Privacy Policy

Draft — pending legal review · October 29, 2026

This is the compliance pack's draft, published so the policy is readable while a lawyer reviews it. Bracketed items are not settled yet. Nothing here is legal advice.

Xian Privacy Policy. Effective date: October 29, 2026. Operated by Luis Acevedo, sole proprietor, doing business as Xian, California. Contact: support@coachxian.com.

1. The short version

Xian helps baseball and softball players improve their swing. You film a swing, we measure your body positions, and an AI coach gives you feedback. We do not show ads. We do not sell your data. We do not share it for cross-context behavioral advertising. We do not let anyone train AI models on your data.

2. Who can use Xian

Xian is for athletes aged 13 and older. If we learn that a child under 13 has created an account without a parent's verified consent, we will delete that child's information.

3. What we collect

• Account info: name or nickname, email, age or birthdate range, and a parent's email for minors.
• Athlete profile: height, bats left/right, and level of play.
• Swing videos that you record or upload, plus thumbnails.
• Body landmarks (pose keypoints): points such as wrist, elbow, hip and knee positions, calculated from your video, and swing metrics derived from them, such as bat path timing and hip rotation.
• Voice recordings and transcripts when you talk to the coach.
• Coach conversations: your questions, the coach's replies, and web search queries the coach makes.
• Training plans.
• How a session went: when you finish a session we record how it felt on a 1–5 scale and whether anything hurt. We keep that with your training record, and the coach is told the last one — so it can tell you to stop and see somebody rather than push you through pain.
• How you use the app: which screens you open and which steps you reach — signing up, uploading a film, seeing a reveal, accepting a plan, finishing a session — stored with your account ID, the screen name and the time. We use it to find where the product is failing people. It is not advertising and it is never sold or shared.
• Device data: app user ID, device model, OS version and push token.
• Crash and diagnostic data.
• Subscription status from the app store, such as the original transaction ID and expiration date. We never see your card number.
• Support emails.
• Problem reports you send from the app: what you write, which screen you were on, the app version and your phone's system, and a screenshot if you choose to add one. We remove the picture's hidden details, such as location, before we store it.

4. About body landmarks and "biometric" laws

We use keypoints to measure your swing, not to identify who you are. We do not create face templates, faceprints or voiceprints, and we do not use keypoints to recognize people. Your video, however, is personal information because it shows your image. We treat keypoints and video as sensitive: we ask for your consent, use them only for coaching, and delete them on the schedule below.

One exception, and we have to ask for it separately. If you give us written permission — we ask testers for this, and nothing about signing up gives it — we keep your films past the schedule below so we can test how accurate our measurements are, until you tell us to stop. Write to support@coachxian.com and we will stop keeping them; the ordinary clock then applies. Films kept this way are never used to train AI models.

5. Voice

We keep audio recordings only long enough to turn them into text. That takes seconds when transcription happens on your device, and at most 24 hours on our servers. After that we delete them. We do not create voiceprints.

6. Who processes your data

7. What we never do

We do not sell personal information. We do not "share" it for cross-context behavioral advertising. We show no ads. We do not use your data to train AI models, whether ours or anyone else's. We do not use sensitive personal information to infer characteristics about you.

Do Not Track. Browsers can send a "Do Not Track" or Global Privacy Control signal. Our site and app do not track you across other companies' sites or services and set no third-party tracking cookies, so there is nothing for such a signal to switch off; we do not change what we do when we receive one.

8. How long we keep data

• Videos: 90 days after upload, and you can delete any of them sooner
• Server and website request logs: 30 days. These record the web address of each request, which for the link that stops parent emails includes that parent's email address
• Counters that stop our public forms — password reset, the parent's request for a stop link, and the waitlist — being used to flood an inbox: a keyed, one-day identifier made from the email address typed and from the internet (IP) address the request came from — a code that cannot be turned back into either address without a secret key only our server holds — with a count and a time: 1 day
• Audio inside an uploaded video: removed before the video is measured, and if we cannot remove it the video is deleted
• Videos you gave separate written permission to keep for accuracy testing: until you withdraw that permission
• Keypoints and metrics: while your account is active, then deleted after 12 months of inactivity
• Audio: 24 hours maximum
• Transcripts and coach chats: 12 months
• Crash data: 30 days (our error-reporting provider deletes it on that schedule)
• How-you-use-the-app records: 400 days
• Problem reports you send from the app: 400 days; a screenshot attached to one: 90 days
• Support email: 2 years
• Parental consent records: for as long as the consent is in effect, plus 3 years
• Safety records: for as long as the account exists. If something written to the coach suggested someone may be in danger, the record of it (the date, the kind of concern, which help line we showed, what we did) and that one message are kept until a person at Xian has read it — at most one year — even if the account is deleted, so that deleting the account cannot remove what we may have to report; once a person has read it and found nothing to report, it is deleted. If we report it to the National Center for Missing & Exploited Children (the law requires us to report child sexual exploitation), what the report contained is kept for one year from that report, even if the account is deleted, and then deleted
• A message our safety check could not read: If our safety check is down when you write, we keep that one message for up to 7 days so the check — or a person at Xian — can read it, and then we delete it.

What the coach checks for, what happens when it finds something, who reviews it and who we tell is published in our safety protocol.

We never keep children's information indefinitely.

9. Deleting your data

In the app, go to Account › Delete my account. This permanently deletes your account and server data, and backups within 35 days. You can also email support@coachxian.com. Subscriptions must be cancelled with Apple or your card issuer, because deleting your account does not stop billing.

One exception: if something written to the coach suggested someone may be in danger, the record of it and that one message are kept until a person at Xian has read it — at most one year — even if you delete the account, so that deleting the account cannot remove what we may have to report. Once a person has read it and found nothing to report, it is deleted. If we have to report it to the National Center for Missing & Exploited Children (the law requires us to report child sexual exploitation), what the report contained is kept for one year from that report even if you delete the account, and deleted when that year ends. Nothing else about the account is kept.

10. Your California rights

• Know what we collect
• Delete it
• Correct it
• Opt out of sale or sharing. We don't sell or share.
• Limit the use of sensitive personal information. We use it only for permitted purposes.
• Non-discrimination

We respond within 45 days. You may use an authorized agent. We honor these rights for every user in every state.

11. Parents' rights

A parent can review the athlete's information, have it deleted, and refuse further collection, by writing to support@coachxian.com. You do not need your athlete's account or password. We verify that you are the parent before we disclose anything.

12. Security

We encrypt data in transit (TLS) and at rest, limit access, use multi-factor authentication, keep a written information security program, and will notify you of a breach as required by law. No system is perfectly secure.

13. Changes

We will post changes with a new effective date and notify you in the app or by email before material changes take effect.

14. Contact

Luis Acevedo, sole proprietor, doing business as Xian, California, support@coachxian.com.

Notice to parents

If your athlete is under 18, we ask for your email when they sign up and we write to you explaining what Xian measures and what we keep. You can ask us to delete everything at any time, without your athlete's account or password, and we will confirm when it is done.

In Spanish

Resumen. Pendiente: traducción completa y revisión legal.

Política de Privacidad de Xian (resumen). Xian ayuda a jugadores de béisbol y sóftbol a mejorar su swing. No mostramos anuncios, no vendemos tus datos y no los compartimos para publicidad. No permitimos que nadie entrene modelos de IA con tus datos. Recopilamos tu cuenta, tu perfil, los videos de tu swing, los puntos del cuerpo calculados a partir del video (los usamos solo para medir tu técnica, no para identificarte), tus preguntas de voz (el audio se borra en 24 horas o menos), tus conversaciones con el coach, tus datos de fallas técnicas, cómo se sintió cada sesión y si reportaste dolor, qué pantallas y pasos usas en la app (con tu cuenta, para encontrar dónde falla el producto; nunca para publicidad), y tu estado de suscripción. Nuestros proveedores son Google Cloud, Anthropic (solo texto), Sentry, Apple, Resend, Expo (que entrega las notificaciones push), Namecheap (donde está nuestro buzón de soporte, con lo que nos escribes) y [PROVEEDOR DE TRANSCRIPCIÓN]. Antes de enviar tu mensaje a Anthropic le quitamos las direcciones de correo electrónico y los números de teléfono, y tu propio apellido si lo escribiste; lo demás se envía tal como lo escribiste, así que no escribas los datos de otra persona en una pregunta. Puedes borrar tu cuenta desde la app (Cuenta › Eliminar mi cuenta) o escribir a support@coachxian.com. Una excepción: si algo que escribiste al coach hizo pensar que alguien podía estar en peligro, el registro de eso (la fecha, el tipo de preocupación, qué línea de ayuda mostramos y qué hicimos) y ese único mensaje se conservan hasta que una persona de Xian lo haya leído — como máximo un año — aunque borres tu cuenta, para que borrar la cuenta no elimine lo que quizá tengamos que reportar. Cuando una persona lo lee y no encuentra nada que reportar, se borra. Si tenemos que reportarlo al Centro Nacional para Niños Desaparecidos y Explotados (la ley nos obliga a reportar la explotación sexual infantil), lo que contenía el reporte se conserva un año desde ese reporte aunque borres tu cuenta, y se borra al terminar ese año. Nada más de la cuenta se conserva. Si nuestra revisión de seguridad no está disponible cuando escribes, guardamos ese único mensaje hasta 7 días para que la revisión — o una persona de Xian — lo pueda leer, y después lo borramos. Nuestro protocolo de seguridad está publicado, en español, en coachxian.com/safety. Tienes derecho a saber, borrar y corregir tus datos, y a no ser discriminado por ejercer esos derechos. Respondemos en un plazo de 45 días. Los padres pueden revisar y borrar los datos de sus hijos y retirar su permiso en cualquier momento.