TorrentX

1. Who we are

This Privacy Policy explains how Autcust.Dev ("we", "us", "our"), based in India, handles information in connection with the TorrentX Android application ("TorrentX", "the app") distributed on Google Play.

For the purposes of the EU and UK General Data Protection Regulation, Autcust.Dev is the data controller for the limited data described in this policy. This policy covers the app only; it does not cover any third-party website, tracker, or content you may reach through it.

You can reach us at any time at autcust@gmail.com.

2. Summary

Reading the whole policy takes a few minutes. If you only want the short version: everything about what you download stays on your phone, and the only data that leaves it is ad requests and crash diagnostics.

3. What TorrentX does

TorrentX is a BitTorrent client and media downloader for Android. It provides torrent transfers through a native jlibtorrent engine, media downloading powered by yt-dlp, playback and 4K/HDR muxing via Media3/ExoPlayer and FFmpeg, sequential downloading, background transfers via WorkManager and foreground services, and home-screen widgets for download status.

TorrentX does not host, index, provide, or recommend any content. All torrents, magnet links, and media URLs are supplied by you.

4. Information we collect

The table below lists every category of data that leaves your device, why it is processed, and who receives it. It matches the Data Safety declaration on our Google Play listing.

Data collected by or through TorrentX

No data in this table is sold. None of it identifies you by name, and we do not attempt to link it to your identity.

5. Advertising (Google AdMob)

TorrentX is free to download and use. To cover hosting and development costs, the app shows a small banner ad on some screens using Google AdMob. There are no interstitial, video, or rewarded ads, and no ads are shown over system UI or in a way designed to cause accidental clicks.

How ads use data

Third-party vendors, including Google, use cookies and mobile identifiers to serve ads based on your prior use of this app or other apps and websites. Google's use of advertising identifiers enables Google and its partners to serve ads to you based on your visit to TorrentX and/or other sites and apps on the internet.

• Google may collect and process your advertising ID, IP address (and the coarse location derived from it), device and app information, and ad interaction events in order to select, deliver, cap, and measure ads.
• How Google uses this data is described in "How Google uses information from sites or apps that use our services" and in Google's Advertising Privacy Policy.
• We do not receive, store, or have access to this ad data ourselves. We see only aggregate, non-identifying revenue and impression reports in the AdMob dashboard.
• We do not use ads to build profiles of what you download, and we never pass torrent names, file names, magnet links, or URLs to any ad network.

Consent and personalization

• Before requesting any ad, TorrentX uses Google's User Messaging Platform (UMP) to obtain consent where required by law — for example, under the EU/UK GDPR and the ePrivacy Directive for users in the European Economic Area, the United Kingdom, and Switzerland.
• If you decline consent for personalized ads, the app requests non-personalized ads instead. Non-personalized ads still use limited data such as coarse location and contextual signals for frequency capping, ad reporting, and fraud prevention.
• You can change your choice at any time from Settings → Privacy → Ad consent inside the app, which reopens the consent form.
• A current list of Google's certified ad technology providers is available at business.safety.google/adspartners.
• You can opt out of personalized advertising across apps at adssettings.google.com, or by turning on Delete advertising ID / Opt out of Ads Personalisation in your Android Settings → Privacy → Ads.

6. Crash reporting and diagnostics

To keep TorrentX stable — particularly its native C++ torrent engine — we use Google Firebase Crashlytics, including native/NDK crash reporting. When the app crashes, the following is collected automatically:

• Crash logs and stack traces showing which code path failed.
• Device diagnostics such as device model, Android version, orientation, and available memory or storage at the moment of the crash.
• An anonymous installation UUID, randomly generated on your device and used only to count how many installations a given bug affects.

This data is transmitted over an encrypted connection, processed on Google's servers, and used solely to fix bugs and improve stability. It is never used for advertising, cross-app tracking, or profiling. Firebase's handling of this data is described in the Firebase Privacy and Security documentation.

7. What we never collect

• Names, email addresses, phone numbers, or any other direct personal identifiers.
• Accounts or logins — TorrentX has no sign-up and no cloud account of any kind.
• The contents, names, or hashes of the torrents, files, or media URLs you use.
• Your browsing history, contacts, calendar, camera, microphone, SMS, or call logs.
• Precise GPS location.
• Any data sold to third parties, in any circumstance.

8. Handled only on your device

The following never reaches our servers, because we do not operate any:

• Magnet links, .torrent files, and media URLs you add or open with TorrentX.
• Peer-to-peer connections required by the BitTorrent protocol.
• Download progress, resume data, queue state, and settings, stored in a local SQLite database.
• Media files you play, mux, or save through the app.

An important note about BitTorrent: the protocol is public by design. When you download or seed a torrent, your IP address is visible to trackers, DHT nodes, and every other peer in that swarm. This happens between your device and those peers, not through us, and no torrent client can prevent it. If this matters to you, consider a VPN or the app's proxy settings.

9. Legal bases for processing (EU/UK GDPR)

• Consent (Art. 6(1)(a)) — personalized advertising and the storing of, or access to, information on your device for advertising purposes. You may withdraw consent at any time via the in-app ad consent screen.
• Legitimate interests (Art. 6(1)(f)) — crash reporting and stability diagnostics, non-personalized ad delivery, frequency capping, and fraud and abuse prevention. Our interest is in keeping the app working and sustainably free; the data involved is minimal and not used to identify you.
• Performance of a contract (Art. 6(1)(b)) — providing the app's core download and playback features, which run locally on your device.

10. Data retention

• Crash data: retained by Firebase Crashlytics for up to 90 days for detailed reports, with aggregated, non-identifying statistics kept longer.
• Advertising data: retained by Google under its own retention schedules, described in Google's Privacy Policy.
• Support emails: kept only as long as needed to resolve your request, then deleted.
• Local app data: stays on your device until you delete it. Uninstalling the app or clearing its storage removes it permanently.

11. International data transfers

Google processes advertising and crash data on servers in the United States and other countries. Where data is transferred out of the European Economic Area, the United Kingdom, or Switzerland, Google relies on legal transfer mechanisms including the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. Details are in Google Ads Data Processing Terms.

12. Your rights and choices

Everyone

Because we hold no account and no personal identifiers, the most direct way to remove your data is to clear the app's storage or uninstall it. You can also reset or delete your advertising ID in Android settings at any time, and change your ad consent inside the app.

EU, UK, and Switzerland (GDPR)

You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority. Write to autcust@gmail.com and we will respond within 30 days. Note that because crash and ad data is pseudonymous, we may need additional information — such as your installation UUID from the app's About screen — to locate any record, and under Art. 11 GDPR we may be unable to act on a request we cannot match to any data.

California (CCPA/CPRA)

We do not sell personal information for money. However, if you consent to personalized ads, the use of your advertising ID for interest-based advertising may qualify as "sharing" for cross-context behavioral advertising under the CCPA as amended by the CPRA. To opt out, decline personalized ads on the in-app consent screen, or enable Opt out of Ads Personalisation in Android settings. California residents also have the rights to know, delete, correct, and to not be discriminated against for exercising those rights.

India (DPDP Act, 2023)

If you are in India, you may request access to, correction of, or erasure of your personal data, and may raise a grievance with us at autcust@gmail.com. We will acknowledge grievances within a reasonable period.

13. Children's privacy

TorrentX is not directed to children. It is intended for users aged 18 and over, is not enrolled in Google Play's Designed for Families programme, and does not target a child audience in its content, design, or advertising.

We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction, such as 16 in parts of the EEA). If you believe a child has provided us with information, contact autcust@gmail.com and we will delete it.

14. Security

All data sent to Google's advertising and crash-reporting services travels over encrypted HTTPS/TLS connections. Downloads and settings are stored in your app's private storage sandbox, which other apps cannot read. TorrentX supports protocol encryption and SOCKS5/HTTP proxies for torrent traffic.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If a data breach affecting your data ever occurs, we will notify affected users and the relevant authorities as required by law.

15. Android permissions and why they are needed

• INTERNET — connect to peers, trackers, media servers, and ad/crash services.
• ACCESS_NETWORK_STATE / ACCESS_WIFI_STATE — detect connectivity and enforce Wi-Fi-only mode.
• CHANGE_NETWORK_STATE / CHANGE_WIFI_MULTICAST_STATE — support local peer discovery (LSD) over multicast.
• NEARBY_WIFI_DEVICES / ACCESS_LOCAL_NETWORK — discover peers on your local network on newer Android versions. This is not used to determine your physical location.
• READ_MEDIA_VIDEO / READ_MEDIA_AUDIO / READ_MEDIA_IMAGES / READ_MEDIA_VISUAL_USER_SELECTED — let you pick and open media files for playback or muxing.
• READ_EXTERNAL_STORAGE / WRITE_EXTERNAL_STORAGE (legacy, Android 12 and below) — save downloads and open .torrent files you select.
• FOREGROUND_SERVICE and its DATA_SYNC, MEDIA_PLAYBACK, and SPECIAL_USE subtypes — keep transfers and playback running with a visible notification.
• POST_NOTIFICATIONS — show download progress and completion.
• RECEIVE_BOOT_COMPLETED — optionally resume active downloads after a restart.
• WAKE_LOCK — keep the device awake while writing files.
• REQUEST_IGNORE_BATTERY_OPTIMIZATIONS — ask your permission to run reliably when battery optimisation would otherwise pause downloads.
• com.google.android.gms.permission.AD_ID — access the advertising ID for ad serving, as required by Google Play.

No permission is used for any purpose other than the one listed here.

16. In-app privacy controls

• Wi-Fi-only mode, speed throttling, and battery saver.
• Protocol encryption modes and proxy support (SOCKS5, HTTP).
• Port randomisation and peer discovery toggles (DHT, PEX, LSD).
• Stop seeding at 100% to limit bandwidth and exposure.
• Reopen the ad consent form at any time to change your advertising choice.
• Delete individual downloads, clear all app data from Android's app settings, or uninstall to remove everything.

17. Third-party content and responsible use

TorrentX is a general-purpose file transfer tool. It does not include a search engine, a content index, or any built-in source of torrents. You are responsible for the content you download and share, and for complying with the copyright and other laws that apply where you live.

Trackers, peers, and websites you connect to are operated by third parties with their own privacy practices, which we do not control and are not responsible for.

18. Changes to this policy

We may update this policy as the app changes or as legal requirements evolve. The "Last updated" date at the top always reflects the current version. For material changes — such as adding a new data-collecting service — we will update the policy before the change ships and, where required, ask for your consent again in the app. Continuing to use TorrentX after an update means you accept the revised policy.

19. Contact us

For questions, privacy requests, or grievances about this policy or the app:

• Developer: Autcust.Dev
• Country/region: India
• Email: autcust@gmail.com
• App: TorrentX for Android, on Google Play

We aim to reply to all privacy requests within 30 days.