MixGym Privacy Policy

Last updated: 21 July 2026

MixGym is an ear-training app for mixing and mastering engineers, published by xTech.org. This policy explains exactly what the app collects, what it never collects, where the data goes, and how to get it back or delete it.

What we collect

Account information

• Email address — to create your account, sign you in, and send password-reset codes.
• Password — stored only as a cryptographic hash. We cannot read your password.
• Display name — shown publicly on leaderboards and in the community.
• Profile picture — optional, chosen through Android's photo picker. Shown publicly.

Training activity

• Exercise attempts: which exercise, your accuracy, the difficulty, and when you played.
• Skill ratings calculated from those attempts.

This is what draws your progress charts, sets your difficulty, and produces your leaderboard position. It is tied to your account so your progress survives reinstalling the app.

Community content

If you post, comment, like, or follow, we store that content and the connection between it and your account. Reports and blocks are stored privately and are not shown to the person concerned.

What other people can see

Your display name, profile picture, leaderboard position and score, and anything you post or comment publicly. Your email address is never shown to other users — leaderboard and community responses from our server contain only a display name, avatar, and score.

What never leaves your device

• Mix Coins — your balance, transaction history, and Store purchases are stored only on your phone. There is no server copy.
• Downloaded audio samples — cached locally so training works offline.
• Diagnostic events — written only to Android's local log, only in development builds, and never transmitted anywhere.

What we do not collect

• No advertising ID. The published app removes that permission entirely.
• No ads. This version serves none.
• No third-party analytics or tracking SDKs.
• No location, contacts, microphone, camera, SMS, or call data.

The whole app requests four Android permissions: internet access, network state, foreground service, and wake lock — the last two so audio keeps playing while you train.

Where your data goes

Account, progress, and community data is sent to our own server at api.mixgym.in, hosted on Hostinger Cloud infrastructure. We do not sell your data, and we do not share it with advertisers or data brokers.

How it is protected

• All traffic uses HTTPS/TLS.
• Passwords are hashed, never stored in readable form.
• Sessions use short-lived access tokens plus rotating refresh tokens, revoked when you sign out or reset your password.
• Audio and avatar files are served through expiring signed links rather than public URLs.

How long we keep it

We keep your data while your account exists. When you delete your account, every record we hold that belongs to you — profile, attempts, skill ratings, workouts, lesson progress, posts, comments, likes, and follows — is deleted along with it. This cannot be undone.

Getting your data, or deleting it

You can request either at any time:

• A copy of your data — every account, progress, and community record we hold, excluding password and token secrets.
• Deletion of your account — permanent, and cascades to everything listed above.

Email teamred808@gmail.com from the address on your account and we will action it within 30 days.

Children

MixGym is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

If this policy changes we will publish the new version on this page and update the date at the top.

Contact

xTech.org — teamred808@gmail.com