XCipher - Encrypted · Silent · Sent. How your data is protected.
Effective date: 24 May 2026 · Version: 1.0.0 · Publisher: Hasnain Butt Akhtar
XCipher is a privacy-first, end-to-end encrypted messaging app for Android, iOS, web, and desktop.
Your messages and files are encrypted on your device. Their plaintext is never sent to, seen by, or stored by Hasnain Studio X.
We do not sell, share, or monetize user data.
XCipher does not collect or send the following to the developer:
No account, email, or phone number is required. We do not collect your identity.
The plaintext of your messages and files is never readable by us - it is end-to-end encrypted.
No analytics, ad tracking, or third-party telemetry SDKs are used.
No device contacts, location, or advertising identifiers are collected.
Messages and files are encrypted on your device using X25519 key agreement and AES-256-GCM. Encryption keys are generated on your device and never leave it. Only the intended recipient can decrypt your messages.
To deliver messages between devices in different locations, XCipher forwards encrypted data through a relay service. The relay is "zero-knowledge": it only ever stores and forwards ciphertext routed by public key. It cannot read your messages, your files, or your keys.
Encrypted message envelopes are deleted from the relay once they are delivered.
Your messages and contacts are stored only on your device and can be erased anytime in Settings.
Your private key is held in the platform secure enclave (Android Keystore / iOS Keychain).
A local flag stores your Pro entitlement so it works offline.
To relay encrypted messages and files.
Only to scan a contact's QR code for key exchange.
Optional, only to lock and unlock the app.
To alert you to new messages.
XCipher offers an optional Pro upgrade through Google Play Billing. Payment and transaction processing are handled by Google under Google policies.
Purchase validation is performed via a secure server function and does not involve your messages or contacts. XCipher does not process or store payment card details.
XCipher is intended for general users and is not directed to children under 13.
If this policy changes, we will update the effective date and version on this page.
For privacy questions, contact:
Hasnain Butt Akhtar
Hasnain@outlook.at
https://www.hasnainstudiox.com
XCipher, its source code, design, brand identity, and all associated assets are protected by copyright. Reverse-engineering, repackaging, decompiling, modifying signed builds, or redistributing the APK / AAB without written authorisation is strictly prohibited. Only builds published to Google Play under "Hasnain Butt Akhtar / Hasnain Studio X" are genuine.
© 2026 Hasnain Butt Akhtar. All rights reserved. · XCipher