Privacy Policy
Copyright and open licenses for musical works, MIDI, sound libraries, and recordings are not covered here. See Music sources and licenses.
Data we process
- Account and service data: your XIATRE or Apple sign-in identifier, session, cloud space, and credit balance.
- Your content: uploaded photos, thumbnails, and the visual vectors, labels, descriptions, and music conditions created to provide the feature.
- How you use the product: photos shown or skipped, time on a photo, quick skips, collections, deletions, playback state, track, and playback position.
- Recommendations: recent browsing and the recommendation vectors calculated from visual preferences.
- Technical data: IP address, request time, device or browser information, errors, and security and performance logs.
- Purchase data: if you buy credit, Apple or the payment service handles the payment. XISA may receive a transaction identifier, a receipt, and the credit status. XISA does not receive your full card details.
Why
We use this information to sign you in, sync and store your content, analyze a photo and write a short description, choose or play music for a photo, keep playback continuous, order photos for you, handle credit, prevent abuse, and diagnose and improve the service. XISA does not sell personal data, and does not use it for third-party targeted advertising.
Permission before AI
Browsing photos and listening to music can stay on this device. When you import a photo, ask for a short caption, or choose music for that photo, the app first says what will be sent and to whom, and asks you to allow it or not now. You can keep browsing if you decline. This policy does not replace that prompt.
What is sent, and to whom
If you allow AI processing, the iPhone or browser connects only to the XISA server sa.xiatre.com (Alibaba Cloud, China, operated by XIATRE). That server then calls a third-party AI service:
Alibaba Cloud Model Studio (DashScope), operated by Alibaba Cloud in China. It is used for short captions, image analysis, and visual embeddings. See Model Studio and the Alibaba Cloud privacy policy.
What we send there is only what is needed for the result you asked for: a still of a photo you imported or are viewing, and the short description made from it. We do not send your Apple ID, email, or in-app purchase history to Model Studio.
Service providers and transfers
To provide those features, data may be processed by XIATRE account services, Apple, hosting, databases, logging, and the configured image-analysis, embedding, or language-model providers. Your content is sent only as far as the feature needs. Those services may be in different countries or regions, so processing can cross borders.
Keeping, control, and deletion
Your content and recommendation data linked to the account are generally kept until you delete them, close the account, or the service no longer needs them. Security, purchase, and backup records may be kept longer where the law, fraud prevention, or recovery requires it. You can delete photos and collections in the product, and you can ask XIATRE Support to access, correct, export, or delete account data. Deletion can take a reasonable time to finish, and backup copies expire on the backup cycle.
Security and children
We use access controls, encryption in transit, and least privilege. No network service can promise absolute security. XISA is not directed at children. If a parent or guardian believes a child submitted data without appropriate permission, contact support.