Your privacy

Effective 26 October 2026

This policy explains what information the XY Management app ("XY", "we") collects, why we collect it, who it is shared with and the choices you have. XY Management is a model management agency based in Beirut, Lebanon. Questions: Emily@xymanagement.co.

Information we collect

Information you give us

Account details: name, email address, phone number, profile photo, and the account type you choose (client, model, agency or collaborator). If you sign in with Apple or Google, we receive your name and email from them.
Client and agency details: company name, role, website, social links and project information such as dates, location, budget, briefs, voice notes and files.
Model profiles (Profile Studio): date of birth, gender, nationality, city, languages, measurements and sizes, appearance (hair, eyes, skin tone and similar), experience, skills, preferences for types of shoots, availability, rates, a short bio, photos, digitals, an intro video, a demo reel and a portfolio PDF. Some answers are marked private in the app (for example rates, limits on types of shoots, family details, emergency contact and links); these are visible only to the XY team.
Identity verification: a photo of a government ID and a selfie, used only to confirm that a model is who they say they are.
Guardian details: for models under 18, the profile is created and managed by a parent or legal guardian, whose name and contact details we collect along with their consent.
Messages to us: anything you send to support.

Information collected automatically

A push notification token, so we can send you notifications you allow.
Basic technical information needed to run the app, such as device type, operating system and app version.
Records of actions in the app, such as searches, shortlists and approvals, so the service works and can be supported.

We do not use advertising identifiers, we do not track you across other apps or websites, and we do not sell your information.

How we use it

To create and run your account and review and approve accounts.
To show approved model profiles to approved clients, and to help clients find suitable models.
To arrange, confirm and manage projects and bookings.
To verify models' identity and keep the platform safe.
To send you notifications about approvals, projects and messages from the XY team.
To answer support requests and improve the app.

Who can see what

Approved clients see the public part of approved model profiles: photos, measurements, appearance, experience, skills and preferences. They see a profile code rather than a model's full legal name, and never contact details, identity documents, rates or private answers.
The XY team can see all information in order to review accounts, verify identity and manage bookings.
Collaborators invited to a project see that project's details and shortlist.
Model profiles are never shown to the public.

The casting assistant and AI

The casting assistant uses Claude, an AI service provided by Anthropic. When a client searches, the text of their brief and the profile facts of matching models (such as age, height, appearance, skills, experience and shoot preferences) are sent to Anthropic to understand the brief and rank the matches. Names, contact details, identity documents, rates and private answers are never sent. Anthropic processes this data to provide the service and does not use it to train its models. Models agree to this in the Profile Studio before their profile can be shown, and the assistant only suggests; people make every decision.

Service providers

We use a small number of providers who process data on our behalf, only to run the app:

Supabase: database, sign-in and private file storage.
Anthropic: the AI that powers the casting assistant, as described above.
Expo, Apple and Google: delivery of push notifications and app updates.
Apple and Google: sign-in, if you choose to use them.

We may also disclose information if required by law or to protect the safety of our users.

How we protect it

Files and photos are stored privately and open only through short-lived signed links that expire automatically.
Identity documents are visible only to XY staff and are never shared with clients.
Access to data is restricted by account type at the database level.
The app can block screenshots and screen recordings to protect model photos.

How long we keep it

We keep your information while your account is open. When you delete your account, your profile, photos, files and projects are permanently removed. We may keep limited records where the law requires it, such as records of completed bookings.

Your choices and rights

View and edit your information at any time in the app.
Hide your model profile at any time from My card.
Turn notifications on or off in your phone's settings.
Delete your account in the app from Settings, Delete account, or by emailing us.
Ask us for a copy of your information, or to correct or delete it, by emailing Emily@xymanagement.co.

Children

Accounts are for adults. Profiles of models under 18 can only be created and managed by a parent or legal guardian, who gives consent on the minor's behalf and can withdraw it at any time. Profiles of minors are shown only for briefs that ask for children or teenagers.

Changes

We may update this policy as the app grows. If we make important changes we will let you know in the app. The date at the top shows when it was last updated.

Contact

XY Management, Beirut, Lebanon. Emily@xymanagement.co

XY Management · Beirut, Lebanon · Emily@xymanagement.co · Support · Privacy