Privacy Policy

Last updated: May 20, 2025

Thank you for choosing Xylo (the "App"). We created this iOS and Android app to help children learn to play the xylophone through an ever‑growing library of songs. Because our audience includes kids, we take privacy extremely seriously. This policy explains what data we (the "Developer," "we," "us," or "our") collect, how we use it, and the limited circumstances in which it may be shared.

1. Information We Collect

CategoryWhat We CollectPurpose
Personal dataNone. The App does not request, access, store, or transmit names, email addresses, phone numbers, precise locations, contacts, photos, microphone input, or any other information that can identify an individual child or adult.N/A
Non‑personal usage data (automatic)Via Vexo Analytics, we receive anonymized, aggregated metrics such as:
  • generic device type and OS version
  • app version
  • screen views and crash logs
  • coarse country‑level locale
No IP addresses, advertising IDs, or precise geolocation are stored in our own systems.
To understand which songs and features are most popular, fix bugs, and improve learning outcomes.

Vexo stores this analytics data on secure servers in the United States and protects it with industry‑standard encryption for data in transit and at rest. Vexo retains analytics data indefinitely, and you can request deletion at any time.

2. How We Use Non‑Personal Data

  • Improve educational content – see which songs engage children the most.
  • Diagnostics and performance – detect crashes and loading issues.
  • Aggregate statistics – measure overall effectiveness; no profiling of individual users.

We do not use the data for targeted advertising, user profiling, or selling to third parties.

3. Third‑Party Services

ServicePurposeWhat they receive
Vexo AnalyticsReal‑time, privacy‑friendly analyticsAggregated app‑event data described above. See the Vexo Privacy Policy. Vexo does not knowingly collect personal data from children under 13.

We have reviewed Vexo's policies and configured the SDK to minimize data collection. Vexo acts as a "processor" on our behalf.

4. Children's Privacy (COPPA & similar laws)

The App is designed for children under 13 but does not collect personal data, so verifiable parental consent is not required.

If you believe personal information was inadvertently submitted, contact us (see Section 10) and we will permanently delete it within a reasonable timeframe.

5. Security

We follow industry best practices—including HTTPS, certificate pinning where possible, and secure coding guidelines—to prevent unauthorized access or disclosure. Vexo likewise implements encryption and modern security controls.

6. International Data Transfers

Because Vexo's servers are in the United States, analytics data may be processed outside your jurisdiction. Vexo's encryption and contractual safeguards help ensure an adequate level of protection.

7. Data Retention & Deletion

We store no personal data, so there is nothing to delete on our side.

Vexo retains aggregated analytics data indefinitely; email us if you want us to instruct Vexo to delete your app‑related analytics records.

8. Your Rights

Even though we do not collect personal data, you still have rights under laws such as GDPR (EU), CCPA (California), and UK GDPR. You may:

  • Request confirmation that no personal data is held.
  • Request deletion of any inadvertently collected personal data.

Contact us using Section 10 and we will respond within 30 days.

9. Changes to This Policy

We may update this policy to reflect new features or legal requirements. If changes are material, we will:

  • Post the new policy in‑app and on our website at least 7 days before it takes effect.
  • Update the "Last updated" date above.

10. Contact Us

If you have questions about privacy, need assistance, or wish to exercise your rights, please contact:

Privacy Officer
Xylo App
Email: privacy@xylo.fyi
Postal: 3407 E Amber Ln, Gilbert, AZ 85296

11. Glossary

  • Personal data / personal information – any data that can identify an individual (e.g., name, email, IP address).
  • Non‑personal data – data that cannot reasonably be used to identify a natural person.
  • SDK – software development kit; a library embedded in the App.

By using the App, you agree to this Privacy Policy. If you do not agree, please uninstall the App.