Advantages
Why European and North-American studios choose xinghzhe over the usual suspects. Five engineering advantages — programmatic generation, privacy-first architecture, immersive interaction design, local-first data processing and deep cross-disciplinary expertise — each one in a class of its own.
Production apps
Published on the App Store under the xinghzhe label.
Active installs
Across iOS, iPadOS, macOS, visionOS and watchOS.
On-device by default
No cross-border trackers. No cloud requirement.
Brief turnaround
One-page project brief within 48 working hours.
Engineers
Across audio, ML, design, privacy and product.
Languages supported
EN, FR, DE, ES, IT, NL, PT, ZH-CN, ZH-TW, JA, KO, AR…
Crash-free sessions
Across all six apps over the last 180 days.
Jurisdictions audited
EU, UK, US-CA, US-VA, US-CT, US-CO, BR, JP, KR.
Five engineering advantages.
01 · Programmatic Generation
Break free from static presets. We replace fixed sounds, fixed visuals and fixed interaction patterns with procedural engines that produce infinite, organic, context-aware output. The result is software that feels alive on the hundredth use, not just the first.
- Procedural audio synthesis · Core Audio · Web Audio · AudioUnit v3
- Real-time generative shaders · Metal · GLSL · WGSL · MSL
- Parametric interaction graphs · SwiftUI · Compose
- ML-driven content synthesis · Core ML · ONNX Runtime
- Deterministic seeded RNGs for reproducible output
- Reactive UI that breathes with audio / motion data
02 · Privacy-First Architecture
Compliance is not a checkbox. Every xinghzhe project ships with a written threat model, a consent UX reviewed by external counsel, on-device ML governance, App Privacy nutrition labels and a privacy-impact review pipeline. We have shipped under GDPR, UK-GDPR, CCPA, VCDPA, CPA, CTDPA, COPPA, FERPA and PIPL.
- Threat-model workshops (STRIDE / LINDDUN)
- App Privacy & Data Safety nutrition-label preparation
- End-to-end encryption audits (AES-256-GCM, libsodium)
- On-device ML safety pipeline
- DPIA / ROPA drafting
- Penetration-testing partner programme
03 · Immersive Interaction Design
Quiet interfaces. Calm motion. We design for the moment after the first impression — when a product becomes a quiet companion rather than a chore. Every transition is hand-tuned, every motion curve is justified, every micro-animation is reduced-motion-safe.
- Figma-native design system hand-off
- Motion & micro-interaction library (Rive / Lottie)
- Shader-driven scenes & generative typography
- WCAG 2.2 AA accessibility built in from day one
- Reduced-motion & high-contrast modes
- Adaptive light / dark / custom-themes
04 · Local-First Data Processing
Your data stays on your device. Cloud sync is opt-in, never the default. We build with Core Data, SwiftData, Realm, Room, SQLite and GRDB. When we do reach for the cloud, we publish the threat model, encryption scheme and key-rotation policy.
- Core Data / SwiftData / Room / Realm
- CRDT-based sync (Yjs, Automerge) when sync is needed
- End-to-end encrypted sync (E2EE)
- Exportable user data (JSON / ZIP / CSV)
- One-tap account deletion
- Stateless, ephemeral cloud functions
05 · Cross-Disciplinary Expertise
Our team spans procedural audio engineering, shader programming, on-device ML, product design, threat modelling, accessibility auditing and App Store compliance. The result is software that holds together: an interaction designer can talk to a DSP engineer without a translator, and a privacy lawyer can review code, not just paperwork.
The stack.
Every tool in our standard toolkit is open-source where possible, audited where required, and reproducible across the team. No proprietary black boxes, no hidden lock-in.
Languages & Runtimes
- Swift 5.9+ / Objective-C
- Kotlin 1.9+ / Java
- Rust 1.75+
- TypeScript 5 / WebAssembly
- C++20 (DSP & shaders)
- Python 3.12 (tooling)
- Go 1.22 (internal services)
Frameworks & SDKs
- SwiftUI · UIKit · AppKit · Compose Multiplatform
- Combine · async/await · RxSwift
- Core ML · ONNX Runtime · llama.cpp
- Core Audio · Web Audio · JUCE
- Metal · OpenGL ES · WebGPU
- Realm · SQLite · Yjs
Tooling & CI/CD
- Xcode 15 · Android Studio Iguana
- Fastlane · Xcode Cloud · GitHub Actions
- Bitrise · CircleCI · Codemagic
- TestFlight · Firebase App Distribution
- Sentry (self-hosted EU region)
- Percy / Chromatic visual regression
Security & Cryptography
- libsodium / NaCl
- Apple CryptoKit / Android KeyStore
- Secure Enclave / StrongBox / TPM
- OWASP MASVS / NIST SP 800-57
- Trivy / Snyk / GitGuardian secret scan
- Veracode static analysis partner
Privacy & Compliance
- OneTrust / Cookiebot ready
- DPIA & ROPA templates
- SCCs & IDTA pre-signed
- App Privacy nutrition label audits
- US state-level (CCPA / VCDPA / CPA / CTDPA)
- APPI (JP) / PIPA (KR) / LGPD (BR)
Hosting & Infrastructure
- EU (Dublin, Frankfurt) — primary
- UK (London) — secondary
- US-East (Virginia) — backup
- 100 % renewable energy hosting partners
- ISO 27001 + SOC 2 Type II hosting
- Daily encrypted backups, 30-day retention