Xil is designed so that your financial information is useful to you without becoming a data product for us. This policy explains what the app processes, where information lives, and the choices available to you.

1. Who we are

Xil is provided by Xiy. Privacy questions may be sent to legal@xiy.ai. Product support is available at contact@xiy.ai.

2. Information you choose to add

Xil can store information you enter about accounts, balances, transactions, income sources, expense categories, recurring commitments, loans, card payments, assets, currencies, notes, and planning preferences. Receipt images you choose may be processed to suggest an amount, date, merchant, and category.

3. Where your financial information lives

Your Xil ledger is stored locally on your device in the app's protected storage.
Xiy does not operate an account system or a separate server that stores your Xil ledger.
Xiy cannot sign in to browse your local ledger.
Xil does not sell financial information or use it for advertising.

4. Optional iCloud Backup

If you turn on iCloud Backup, Xil sends an encrypted backup through Apple CloudKit to the private database associated with the Apple ID signed into your device. The backup may include your ledger, app preferences, and deletion history needed to restore or merge data across devices. Xiy does not have a customer dashboard that can view your private CloudKit records. Apple's handling of iCloud is governed by Apple's terms and privacy policy.

5. Permissions and on-device processing

Location: with permission, Xil uses an approximate current location once to determine your country and suggest a default currency. Exact location is not saved in the ledger.
Camera and Photos: used only when you choose a receipt image. Text recognition runs with Apple's on-device Vision framework. Xil does not upload receipt images to Xiy.
Calendar: used only when you enable calendar sync for recurring due dates.
Notifications: used for reminders, daily summaries, scheduled payments, and reconciliation prompts you enable.
Local Network: used only when you turn on Browser Access. Xil hosts a PIN-protected dashboard on your Wi-Fi network; it is not a public internet service.

6. Planning guidance

Xil's planning engine runs locally and uses the ledger you create. It is not a remote generative-AI service, and Xil does not send your ledger to Xiy or an external AI provider for this feature. Planning output is informational and is not professional financial, tax, investment, legal, loan, or insurance advice.

7. Exchange-rate requests

When you choose to refresh exchange rates, Xil contacts the Frankfurter exchange-rate service with the base and quote currency codes needed for that request. Xil does not include your account balances, transactions, notes, or asset details in that request. As with ordinary internet traffic, the service may receive standard network information such as an IP address.

8. This website

The Xil website does not use advertising cookies or behavioral analytics. When the website is publicly hosted, its hosting and security providers may process ordinary request information, such as an IP address, browser type, requested page, and time, to deliver and protect the site.

9. Analytics, advertising, and tracking

Xil does not contain third-party advertising, behavioral analytics, or remote crash-reporting SDKs. Xil does not track you across apps or websites. Apple may provide developers with aggregated App Store and diagnostic information under Apple's own privacy practices and your device settings.

10. Retention and deletion

Local records remain until you edit or delete them, restore a different backup, or remove the app and its data. Turning off iCloud Backup stops future Xil backups but does not itself promise deletion of an existing CloudKit record; iCloud data can be managed through Apple's iCloud controls. See Privacy Choices for practical steps.

11. Children

Xil is a general personal finance tool and is not directed to children under the minimum age required to consent to digital services in their region. Xiy does not knowingly collect children's personal information through Xil.

12. Security

Xil uses platform security controls including iOS file protection, private app storage, Apple CloudKit for optional backups, and PIN protection for optional local-network access. No method of storage or transmission can be guaranteed to be completely secure.

13. Changes

We may update this policy when Xil's features or legal obligations change. The effective date above will be updated when changes are published.

14. Contact

Privacy and deletion questions: legal@xiy.ai
General support and feedback: contact@xiy.ai

Website accounts and product updates

Website accounts are scoped to this website in a shared Cloudflare database. We store your email and, for Apple sign-in, your Apple user identifier. Apple and email sign-in remain separate accounts even when their email addresses match. Secure HTTP-only session cookies last up to 30 days; signing out revokes the current session. Amazon SES sends email sign-in codes that expire after 10 minutes. Your optional name and profile photo are saved to your profile; photos are resized to 128 × 128 pixels and stored as small WebP images. Only resized pixels are uploaded if server conversion is needed. Reports and suggestions are linked to your signed-in account so you can see our responses in your dashboard.

Signing in does not subscribe you to marketing. Choosing Subscribe records your consent, time, notice version, and originating website for offers and updates from this app only. You can unsubscribe in your profile or through a marketing email. Apple Hide My Email accounts receive no automatic welcome or subscription-confirmation email; explicit subscription permits future marketing to that relay address. To request deletion of your website account, email legal@xiy.ai.