JoboMusic Privacy Policy

(Last updated: October 30, 2026)

1. Who We Are and What this Policy Covers

1.1 JoboMusic AG, St. Niklausenstrasse 69, 6047 Kastanienbaum, Switzerland ("JoboMusic", "we", "us") publishes the software applications UNYON (client and server), Struc and the Flexion framework (the "Software"), and operates a small number of online services (the "JoboMusic Services"):

  • one or more core-Unyons, used to issue and renew Unyon Licenses, to register sub-Unyons of a JoboMusic root-Unyon, to sell Allonyx for those Unyons, to provide help and documentation, and to receive issue reports and feedback;
  • a dedicated Unyon that collects messages sent through the forms on our websites;
  • one or more core Unytes, which forward encrypted connections and list registered Unyons;
  • the website https://xoy.zone/, including the download and update information used by the Software.

1.2 This policy explains which personal data JoboMusic processes when you use the Software and the JoboMusic Services, and when you contact us. JoboMusic is the controller for that processing. It also applies when you visit our websites, https://xoy.zone/, https://jobomusic.com/, https://jobo.music/ and https://struc.zone/ (Section 6.4).

1.3 Unyons run by others are not covered by this policy. The Software lets anyone run their own server (a "Unyon"). Whoever runs a Unyon (the "Unyon Operator") decides what happens to the data stored on it and is the controller for it. JoboMusic has no access to Unyons it does not operate. Please refer to the privacy information of the Unyon Operator, which the Software may show you before you enter their Unyon. If a Unyon Operator does not provide privacy information of their own, this policy describes how the Software processes data on their Unyon as well, with that Unyon Operator, not JoboMusic, as the controller.

2. Our Approach

We build privacy into the architecture rather than adding it afterwards:

  • You do not create an account with us. Your identity is a set of cryptographic keys generated on your own device. No name, email address or phone number is required, and none is sent to us.
  • The Software does not contact us when it starts or when you create an identity.
  • The Software contains no analytics, no tracking, no advertising and no telemetry, and does not send crash reports.
  • Our websites set no cookies, run no analytics or tracking scripts, and load nothing from other servers (Section 6.4).
  • We do not sell, rent or share personal data for advertising.

3. Data on Your Own Device

The Software stores data locally on your device, including your identities, a cache of data from Unyons you use, settings and log files. Your identities are encrypted with your password, and the local databases are encrypted. Log files are stored unencrypted and may contain technical information such as your operating system, device model, processor and memory, and error details. This data stays on your device unless you choose to share it, for example when sending us a log file with a support request.

4. When You Use a Unyon

4.1 When you join or use a Unyon, including a Unyon operated by JoboMusic, its server receives and stores the data needed to operate it, in particular:

  • the public keys and signature of your identity (never your private keys, password or recovery phrase);
  • the name and profile you choose for that Unyon;
  • if you ask to become a member, your request, with the profile you choose to show and the message you write;
  • your app version and language setting;
  • the date of your acceptance of the Unyon's legal documents;
  • the content you create, upload or send on the Unyon, including messages, and records of your transactions, such as content you unlock and Allonyx you buy, earn or spend;
  • technical connection data, including your IP address (see Section 6).

4.2 Encryption. Connections between the Software and a Unyon are encrypted. Data stored on a Unyon server is encrypted at rest. However, content on a Unyon - including messages, files, and the keys for audio and video conferences - is not end-to-end encrypted: the Unyon server, and therefore its Operator, can access it. The exception is media that its publisher marks for local streaming only, which the Unyon server cannot decrypt.

4.3 Unyons operated by JoboMusic. On the Unyons we operate, we process the data described in Section 4.1 to provide the Unyon, to issue and renew Unyon Licenses and sell Allonyx, and to protect the Unyon against misuse. For Unyon Licenses we also store the Unyon identifier and the license owner's public key. For sub-Unyons registered with a JoboMusic root-Unyon we store the sub-Unyon's identifier and public keys and a hash of its owner's public key.

5. Unytes

Unytes forward encrypted connections between clients and Unyons. A Unyte can see the IP addresses of the parties it connects but cannot read the data it forwards. The connection to a Unyte is encrypted from its first message: someone watching the network can see that your device connects to a Unyte, but not which Unyon it reaches through it. Unytes may temporarily cache encrypted media streams, which they cannot decrypt, and delete them one hour after the last viewer leaves. Unyon servers registered with a JoboMusic core Unyte are listed there with their name, description and public information so that they can be found.

6. IP Addresses, Logs and Our Websites

6.1 Like any internet service, our servers and Unytes receive the IP address of every device that connects to them. We use IP addresses to establish connections, to limit the rate of connections, and to detect and block abusive connections.

6.2 Our server software does not store IP addresses in readable form. Log files record them only as salted hashes, using a salt that changes each time the server restarts. Where an IP address must be recognized again - to keep blocking a connection that was blocked because of abuse - it is stored as a hash keyed with a secret of that server, which cannot be reversed without that secret. Blocks expire automatically, by default after 24 hours. Server log files are rotated by size and deleted after three months.

6.3 Our server software may check https://xoy.zone/ for updates automatically. The client application does so when you ask it to, and when a Unyon reports that your version is outdated, it opens our update page in your browser. Our website is served by a hosting provider, which may log IP addresses, request times and browser information for its own operation. We do not access or control those logs.

6.4 Our websites set no cookies and use no analytics or tracking scripts, and everything they show, including fonts, comes from our websites themselves. xoy.zone keeps two things in your browser and never sends them to us: an invitation link you open there, kept in local storage so that it still reaches the Software if you install it first - the next time you open a page of xoy.zone, the website hands it to the Software and deletes it, or deletes it unused if it is older than 24 hours; and on its home page, your scroll position, kept in session storage, which your browser deletes when you close the tab. Our other websites keep nothing in your browser.

7. Payments

7.1 Payments for Allonyx and vouchers are processed by Stripe Payments Europe, Ltd. or other Stripe entities ("Stripe"). When you buy Allonyx on a Unyon we operate, you enter your payment details directly with Stripe. Stripe collects and processes your payment information, and may collect your name, email address, billing address and other information, under its own privacy policy: https://stripe.com/privacy .

7.2 We pass Stripe only your internal user identifier on the Unyon and your language. We receive and store only the identifiers Stripe returns (such as a customer identifier and checkout session identifier), the items purchased and the payment status. We do not receive or store your card or bank details. Stripe can link your Stripe data to your internal user identifier on the Unyon.

7.3 To receive payouts of Earned Allonyx, you create an account with Stripe, which verifies your identity and collects personal and banking information under its own terms. We store only your Stripe account identifier, whether payouts are enabled for it, and your payout preferences.

7.4 When you open the shop, the Software sends the currency you selected, or, if you never selected one, the region setting of your operating system, so that prices can be shown in a suitable currency.

8. When You Contact Us or Report an Issue

8.1 Website forms. When you submit a form on our website, your browser encrypts its content with a key that only our dedicated form Unyon (Section 1.1) can open, and sends it to our website's server. The website's server cannot read it: it keeps the encrypted submission for at most seven days, until our form Unyon collects it with a signed request, decrypts it and stores it in an encrypted database, where it can be read only by persons authorized by JoboMusic. It may additionally be forwarded to us by email. Your IP address is not stored with the submission; to limit abuse, the website's server counts submissions per minute under a one-way hash of your IP address, which it deletes after one minute. If the form cannot be submitted, your own email program is opened instead to send the message to us by email. We process what you enter - which may include your name, your email address and anything you write in your message - only to handle your request.

8.2 Email. If you email us, we process your email address, the content of your message and any information you include, to answer you.

8.3 Issue reports and feedback. If you report an issue or send feedback through a Unyon we operate, we process the content of your report, together with your identity's public information and name on that Unyon, and any files you choose to attach, such as log files (see Section 3). Depending on where you post it, a report may be visible to other members of that Unyon, so please check where you are posting before you send it.

8.4 Please do not include more personal data in a message or report than needed. We keep this information only as long as needed to handle your request and to meet legal obligations.

9. Legal Bases

Where the EU General Data Protection Regulation (GDPR) or the Swiss Federal Act on Data Protection (FADP) applies, we process personal data:

  • to perform our contract with you, such as providing a Unyon we operate, a Unyon License or a purchase (Art. 6(1)(b) GDPR);
  • on the basis of our legitimate interests in operating secure and reliable services, preventing misuse and fraud, and answering inquiries (Art. 6(1)(f) GDPR);
  • to comply with legal obligations, such as accounting and tax retention requirements (Art. 6(1)(c) GDPR).

10. Recipients and International Transfers

10.1 We share personal data only with:

  • service providers that host our servers and website or provide email, subject to confidentiality obligations;
  • Stripe, as described in Section 7;
  • authorities, courts or advisors, where required by law or needed to establish, exercise or defend legal claims;
  • a buyer or successor, in the event of a merger, acquisition or sale of assets.

10.2 These recipients may be located outside Switzerland and the EEA, including in the United States. Where required, we rely on adequacy decisions or standard contractual clauses to protect such transfers.

11. Retention

We keep personal data only as long as needed for the purposes described in this policy. Records of purchases and licenses are kept as long as required by accounting and tax law, generally ten years. On our servers, records of connections are deleted after 30 days, alerts after 90 days and administrative logs after twelve months; blocks of abusive connections expire automatically, and server log files are deleted after three months. Data on Unyons we operate is kept as long as you remain a member of that Unyon, unless you or we delete it earlier. A request to become a member of a Unyon is kept until its Operator has decided on it, and then for 30 days, unless the Unyon Operator has set a different period.

12. Security

We use technical and organizational measures to protect personal data, including encryption of connections and of stored data. No system is completely secure, and you are responsible for keeping your identity, password and recovery phrase safe.

13. Your Rights

13.1 Subject to applicable law, you have the right to request access to, rectification of, and erasure of your personal data, to restrict or object to its processing, to data portability, and to lodge a complaint with a supervisory authority - in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC), and in the EU/EEA, the authority of your country of residence.

13.2 Because we do not know who you are, we may need you to prove that you control the identity concerned, for example by signing a message with it, before we can act on a request. For data on Unyons we do not operate, please contact their Unyon Operator.

14. Children

The Software and the JoboMusic Services are not directed at persons under 18. A parent or legal guardian may let a minor in their care use the Software with the guardian's identity; that identity, and the data processed for it, remain the guardian's. We do not knowingly process personal data that identifies a child. If you believe a child has provided us with personal data, please contact us and we will delete it.

15. California and Other Jurisdictions

We do not sell or share personal information for cross-context behavioral advertising, and we do not track users across third-party websites or services. We therefore do not respond to Do Not Track signals.

16. Changes to this Policy

We may update this policy from time to time. The Software includes the version that applies to it, and will ask you to accept a changed version the next time you log in. The current version is also published at https://xoy.zone/privacy-policy/.

17. Contact

JoboMusic AG, St. Niklausenstrasse 69, 6047 Kastanienbaum, Switzerland
Email: info@jobomusic.com
Further contact information: https://xoy.zone/legal-notice/