Privacy Policy

Effective 30 October 2026. Applies to Xana on iPhone, iPad, Mac, and Android.

1. What stays on your device

• The servers and folders you add (name, address, port, user name).
• Passwords, access tokens, and keys you enter for services such as TMDB or OpenSubtitles, kept in the system keystore (Keychain on Apple devices, Keystore-backed encrypted storage on Android).
• Playback progress and history, favourite flags, interface settings, and cached artwork.
• A local cache of your Pro status, and the activation code on Android.

Deleting the app deletes this data (keystore entries are cleared according to the platform’s rules).

2. When Xana uses the network

• Media servers you add: Jellyfin, Emby, Plex, WebDAV, SMB, FTP/FTPS, SFTP. Xana signs in with the account you provide, reads the library, and plays from it. Jellyfin and Emby receive playback progress through their own APIs.
• Local discovery: only when you look for SMB shares or cast with DLNA, Xana searches your local network.
• Android update check: at launch the Android build reads a public file (latest.json) on this site to see whether a newer version exists. The request carries no identifier; as with any website, the host may briefly log the IP address. Apple builds are updated by the App Store and do not make this request.

3. Managed installs (invited family and friends only)

赵崇均 (Chongjun Zhao) gives Xana to family and friends and runs a small management service on Cloudflare (xana.janzhao.com/api/v1 and xana-admin.janzhao.com) to look after their settings, updates, and announcements. A device becomes managed only after you enter an invite code and tap “Agree and join” on the explanation screen. Without an invite code nothing is reported.

What a managed device sends:

• A randomly generated device ID and device token (no hardware or advertising identifiers).
• Platform and OS version, CPU architecture, device model (optional), Xana version, distribution channel, interface language, and a device nickname you choose (optional).
• When it was last online, and the country or region code Cloudflare derives from the connection. The IP address is used only for rate limiting and is not stored.
• If you also turn on “Send crash reports” (off by default): the error type, message, and stack trace of a crash. URLs, server addresses, IP addresses, email addresses, file paths, titles, and keys are removed on the device before sending, and the server scrubs them again.
• Feedback you choose to send: your text and any screenshot you attach.

Never sent: your library, titles, file names, watch history, server addresses, user names, or passwords.

What the manager can do: recommend or lock some interface and playback settings (such as subtitle size), offer updates and announcements, and reply to feedback. On Android and the directly downloaded Mac build, the manager can also turn on Pro. On iPhone and iPad, Pro comes only from an App Store in-app purchase or an Apple Offer Code you redeem; the management service never grants Pro to iOS devices.

Retention: crash reports 90 days, feedback 180 days, the manager’s audit log 1 year; records of removed devices are deleted after 30 days. When you tap “Leave management” in Settings, the device record, its crash reports, and its feedback are deleted from the server immediately.

This data is used only to look after invited devices. It is not sold, not used for advertising, and not shared with third parties (Cloudflare processes it as the hosting provider).

4. Third-party services you turn on

These are off by default and are only contacted when you use the feature or enter your own key. Each is run by its own company under its own privacy policy.

5. Purchases

Pro on iPhone, iPad, and Mac is an App Store in-app purchase. Apple processes payment; we never receive your name, email, or payment details. The app only asks Apple whether Pro is owned. On iPhone and iPad you can also tap “Redeem offer code” in Settings → Pro to redeem an Apple Offer Code from 赵崇均; Apple handles the redemption and we never see your Apple ID. 赵崇均 keeps a note in the management console of which Offer Code went to whom; it holds only the code and the recipient’s name. Android activation codes are verified offline on the device.

6. Permissions

• Local network (iPhone, iPad, Mac): to reach your NAS or media server and to find SMB shares and DLNA devices.
• Video and audio files (Android): to play local files you choose. Xana does not read your photos.
• Notifications and foreground service (Android): to show playback controls while playing in the background.
• User-selected files (Mac): only what you pick in the open panel.

7. Children

Xana is a general-purpose video player. It does not collect personal information from anyone, including children.

8. Your choices

If you have not joined a managed install, we hold no personal data about you, so there is nothing to access, export, or delete on our side. If you have, Settings → Managed install shows what is sent, lets you turn crash reports off, and “Leave management” deletes the server records; you can also email us to access or delete them. You can remove servers, clear keys, or uninstall the app at any time.

9. Changes and contact

If the way Xana handles data changes, we will update this page and its effective date, and mention significant changes in the release notes.

Questions: 839943663@qq.com, or see the support page.