Read the label.
Every app on the App Store publishes a privacy label: what it collects, what it links to you, what it uses to track you. Here is XO's in full, then Instagram, TikTok, X and Snapchat as Apple shows theirs, then what happens to a post before anyone sees it.
XO's label
Apple's three headings. Nothing under the first, nothing under the third, and eight types under the second, each for one purpose: making the app work.
No advertising identifier, no analytics tool, no tracking prompt.
- Email Address app functionality To sign you in. No phone number, no real name.
- User ID app functionality Your account's id: how the app knows a request is yours.
- Device ID app functionality The push token, only if you turn on notifications: how a notification finds your phone.
- Photos or Videos app functionality What you post: yaps, stories, quiks, your avatar and media in chats.
- Audio Data app functionality Story voiceovers, quik sound and voice notes you send.
- Emails or Text Messages app functionality Your messages. We store them to deliver them; they are not end-to-end encrypted.
- Other User Content app functionality Post text, captions, comments, stickers and your bio.
- Purchase History app functionality Only if you support XO: the tier and the dates Apple confirms, for your badge. Never a card number.
Everything XO collects is tied to your account, and the label says so.
What XO does not collect
Things Apple's label asks about, where XO's answer is no.
Search History A search is answered and forgotten. Recent searches stay on your phone.
Crash Data No crash reporter. Crash numbers come from Apple, not from us.
Product Interaction No analytics: what you tap and watch is not counted.
Location The app never asks for it. A post's place is a name you type.
Contacts Never requested. Friends are people you follow who follow you back.
Financial Info Card details stay with Apple, or with the payment gateway on xo.sa/fund. We never hold them.
Date of birth The 18+ check keeps the answer, not the date.
Everything else No browsing history, advertising data, health, fitness or sensitive info.
Side by side
Apple's categories down the side, each app's own answer across. Every cell is what that app declared on its App Store page, read on the date under its column. Where XO declares a category, each app's data types in it are shown too.
| Category | XO | TikTok | X | Snapchat | |
|---|---|---|---|---|---|
| Health & Fitness | None | Linked | None | None | None |
| Purchases | LinkedPurchase History | LinkedPurchase History | LinkedPurchase History | TrackedLinkedPurchase History | LinkedPurchase History |
| Financial Info | None | Linked | Linked | None | None |
| Location | None | Linked | Linked | TrackedLinked | Linked |
| Contact Info | LinkedEmail Address | TrackedLinkedPhysical Address, Email Address, Name, Phone Number, Other User Contact Info | TrackedLinkedEmail Address, Phone Number, Physical Address, Name, Other User Contact Info | TrackedLinkedNot linkedEmail Address, Phone Number, Name, Physical Address | TrackedLinkedEmail Address, Phone Number, Name, Physical Address |
| Contacts | None | Linked | Linked | Linked | Linked |
| User Content | LinkedPhotos or Videos, Audio Data, Emails or Text Messages, Other User Content | LinkedPhotos or Videos, Gameplay Content, Other User Content, Audio Data, Customer Support, Emails or Text Messages | LinkedCustomer Support, Photos or Videos, Audio Data, Other User Content | TrackedLinkedNot linkedOther User Content, Photos or Videos, Audio Data, Emails or Text Messages | LinkedPhotos or Videos, Audio Data, Customer Support, Other User Content, Gameplay Content |
| Search History | None | Linked | Linked | Linked | Linked |
| Browsing History | None | Linked | Linked | TrackedLinked | None |
| Identifiers | LinkedUser ID, Device ID | TrackedLinkedUser ID, Device ID | TrackedLinkedDevice ID, User ID | TrackedLinkedUser ID, Device ID | TrackedLinkedDevice ID, User ID |
| Usage Data | None | Linked | LinkedNot linked | TrackedLinked | Linked |
| Sensitive Info | None | Linked | None | None | None |
| Diagnostics | None | Linked | Linked | Linked | Linked |
| Other Data | None | TrackedLinked | None | Not linked | None |
| Apple's page | Our policy Checked against the app's privacy manifest on 7 Oct 2026 | Apple's page Read 7 Oct 2026 | Apple's page Read 7 Oct 2026 | Apple's page Read 7 Oct 2026 | Apple's page Read 7 Oct 2026 |
Scroll sideways to see every app. A cell can carry more than one answer: an app may list the same category under tracking and under linked data.
What for
Apple also asks each developer why. XO declares one purpose. Each cell counts the data types the app declares for that purpose.
| Purpose | XO | TikTok | X | Snapchat | |
|---|---|---|---|---|---|
| Third-Party Advertising | None | Linked 24 | Linked 8 | Linked 9Not linked 1 | Linked 5 |
| Developer’s Advertising or Marketing | None | Linked 24 | Linked 5 | Linked 9Not linked 1 | Linked 8 |
| Analytics | None | Linked 30 | Linked 10Not linked 1 | Linked 14Not linked 2 | Linked 13 |
| Product Personalisation | None | Linked 25 | Linked 7 | Linked 12 | Linked 13 |
| App Functionality | Linked 8 | Linked 32 | Linked 22 | Linked 17Not linked 3 | Linked 19 |
| Other Purposes | None | Linked 25 | Linked 6 | Linked 8 | None |
| Apple's page | Our policy Checked against the app's privacy manifest on 7 Oct 2026 | Apple's page Read 7 Oct 2026 | Apple's page Read 7 Oct 2026 | Apple's page Read 7 Oct 2026 | Apple's page Read 7 Oct 2026 |
Every line, per app
The same pages, one app at a time: the categories and data types under each heading, then the purposes.
What Instagram declared
Declared by Instagram, Inc.. Apple's page, Read 7 Oct 2026.
Data Used to Track You
- Contact Info
- Physical Address, Email Address, Name, Phone Number
- Identifiers
- User ID, Device ID
- Other Data
- Other Data Types
Data Linked to You
- Health & Fitness
- Health, Fitness
- Purchases
- Purchase History
- Financial Info
- Other Financial Info, Payment Info, Credit Info
- Location
- Precise Location, Coarse Location
- Contact Info
- Physical Address, Email Address, Name, Phone Number, Other User Contact Info
- Contacts
- Contacts
- User Content
- Photos or Videos, Gameplay Content, Other User Content, Audio Data, Customer Support, Emails or Text Messages
- Search History
- Search History
- Browsing History
- Browsing History
- Identifiers
- User ID, Device ID
- Usage Data
- Product Interaction, Advertising Data, Other Usage Data
- Sensitive Info
- Sensitive Info
- Diagnostics
- Crash Data, Performance Data, Other Diagnostic Data
- Other Data
- Other Data Types
Purposes: Third-Party Advertising, Developer’s Advertising or Marketing, Analytics, Product Personalisation, App Functionality, Other Purposes
What TikTok declared
Declared by TikTok Ltd.. Apple's page, Read 7 Oct 2026.
Data Used to Track You
- Contact Info
- Email Address, Phone Number
- Identifiers
- Device ID
Data Linked to You
- Purchases
- Purchase History
- Financial Info
- Payment Info, Other Financial Info
- Location
- Coarse Location, Precise Location
- Contact Info
- Email Address, Phone Number, Physical Address, Name, Other User Contact Info
- Contacts
- Contacts
- User Content
- Customer Support, Photos or Videos, Audio Data, Other User Content
- Search History
- Search History
- Browsing History
- Browsing History
- Identifiers
- User ID, Device ID
- Usage Data
- Product Interaction, Advertising Data
- Diagnostics
- Performance Data, Other Diagnostic Data, Crash Data
Data Not Linked to You
- Usage Data
- Other Usage Data
Purposes: Third-Party Advertising, Developer’s Advertising or Marketing, Analytics, Product Personalisation, App Functionality, Other Purposes
What X declared
Declared by X Corp.. Apple's page, Read 7 Oct 2026.
Data Used to Track You
- Purchases
- Purchase History
- Location
- Coarse Location
- Contact Info
- Email Address
- User Content
- Other User Content
- Browsing History
- Browsing History
- Identifiers
- User ID, Device ID
- Usage Data
- Product Interaction, Advertising Data
Data Linked to You
- Purchases
- Purchase History
- Location
- Coarse Location
- Contact Info
- Email Address, Phone Number, Name
- Contacts
- Contacts
- User Content
- Other User Content, Photos or Videos, Audio Data
- Search History
- Search History
- Browsing History
- Browsing History
- Identifiers
- User ID, Device ID
- Usage Data
- Product Interaction, Advertising Data
- Diagnostics
- Performance Data, Crash Data, Other Diagnostic Data
Data Not Linked to You
- Contact Info
- Physical Address
- User Content
- Emails or Text Messages
- Other Data
- Other Data Types
Purposes: Third-Party Advertising, Developer’s Advertising or Marketing, Analytics, Product Personalisation, App Functionality, Other Purposes
What Snapchat declared
Declared by Snap, Inc.. Apple's page, Read 7 Oct 2026.
Data Used to Track You
- Contact Info
- Email Address, Phone Number
- Identifiers
- Device ID
Data Linked to You
- Purchases
- Purchase History
- Location
- Precise Location, Coarse Location
- Contact Info
- Email Address, Phone Number, Name, Physical Address
- Contacts
- Contacts
- User Content
- Photos or Videos, Audio Data, Customer Support, Other User Content, Gameplay Content
- Search History
- Search History
- Identifiers
- Device ID, User ID
- Usage Data
- Advertising Data, Product Interaction
- Diagnostics
- Crash Data, Performance Data
Purposes: Third-Party Advertising, Developer’s Advertising or Marketing, Analytics, Product Personalisation, App Functionality
Labels change. Check them yourself.
A privacy label is what the developer declared, and Apple does not verify it. Apps update theirs: what you see here is a copy, read on the dates under each column. Open each app's App Store page and read the current one.
XO's own policy, in full: xo.sa/privacy
Who sees your content
The same promise as the label, in plain words.
Machines check first.
Everything you post is accepted at once, and an automated check looks at it.
Your circle is not kept waiting.
Your followers and friends see your posts at once.
The public waits for the check.
A public post reaches people outside your circle only after the automated check passes. If the check holds a post back, it stays with your followers at most. A check never deletes anything and never punishes anyone.
A person at XO sees only what was public.
Someone at XO can only ever see what was public, never followers-only posts, friends or messages, even if they are reported. A report on something private is kept, but no one at XO can open it; whoever reports still keeps block, mute, restrict and hide.