1. Who we are
Xira Live is operated by Microdesk ("we", "us"). Microdesk is the data controller for the personal data described in this policy.
- Website: microdesk.tech
- Privacy contact: sobanrashidqazi@gmail.com
2. Data we collect
We collect only what the app needs in order to work. Nothing below is sold, and nothing below is used for third-party advertising.
| Category | What it includes | Why we need it |
|---|---|---|
| Account | Phone number, email address, password (stored only as a salted hash), and the identifier from any social login you choose (Google, Apple, Facebook, Huawei) | To create your account, sign you in, and recover access |
| Profile | Display name, nickname, bio, gender, date of birth, country, province/city, profile photo, and your public user ID | To show your profile to other users; most of this is optional |
| Content you create | Reels, moments, chat messages, images, audio and video you upload, and live voice while you are speaking in a room | To deliver your content to the people you share it with |
| Activity | Rooms you join, gifts sent and received, coins and diamonds, levels, followers and friends, last-seen time and online status | To run the social and rewards features of the app |
| Purchases | A record of in-app purchases and the resulting balance | To credit your account and support billing enquiries |
| Device | Push notification token, device token, app and OS version, language, and IP address in server logs | To deliver notifications, keep the app compatible, and protect against abuse |
| Approximate location | Latitude and longitude, if you enable the feature | Only to show you nearby users; you can decline and keep using the app |
| Diagnostics | Crash reports and error logs | To find and fix bugs |
Your phone's contacts
If you turn on contact discovery, the app reads the phone numbers in your address book so it can tell you which of your contacts already use Xira Live. How this works matters, so we want to be exact about it:
- The names in your address book never leave your device. Matched users are labelled locally using the name you saved.
- Phone numbers are sent to our server over an encrypted connection, compared against the numbers of registered users, and discarded once the comparison is done. We do not store your address book.
- The feature is entirely optional. Deny the contacts permission and every other part of the app still works.
Permissions the app asks for
Each permission is requested at the moment the matching feature is used, and declining one only disables that feature:
- Microphone — to speak in voice rooms and record audio messages.
- Camera — to take a profile photo or record a reel.
- Photos, media and files — to attach images, video and audio you choose.
- Contacts — for the optional contact discovery described above.
- Notifications — to alert you to messages, gifts and room invitations.
- Bluetooth — to route audio to headsets and speakers.
3. How we use your data
- To provide the app: accounts, profiles, chat, voice rooms, reels, moments and gifts.
- To send notifications you have opted into.
- To operate virtual currency, purchases and rewards.
- To keep the service safe — detecting fraud and abuse, enforcing our rules, and acting on reports and blocks.
- To fix problems, using crash and error diagnostics.
- To meet legal obligations where they apply to us.
We do not sell personal data, and we do not use it to serve third-party advertising.
4. What other people can see
Xira Live is a social app, so some data is public by design. Your display name, nickname, profile photo, bio, user ID, level and badges are visible to other users. Reels and moments you post are visible to the audience you publish them to. Anything you say in a voice room is heard by everyone in that room. Please treat all of this as public.
5. Who we share data with
We share personal data only with the service providers that make the app work, and only to the extent each one needs:
- Google Firebase — sign-in, push notifications and crash reporting.
- Apple — if you use Sign in with Apple.
- LiveKit — carries live voice between participants in a room.
- Payment providers — Google Play Billing, the Apple App Store, and our payment gateways handle your payment details directly. We never receive or store your full card number.
- Hosting — our servers, where your account and content are stored.
We may also disclose data where we are legally required to, or where it is necessary to protect the rights and safety of our users.
6. Where data is stored
Your data is stored on our servers and with the providers listed above, which may be located in other countries. Wherever it is processed, it is protected by the safeguards described in this policy.
7. Security
All traffic between the app and our servers is encrypted in transit with TLS. Passwords are stored as salted hashes and are never readable by us. Access to production systems is restricted. No service can promise perfect security, but we take reasonable steps to protect your data and will notify you if a breach affects you and the law requires it.
8. How long we keep data
We keep your account data for as long as your account is active. When you delete your account it is immediately deactivated and your profile and content stop being visible to other users.
Some records are retained after that, for a limited time and for specific reasons: transaction and purchase records, which we must keep for financial and tax purposes; and moderation records relating to reports, bans or fraud, which we keep so that a banned account cannot simply be recreated. Server logs roll off on a short cycle. Anything not covered by those reasons is removed.
9. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, object to or restrict how we use it, receive a copy in a portable format, and withdraw consent you previously gave.
You can edit most of your profile directly in the app. To exercise any other right, email sobanrashidqazi@gmail.com from the address or with the phone number on your account, and we will respond within 30 days.
Deleting your account
You can delete your account from inside the app, or request deletion by email if you have already uninstalled it. Full instructions and a list of exactly what is removed are on our account deletion page.
Delete your account10. Children
Xira Live is not intended for children. You must be at least 18 years old to create an account. We do not knowingly collect personal data from anyone under that age. If you believe a child has created an account, contact us at sobanrashidqazi@gmail.com and we will remove it.
11. Changes to this policy
If we change this policy we will update the date at the top of this page, and for significant changes we will notify you in the app. Continuing to use Xira Live after a change means you accept the updated policy.
12. Contact us
Questions about this policy or about your data: sobanrashidqazi@gmail.com.