Privacy Policy

Effective date: October 18, 2026

Xiylo Pro is built as a privacy-first Mac audio controller. Your audio setup is for you, not for us.

1. What We Do Not Collect

• The Xiylo Pro app does not require an account. Website accounts are described below.
• We do not collect names, phone numbers, login credentials, or contact lists from the app.
• We do not run ad tracking, behavioral profiling, or data brokerage on your audio activity.
• We do not sell your data.

2. Where Your Data Lives

• App audio settings are stored on your device.
• We do not operate a separate backend that stores your audio settings database.

3. What the App Processes Locally

• Device, app, volume, routing, and Equalizer settings are processed to provide Xiylo Pro features.
• This processing is for app functionality, not for profiling or ad targeting.

Optional music recognition and remote controls

When enabled, Spectrum Shift reads Apple Music track metadata locally. For supported Safari, Spotify and AirPlay recognition, ShazamKit creates a one-way audio signature on your Mac and uses Apple’s Shazam matching service. Apple states that audio is not shared and the signature cannot be converted back into the original audio. Xiylo does not receive or store those audio signatures on its own servers. Recognition is optional and may need internet access. Apple’s ShazamKit privacy information.

Phone and tablet remotes communicate with the Mac on your local network after number-confirmed pairing. Apple Watch relays controls through its paired iPhone. Audio processing, app settings and recording files remain on the Mac. Xiylo Record captures app audio only; it does not add a microphone recording.

4. Access to Your Data

We do not have direct access to your Xiylo Pro audio settings stored on your device. Because of that, we cannot browse it, train on it, sell it, or export it from our side.

5. Optional Diagnostics

Xiylo Pro may offer an optional Automatic Diagnostics setting. This is off by default. If you turn it on, the app may send pseudonymous technical diagnostics to help us improve reliability.

On supported Macs, Apple App Attest verifies that automatic reports come from a genuine Xiylo installation. Apple processes the device security information required for this verification. We store an attested public key, Apple's verification receipt, a pseudonymous installation association and replay counters separately from diagnostic reports. Verification credentials expire after 90 days without an accepted upload; expired credentials are discarded when the verification service is next used. Short-lived challenges expire after five minutes. Macs unable to provide this verification keep diagnostics locally and can still export them for support.

• Diagnostics may include Xiylo Pro logs, app version, macOS version, hardware model, a random install identifier (stored on our server as a keyed pseudonym), pseudonymous app/device identifiers, audio device route changes, engine recovery outcomes, crash and hang diagnostics, and technical performance metrics needed for debugging.
• Diagnostics do not include audio, microphone content, recordings, personal files, passwords, documents, or the contents of apps you use.
• These identifiers can link technical events from the same installation. Hashing does not make diagnostics anonymous, and we do not use them for advertising.
• You can turn Automatic Diagnostics off at any time to stop future automatic uploads. This does not erase reports already sent to our servers. Contact privacy@xiy.ai for a diagnostic-data deletion request.

6. Deletion and Retention

Automatic cleanup runs once every 30 days. Each cleanup removes Xiylo diagnostic reports older than 30 days from server receipt and their associated diagnostic events in small batches. Reports may therefore remain in our active database for up to approximately 60 days between cleanups. It does not delete another app’s records, your website account, support requests, or recordings.

Automatic cleanup requires Xiylo ownership information. Legacy records with missing or conflicting app identification are held for manual review. Cloudflare recovery copies expire under the provider’s recovery window and are not used for routine diagnostic analysis.

• You control deletion from within the app.
• You control whether monitoring features are enabled.
• Since we do not hold a central copy of your app settings, we cannot perform server-side deletion of app settings on your behalf.

7. Contact

For privacy questions, contact privacy@xiy.ai.