Your voice. Your files.

The short version

• Voice modeling, training, cleanup, stem splitting, mastering, and conversion run locally on your computer. Your audio is not uploaded for processing.
• There are no accounts and no passwords. What we hold is your email address, if you gave us one, your license key if you bought Pro or Founding, and usage stats and crash reports only if you said yes to them.
• Usage stats and crash reports are off until you say yes. Neither sends your audio or your projects.
• We do not sell user data and we do not train Xport models on user audio.
• You can request export or deletion of your data at any time by emailing support@xportstudio.com.

1. Who we are

Xport Studio is operated by Xport Audio (the "Company"). For contact and legal notices: support@xportstudio.com.

2. Data we collect

Contact data

Your email address, if you submit one through the download form, the feedback or affiliate forms, in-app feedback, or at checkout. Xport Studio has no accounts and no passwords, so there are no logins or password hashes for us to hold.

License data

When you activate Pro or Founding, the app sends your license key to Lemon Squeezy's license service to confirm the purchase. The license file itself lives on your machine.

What the app sends over the internet

The app goes online for these reasons:

• Updates and packs. It checks GitHub for new versions and downloads updates and the packs you ask for. Downloads are delivered through our Cloudflare download worker.
• License activation. It sends your license key to Lemon Squeezy to confirm the purchase.
• First-use downloads. The first time a tool needs an AI model or a software package, the app downloads it from public hosts such as Hugging Face, GitHub, the Python Package Index, and download.pytorch.org.
• Feedback, only if you send it. Your message, the app version, your platform, and your email if you add one go to our feedback server on Cloudflare.

Like any web request, these carry your IP address.

Usage stats and crash reports (opt-in)

The app has two optional channels. Both are off until you say yes. The app asks once, on first launch, and saying yes turns both on. You can change either one at any time in Settings, under Privacy.

• Usage ping. Once per launch, the app sends its version, your OS, CPU type, language, trial days left, and a random install ID. Our server keeps a hashed copy of your IP address.
• Crash reports, through Sentry. When something breaks, the app sends a stack trace and device details (app version, OS, CPU and GPU), plus a record of each app session.

Neither one sends your audio or your projects.

Audio data

Audio files stay on your local machine in your ~/XportStudio directory (and the equivalent on Windows). We do not upload your audio for processing, training, or storage. The only exception is if you explicitly choose to use a future cloud-backed feature, which will be opt-in with clear messaging.

Microphone and Listen Live

Listen Live (on Mac, part of Key & BPM Finder) listens through the microphone or audio input you pick and shows the key and BPM live. The mic is on only while Listen Live runs. Short windows of audio are written briefly to a temporary file on your computer, analyzed there, and deleted. Nothing is uploaded or kept.

Analytics

This website uses GoatCounter, a cookieless analytics tool that counts page views and referrers in aggregate. It sets no cookies, does not follow you across sites, and does not build a profile of you. When you click a download button, our Cloudflare download worker logs the click with your country, browser user agent, referrer, and a hash of your IP address that is salted with a new value each day. Inside the app, the only analytics are the opt-in usage stats and crash reports described above, and both are off until you say yes.

Fonts

This website loads its font files from Google Fonts, so your browser requests them from Google's servers.

Purchase attribution

If you arrive from a link with campaign tags, or from a known referring site, we note which one in your browser's local storage so that if you later buy Pro or Founding, we know which post or ad led to the sale. This never leaves your browser except as part of a checkout you initiate, it is not a cookie, it does not track you across sites, and it contains no personal data, only things like "came from a TikTok link" or "visited three times before buying."

Forms and email

The email you enter in the download form goes to Kit (formerly ConvertKit), our email provider, under their privacy policy. The feedback and affiliate forms are emailed to us through FormSubmit. The affiliate form also adds your email to our Kit list.

3. Training data

We do not train Xport Studio models on user audio. Voice models you train inside the app are yours, they live in your local Library and are not transmitted to us.

4. Payments

Paid plans (Pro and Founding) are one-time purchases processed by Lemon Squeezy, our merchant of record. Card data is collected and stored by Lemon Squeezy under their privacy policy, Xport Studio receives only a billing token and minimal transaction metadata.

5. Third-party services

• Lemon Squeezy, payment processing (merchant of record) and license activation.
• Kit (formerly ConvertKit), email list and product updates.
• FormSubmit, delivers the feedback and affiliate forms to us by email.
• Vercel, website hosting.
• Cloudflare, the worker that delivers app downloads, plus the servers that receive opt-in usage stats and in-app feedback.
• GoatCounter, cookieless website analytics.
• Google Fonts, font files for this website.
• GitHub Releases, app downloads, update checks, and pack downloads.
• Sentry, crash reports from the app, only if you turn them on.
• Hugging Face, GitHub, the Python Package Index, and PyTorch (download.pytorch.org), AI model and software package downloads the first time a tool needs them.

6. Your rights

You may request export or deletion of your personal data at any time by emailing support@xportstudio.com. We respond within 30 days. If you are in the EU, UK, or California, you have additional rights under GDPR / UK GDPR / CCPA, those rights are honored worldwide.

7. Security

The safest data is the data nobody holds. There are no accounts and no passwords, so there are no credentials to steal. Card details never touch our systems, Lemon Squeezy handles payment as merchant of record. Your audio, your voice models, and your library stay on your machine. What we do hold (email addresses, license records, and opt-in usage stats and crash reports) sits with established providers in secured environments, and we apply standard hardening on our own infrastructure. We are not SOC-2 certified and we won't claim otherwise.

8. Children

Xport Studio is not directed at children under 13. We don't knowingly collect personal information from anyone under 13.

9. Changes

If we change this policy materially, license holders and anyone on our email list will get a notice at least 14 days before the change takes effect. The latest version is always at xportstudio.com/privacy.

The October 2, 2026 update did not change what we collect. It corrects and expands this page to describe what the app and website already did, including the opt-in usage stats and crash reports.

The October 11, 2026 update adds section 10, which covers the Stem Supply Chrome extension. It describes what the extension already does.

10. Stem Supply (Chrome extension)

Stem Supply is our free Chrome extension for muting the vocals, drums, or music on YouTube. It collects no personal data and has no analytics or crash reporting.

• Where it runs. Its buttons appear only on youtube.com, and it only touches a tab's audio after you click one of its buttons or its toolbar icon in that tab. Chrome's install prompt mentions all websites because that is how Chrome words the tab audio permission.
• Your audio. It processes the tab's audio in memory, inside your browser, to mute stems. It never saves that audio to disk or sends it anywhere.
• The AI model. Right after install, it downloads its AI model once (about 166 MB) from Hugging Face and keeps it in the browser's storage. Like any download, that request shows Hugging Face your IP address. It carries no audio and no personal data.
• Counters and links. It keeps a few counters on your device, such as how many times you have used it and whether you dismissed a prompt, so it does not repeat itself. These never leave your browser. Links from the extension to xportstudio.com carry campaign tags (utm_source=stem-muter-extension) so we can count visits from the extension.