🔒 Privacy Policy

Last updated: September 18, 2026  ·  Effective: Immediately

This Privacy Policy describes how TINHIFI Audio Co., Ltd. (“TINHIFI“, “we“, “us“, or “our“) collects, uses, and protects your personal information when you visit xchifi.com (the “Site”), make a purchase, or interact with our services. By using the Site, you agree to the practices described below.

1. Information We Collect

We collect the following categories of personal information to provide and improve our in-ear monitor products, services, and community experience:

1.1 Information You Provide Directly

• Account Information: When you register an account, we collect your name, email address, username, and password (encrypted).
• Payment Information: When you back a crowdfunding campaign or purchase products, we collect billing details, shipping address, and transaction records. Payment data is processed by third-party providers (Growfund, Stripe, PayPal) — we do not store full credit card numbers on our servers.
• Communications: When you contact our support team, sign up for newsletters, or participate in surveys, we collect the content of those communications.
• User Content: Comments, reviews, forum posts, and any content you submit to our community sections.

1.2 Information Collected Automatically

• Device & Usage Data: IP address, browser type, operating system, referring URL, pages viewed, time spent on pages, and click patterns.
• Cookies: We use cookies, web beacons, and similar technologies to recognize your device, remember preferences, and analyze Site usage. See our Cookie Policy for details.
• Analytics: We use anonymized analytics tools to understand how visitors interact with the Site.

2. How We Use Your Information

We use your personal information for the following purposes:

1. To Provide Services: Process orders, ship products, manage crowdfunding campaigns, and deliver customer support.
2. To Improve Products: Analyze community feedback, run product tests, and develop new IEM tunings and designs.
3. To Communicate: Send transactional emails (order confirmations, shipping updates), newsletters (with consent), and promotional offers.
4. To Prevent Fraud: Detect and prevent fraudulent transactions, abuse, and security incidents.
5. To Comply with Law: Meet legal obligations, respond to lawful requests, and enforce our Terms of Service.

3. Sharing of Your Information

We do not sell your personal information to third parties. We share information only in the following limited circumstances:

• Service Providers: Payment processors (Growfund, Stripe, PayPal), shipping carriers, email service providers (when configured), and analytics services.
• Legal Requirements: When required by law, court order, or to protect our legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.
• With Your Consent: For any other purpose disclosed at the time of collection.

4. Data Security

We implement industry-standard technical and organizational safeguards to protect your personal information:

• HTTPS encryption for all data in transit
• Encrypted password storage (bcrypt)
• Regular security audits and penetration testing
• Restricted access to personal data on a need-to-know basis
• Daily automated backups with encrypted storage

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a portable format
• Opt-out: Unsubscribe from marketing emails at any time
• Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at privacy@xchifi.com.

6. International Data Transfers

Our servers are located in Hong Kong (Alibaba Cloud) with backup storage in Singapore. By using the Site, you understand that your data may be transferred to, stored, and processed in these regions. We implement appropriate safeguards for international transfers in compliance with applicable data protection laws.

7. Children’s Privacy

The Site is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us at privacy@xchifi.com and we will delete the information promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects when changes were made. Material changes will be notified via email or a prominent Site notice.

9. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

This policy is governed by the laws of Hong Kong SAR, China. Any disputes will be resolved in the courts of Hong Kong.