This policy explains what MIXXIA CO. collects when you use IXXI, why we collect it, and what control you have. We collect the minimum we need to run the game, process payments, and prevent abuse.
At signup we generate a device characteristics hash — an irreversible SHA-256 digest of a few basic browser properties such as screen size, timezone, and language. We deliberately keep this low-detail. It is a similarity signal, not a unique device identifier.
We do not use canvas fingerprinting, audio fingerprinting, tracking pixels, or advertising identifiers. We do not store your IP address as part of this hash.
When you sing in IXXI Karaoke, your take is recorded on your device. To score the words, the recording is sent to our speech-recognition provider, ElevenLabs, which returns the words it heard. IXXI does not store the recording, and we ask ElevenLabs to delete it as soon as the words come back. ElevenLabs may keep limited logs under its own privacy policy. You can listen back to your take on the device; it is gone when you leave the song.
Card details are handled entirely by MyFatoorah. We never see or store your card number. We retain only the transaction record: amount, date, invoice reference, and status.
We do not sell your data. We do not share it with advertisers. We do not run ads.
We use a small number of established service providers to operate IXXI. Each is bound by contract to process your data only on our instructions, and none may use it for their own purposes.
Your data is stored on secure servers outside Kuwait, primarily in Singapore. By using IXXI you consent to this transfer.
If you would like the identity of any specific provider, email ixxi@mixxia.com and we will tell you.
This section matters, so we state it plainly. When you delete your account, we remove your profile, gameplay history, and remaining credits. But we permanently retain irreversible SHA-256 hashes of your phone number, email address, and device characteristics.
We keep these hashes to stop the same person deleting and re-registering repeatedly to harvest free signup credits. The hashes cannot be reversed to recover your phone number or email — they can only be matched against a new signup attempt.
Under data-protection frameworks these hashes are treated as pseudonymised data. We retain them on the basis of our legitimate interest in preventing fraud. They are held indefinitely and are not used for marketing or any other purpose.
Payment records are retained as required by Kuwaiti commercial and tax law, independent of account deletion.
Email ixxi@mixxia.com to exercise any of these. We respond within 30 days.
Data is encrypted in transit and at rest. Database access is restricted by row-level security so accounts cannot read each other's data. Administrative access is limited to authorised MIXXIA CO. personnel.
No system is perfectly secure. If a breach affects your data, we will notify you without undue delay.
IXXI is not intended for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has registered, contact us and we will delete the account.
We use only essential cookies — to keep you signed in and to keep your session secure. We do not use advertising or cross-site tracking cookies.
We may update this policy. Material changes will be notified in the app or by email, with the revision date updated above.
MIXXIA CO. · Kuwait
ixxi@mixxia.com · hello@mixxia.com