Extracting an original standalone APK from a compatible XAPK package.
• Creating an XAPK from compatible files you select.
• Temporarily staging validated package components for a user-requested installation.
• Passing package files to Android’s public system installer after you tap an install action.

These operations take place on your device. We do not receive a copy of your package files, package contents, permission lists, signing certificates, or file paths on our own servers.

4. Information stored locally by the App

The App may store the following information on your device to provide its features:

Local records may include a filename or sanitized source label, package name, version, file type, checksum, operation date, result, and output location where Android permits the App to retain that reference. This information is not uploaded to our servers.

5. Advertising, consent, and device data

XAPK Toolbox uses Google AdMob to display advertisements. Google and its advertising partners may automatically collect, process, or share information such as:

• IP address, which may be used to estimate a general location.
• Device and account identifiers, including the Android advertising identifier when available and permitted.
• App and ad interactions, such as app launches, impressions, taps, and video views.
• Device information, operating-system information, language, and network information.
• Diagnostic and performance information, such as crash, latency, hang, and energy-usage data.
• Consent signals and privacy preferences required to serve ads lawfully.

This data may be used for advertising, ad delivery, measurement, analytics, fraud prevention, security, and compliance. Ad processing may occur on servers located outside your country. Google’s handling of this information is governed by Google’s own terms and privacy policies.

Consent and privacy options

Where required, the App uses Google’s User Messaging Platform (UMP) to request or record advertising privacy choices. A Privacy options entry may be available in the App’s settings so eligible users can review or change their choices. Depending on your choice, location, age settings, and available ad inventory, ads may be personalized, non-personalized, limited, or unavailable.

You can also reset or delete your Android advertising identifier through your device’s privacy settings. Exact controls vary by Android version and device manufacturer.

6. Permissions and device access

The App uses only access needed for its implemented features. This may include:

The App does not use root access, Accessibility Service auto-clicking, silent installation, hidden installation APIs, or unrestricted “all files access” to bypass Android security controls.

7. When information is shared

We do not sell your package files or local package history. Information may be shared only in these circumstances:

• At your direction: when you choose to share or export a file through Android’s system sharing or document interface.
• With Android system services: when you initiate installation, file selection, file creation, notification, or another operating-system function.
• With Google AdMob and consent services: for advertising, consent, measurement, analytics, security, and fraud prevention as described above.
• For legal or safety reasons: if we are legally required to disclose information that we actually possess, or when necessary to protect rights, users, or the public. Because core package data stays on-device, we ordinarily do not possess those files or local records.
• Business transfer: limited business records under our control may be transferred as part of a merger, acquisition, restructuring, or sale, subject to applicable law and this policy.

8. Data retention and deletion

No account data

XAPK Toolbox does not provide account creation, so there is no XAPK Toolbox account profile to delete and no cloud package library maintained by us.

Delete local App data

You can remove locally stored information by using available in-app controls, including:

• Clear history.
• Clear cache or temporary files.
• Delete individual app-created records or files where that control is provided.
• Clear the App’s storage from Android system settings.
• Uninstall the App.

Files saved to a user-selected folder may remain after clearing app data or uninstalling the App. Delete those files through your device’s file manager or document provider.

Third-party retention

Data processed by Google AdMob or related Google services is retained according to Google’s policies, your privacy choices, and applicable law. We do not control Google’s independent retention periods.

9. Security

We use reasonable technical and organizational safeguards appropriate to the App, including app-private temporary storage, Android content URIs, user-controlled file selection, path validation for archives, checksum support, and Android’s system installation confirmation.

No method of storage, transmission, or software processing is completely secure. We cannot guarantee the security of third-party package files, your device, Android document providers, advertising networks, or information transmitted through services outside our control.

10. Your choices and privacy rights

Depending on where you live, you may have rights concerning personal data, including access, correction, deletion, restriction, objection, withdrawal of consent, or appeal.

You can exercise practical controls by:

• Choosing which package files the App may access.
• Declining the unknown-app installation permission.
• Changing Android notification permissions.
• Using the App’s privacy-options entry when available.
• Changing or deleting the Android advertising identifier.
• Clearing local App data or uninstalling the App.
• Contacting us about information under our control.

Because package files and package history are processed locally and are not uploaded to our servers, we generally cannot access, retrieve, or remotely delete that local information for you.

11. Children’s privacy

XAPK Toolbox is a general utility and is not directed to children under 13. We do not knowingly request children to create an account or submit package files to our servers. Advertising and consent configuration must be applied in accordance with the age audience selected for the App, applicable law, Google Play Families requirements, and Google advertising policies.

A parent or guardian who believes a child has provided personal information directly to us may contact us using the details below. We will review and address a valid request as required by law.

12. Third-party services and links

The App may use or interact with the following third-party services:

• Google AdMob / Google Mobile Ads: Google Privacy Policy and Advertising technologies.
• Google User Messaging Platform: used to present or manage privacy and consent choices where required.
• Android and Google Play system services: Google Privacy Policy.

A package file you choose may belong to an unrelated third-party app developer. That developer’s app and privacy practices are governed by its own terms and policy. XAPK Toolbox does not control what an installed third-party app collects or transmits after installation.

13. Changes to this Privacy Policy

We may update this Privacy Policy when the App, its SDKs, legal requirements, or data practices change. The revised version will show a new “Last updated” date. Material changes may also be communicated in the App or through the store listing when appropriate.

You should review this policy periodically. Continued use of the App after an update is subject to the revised policy, to the extent permitted by applicable law.

14. Contact us

Questions, privacy requests, or complaints may be sent to:

Please include “XAPK Toolbox Privacy Request” in the subject line and describe your request. Do not email APK/XAPK files, passwords, signing keys, or other confidential package contents.