Last updated 24 September 2026
xRoads Privacy Policy
Effective date: 24 September 2026
Zoundio AB (“Zoundio,” “we,” “our,” or “us”), the developer of xRoads, is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the xRoads application (the “App”), the website xroads.app (the “Website”), and related services, including the early-access waitlist (collectively, the “Services”). It also explains your rights and how to exercise them.
This Privacy Policy complies with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). If you have any questions, please contact us at hello@xroads.app.
1. Data Controller
Zoundio AB, with registered offices at Götgatan 34, 118 32 Stockholm, Sweden, is the data controller responsible for processing your personal data as described in this Privacy Policy.
If you have any inquiries about this Privacy Policy or how we process your personal data, please contact us at hello@xroads.app.
2. What Personal Data We Collect and Why
When you join the waitlist
When you sign up for early access on the Website, we collect your email address. We use it to send you your invite and launch news. You can ask us to remove you from the waitlist at any time.
When you download and use the App
We do not collect personal data when you only download the App.
To use the App, you need to create an account. During registration or while using the App, we may collect:
- Name, email address, and username
- Profile information, including preferences, musical experience, and skill level
- Password for securing your account
- Payment details for subscription purchases (processed via secure third-party payment providers)
- Practice data, such as practice sessions, goals, songs and lessons played, accuracy, personal records, and progress
- Social data, such as the players you follow and who follow you, and your likes, comments, and saved lessons
- Content you upload, such as tabs, compositions, and lessons you share with other players
- During practice the App temporarily enables the microphone to give you real-time feedback on the notes you play. Audio is used only for analysis and is not stored, recorded, or shared. Microphone access ends when the session is completed or exited
- Technical data, such as IP address, device type, and operating system
We collect this data to fulfill our contract with you by providing access to the App, personalizing your practice (including lesson recommendations, goals, and progress tracking), running the social features you choose to use, and improving and developing our App and Services.
Your profile, practice activity, and the content you share can be seen by the players who follow you and, where the App says so, by other users.
If location data is collected, it is used solely to improve functionality and personalize your experience. Location data is deleted each time you close the App unless otherwise specified in your device settings.
Cookies and similar technologies
The Website does not use tracking or advertising cookies. It stores only your light or dark theme choice in your browser’s local storage, which never leaves your device.
In the App, we use cookies and similar technologies to:
- Provide core functionality of the App
- Improve user experience through analytics
- Deliver relevant ads (personalized or contextual)
Cookies and advertising identifiers may collect device information and user interactions. Device and browser settings allow you to manage or block them; however, this may affect certain features of the App.
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contractual obligations: To provide the Services and fulfill our agreement with you.
- Legitimate interests: To improve the App, ensure security, and personalize your experience.
- Consent: For the waitlist, optional features like newsletters, and personalized ads.
- Legal compliance: To fulfill legal obligations, such as tax and accounting requirements.
4. How We Use Your Data
We use your personal data to:
- Manage the waitlist and send you your invite
- Provide and manage your account and access to the App
- Track your practice and progress, and personalize recommendations
- Run the feed and other social features
- Process transactions and manage subscriptions
- Improve, troubleshoot, and optimize the App and Website
- Deliver personalized or contextual ads
- Prevent fraudulent or unauthorized activity
5. Data Sharing
We do not sell your personal data. However, we may share it with:
- Service providers: Third-party partners for hosting, email delivery, analytics, payment processing, and customer support
- Advertising partners: To deliver personalized or contextual ads
- Other users: The profile, activity, and content you choose to share in the App
- Legal authorities: If required by law or to protect our rights
Some partners operate outside the EU/EEA. We ensure data is transferred securely using Standard Contractual Clauses or other safeguards.
6. Data Retention
We retain your data as follows:
- Waitlist data: Retained until you receive your invite and create an account, ask to be removed, or we stop running the waitlist
- Account data: Retained while your account is active and for up to five years after inactivity
- Location data: Deleted when the App is closed unless device settings dictate otherwise
- Usage data: Retained while your account is active and anonymized after five years of inactivity
If your account remains inactive for five years, we will aim to delete or anonymize your data unless you re-activate your account within this period.
7. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you
- Correction: Update or correct inaccurate information
- Erasure: Request deletion of your personal data
- Restriction: Request limited processing under certain circumstances
- Objection: Opt-out of processing based on legitimate interests, including profiling
- Portability: Request your data in a portable format
- Withdraw consent: Revoke consent for optional data processing activities at any time
If you are unsatisfied with our processing of your personal data, you may lodge a complaint with your local data protection authority. For users in Sweden, you may contact:
Integritetsskyddsmyndigheten (IMY)
Box 8114
104 20 Stockholm
Sweden
Website: www.imy.se
8. California Residents
California residents have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:
- Right to know: Request information about the categories of data collected and its purposes
- Right to access: Obtain a copy of your data
- Right to delete: Request deletion of your personal data
- Right to correct: Request corrections to your data
- Right to opt-out: Decline the sharing of data for advertising purposes
You may exercise these rights by contacting us at hello@xroads.app.
9. Children’s Privacy
The Services are not intended for users under the age of 13. If we discover that we have collected data from a minor without parental consent, we will delete it promptly. Please contact us at hello@xroads.app if you believe this has occurred.
10. Security
We implement technical and organizational measures to protect your data against unauthorized access, alteration, or loss. While we strive to secure your data, no system is completely secure.
11. Updates to This Privacy Policy
We may update this Privacy Policy periodically. Material changes will be communicated via the App or Website. Continued use of the Services after updates constitutes acceptance of the revised policy. Our Terms of Service also apply to your use of the Services.
12. Contact Information
If you have questions or concerns about this Privacy Policy, contact us at:
Email: hello@xroads.app
Mail: Zoundio AB, Götgatan 34, 118 32 Stockholm, Sweden
You may also lodge a complaint with your local data protection authority.