Hliuma

Xtrument Privacy Policy

Hliuma LLC · Last updated October 23, 2026

Xtrument has no accounts and no analytics. We never collect your name, your email address, your audio or your usage data, and we never track you. The only data we process is the small amount needed to verify an Xtrument Pro subscription, and none of it can identify you personally.

1. Who we are

Xtrument for iPhone and iPad is developed and published by Hliuma LLC, a Delaware (USA) limited liability company. For anything related to privacy, write to us at [email protected].

Hliuma LLC
16192 Coastal Highway
Lewes, Delaware 19958
United States
[email protected]

2. What happens on your device

  • Microphone and audio. Xtrument listens to your instrument to detect pitch and play sounds. All audio processing happens on your device. We never record your audio, we never upload it, and it never leaves your device unless you export a file yourself.
  • Presets and settings are stored only on your device.
  • Remote control (optional). If you use the built‑in remote control, your device runs a small server that other devices on the same local network can connect to. That traffic stays inside your local network. Nothing is sent to us.

3. Xtrument Pro: what we process to verify a subscription

Xtrument Pro is a monthly auto‑renewing subscription purchased through the Apple App Store. Payment is handled entirely by Apple. We never see your payment details, your Apple ID, your name or your email.

To activate Pro on your device, and to keep one subscription tied to one device at a time, the app contacts our license server. We process:

  • Your subscription record from Apple: the original transaction identifier and the subscription’s status and expiry date, as signed by Apple (StoreKit) and as sent by Apple’s App Store Server Notifications.
  • A device key identifier: the key identifier and public key generated by Apple’s App Attest on your device, Apple’s attestation receipt for that key (used only to ask Apple for a per‑key fraud risk metric), and a one‑way hash of the key your device uses to receive the Pro key. None of these is your device serial number, your advertising identifier or your Apple ID.
  • An Apple DeviceCheck token, forwarded to Apple to read a per‑device integrity flag. We do not store the token.
  • App version and integrity signals: yes/no flags that indicate, for example, that a debugger or a modified operating system was detected, plus a daily count of such signals.
  • Timestamps of activation, verification and device changes, and a log of moves between your devices.
  • Pro preview usage: how many minutes of the daily Pro preview a device key has used.
  • Refused requests: a short log (reason code, app version, device key hash) of requests our server refused.

We do not store your IP address. Our server runs on Cloudflare’s network, which processes your IP address transiently to deliver the request, as described in Cloudflare’s privacy policy.

4. Why we process this data

  • To activate and verify your Pro subscription, and to keep it working offline for short periods.
  • To keep one subscription active on one device at a time, and to let you move it to another device.
  • To prevent fraud and abuse of the subscription, for example tampered devices or copied licenses.
Legal basisFor users in the EU/EEA and the UK, we rely on the performance of our contract with you (providing the subscription) and on our legitimate interest in preventing fraud.

5. Where the data is stored and who can access it

We use no advertising networks, no analytics SDKs and no third‑party tracking. We do not sell, rent or share personal information.

6. How long we keep it

  • Device records are deleted when you tap Deactivate this device in the app (Setup → Xtrument Pro).
  • Subscription records are kept while your subscription is active and are deleted on request after it ends.
  • Daily integrity counters and preview usage are kept only as long as needed for fraud prevention and the daily preview limit.
  • The log of refused requests is deleted automatically after 30 days.

7. Your rights

You can ask us to access, correct or delete the data described above at any time by emailing [email protected]. Because we hold no name or email address, please include the Ref code shown on the Xtrument Pro page in the app, so we can find your record.

If you live in the EU/EEA or the UK, you may also lodge a complaint with your local data protection authority. If you live in California, please note that we do not sell or share personal information as defined by the CCPA/CPRA.

8. Children

Xtrument is not directed to children under 13, and we do not knowingly collect personal information from them.

9. Changes to this policy

If this policy changes, we will post the new version on this page with an updated date.

Xtrument · Privacy Policy · Terms of Use · Support