Privacy Policy

Last updated October 2, 2026

This Privacy Policy explains what XStand collects, why, and the choices you have. We tried to keep it short and human.

XStand is operated by BENXLABS, Žiga Benko s.p. ("we", "us"), based in Ljubljana, Slovenia, who is the data controller for your information. If anything here is unclear, email us at ziga@benxlabs.com or use xstand.si/support.

What we collect

• Account: you can use XStand without signing up. When you start, we create an anonymous account so your duels work across sessions. It is identified only by a random ID — no email or password.
• Display name: the name you choose before your first duel. It is shown to the friends you duel.
• Camera — processed on your device: the app uses your camera to detect your body pose and time your handstand. This analysis runs entirely on your phone; the live camera feed is never uploaded or stored by us.
• Hold photos: during a hold, the app takes one still photo of you. For regular holds it stays on your device. For duels, that photo is uploaded together with your hold time and form score, and shown to the friend you are duelling — only after they have completed their own hold.
• Duel results: your hold times, form scores, and which duels you won or lost.
• Hold history on your device: your personal best, streak, and statistics are stored only on your phone.
• Notifications: if you allow notifications, we store a push token for your device so we can tell you when a friend answers your challenge or challenges you to a rematch. You can turn notifications off any time in your device settings.
• Reports: if you report a duel, we store the report (which duel, the reason, and your account ID) so we can review it.
• Feature interest: if you tap on a feature marked "coming soon", we record that tap to learn which features to build next.
• Basic technical data: like most apps, we log limited technical information (such as device type and error logs) to keep things running and diagnose problems.

How we use it

To run the app: timing and scoring your holds, running duels between you and your friends, showing results, reviewing reports, keeping the service safe and preventing abuse, and deciding what to build next. We do not use your data for advertising.

Who we share it with

We do not sell your personal information or share it for advertising. We share it only with:

• The friends you duel — your display name, hold time, form score, and duel photo, once they have completed their hold.
• Supabase — hosts our accounts, database, and storage of duel photos.
• Expo — delivers push notifications to your device (it receives your push token and the notification text).
• Apple — distributes the app through the App Store.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

Where your data is stored

We are based in the European Union, and our database is hosted in the EU. Some service providers may process data in other countries; where that happens, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

We keep your account, duels (including challenges nobody has answered yet), and duel photos until you delete your account. You can delete your account any time in the app under Me → Delete account — this permanently removes your profile, your duels and their photos, and the hold history stored on your phone. No longer have the app? Request deletion at xstand.si/delete-account. Deleting the app alone does not delete your account.

Your choices and rights

You can change your display name and delete your account in the app, and you can turn off camera access in your device settings at any time (the app needs the camera to time holds).

Because we are based in the EU, the GDPR applies: you have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority (in Slovenia, the Information Commissioner / Informacijski pooblaščenec). To make a request, email us at ziga@benxlabs.com.

Children

XStand is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has used the app, contact us and we will remove it.

Security

We use industry-standard measures such as encryption in transit and access controls to protect your data. Duel photos are stored privately and are only shared through short-lived links with the players in that duel. No system is perfectly secure, but we work to keep your information safe.

Changes to this policy

We may update this policy. If we make significant changes, we will update the date shown above and, where appropriate, notify you in the app.

Contact

Questions or requests: ziga@benxlabs.com.