1. Information we process
Account and profile: email address, user identifier, display name, and the optional birth year, city, language, and time zone you provide.
Your memory content: text, tags, mood, photos, videos, recordings, transcripts, and interview content you choose to create or upload. Photo browsing happens on your device; photos you do not choose to keep or send are not uploaded.
Location: only a place you enter manually or location metadata already attached to a photo you choose to import. XLog 1.0 does not continuously collect device location in the background.
Operational data: app version, language, crash, and performance diagnostics. We use Apple's system diagnostics, include no advertising tracker, and do not place access tokens, memory text, transcripts, or private media URLs in logs.
2. How we use information
- Authenticate you and sync, search, edit, export, and restore memories.
- Perform AI interviews, transcription, title generation, or recap generation when you request them.
- Protect accounts, diagnose failures, and improve reliability.
- Schedule an on-device daily reminder only after you enable it.
3. Service providers
Supabase: provides authentication, database services, private media storage, and server-side functions. The current service region is Seoul, South Korea.
Alibaba Cloud Model Studio (Qwen models): processes the text, selected media, or recording needed for a task only when you actively use an interview, transcription, photo organization, title, album, or recap feature. Browsing your library does not invoke AI. Skipped photos and photos you have not chosen to keep are not sent to this provider.
These providers process only the data needed to deliver XLog. We do not sell your memories to data brokers or advertisers or use them for targeted advertising.
4. Storage and security
Account data is isolated with user-based row-level security. Media is stored privately and read or uploaded through short-lived signed URLs. Sessions use the system Keychain, while local caches, queued media, and exports use operating-system file protection. Background uploads use limited-life, single-purpose signed URLs, and long-lived credentials are not written to app logs. No system can guarantee absolute security, but we maintain safeguards appropriate to the risk.
5. Retention, export, and deletion
We retain data while your account remains active. You can export memories or request account deletion under Profile → Settings. Completed deletion permanently removes your account, database records, and private media. A minimal record may be retained only where required for security, fraud prevention, or law, and removed when that obligation ends.
6. Your choices and rights
- Photos, camera, microphone, and notification access are controlled by iOS and can be changed in Settings.
- You can access, correct, export, or delete your content.
- For privacy, access, or deletion requests, email privacy@tjykai.com.
7. Children's privacy
XLog is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information.
8. International processing and changes
Supabase currently operates this service from Seoul, South Korea. Depending on service configuration, Alibaba Cloud AI services may process content submitted for a task in mainland China or another region. Information may therefore be processed outside your country or region. We require appropriate safeguards from providers. Material changes will be posted here and, when appropriate, announced in the app or by email.
Effective and last updated: July 27, 2026