When you go to "Settings" » "Security" » "Auto Lock" you can configure the time out time before XUMM will request you entering your PIN for accessing the application. 

When sending / signing transactions this time out doesn't apply: you'll always have to authorize with PIN/FaceID/Fingerprint for transaction signing.

Did this answer your question?