The app makes no network requests of its own except the ones below, and only for the reason given:
Microsoft Store licence check, handled by Microsoft, to confirm your trial or purchase.
Questions that need live facts, only when you ask one (for example news, weather, exchange rates or a definition): the words of that question are sent to the public service that answers it: Wikipedia, Wiktionary, Google News, Bing news, MET Norway for weather or Frankfurter for exchange rates. No voice audio, account, key or identifier is sent. Questions about your own PC are answered on your PC.
Playing a video on YouTube
When you ask to play something, the words you spoke for that request are sent to YouTube to find the top result.
Internet check, only when you ask (for example "is my internet working"): the app pings two public addresses, 1.1.1.1 and 8.8.8.8, and fetches Microsoft's connectivity test page. Nothing about you is sent.
Internet speed test, only when you ask
Test data is downloaded from and uploaded to Cloudflare's speed test service. Nothing about you is sent.
Public IP address, only when you ask
The app asks ipify, a public address service, which address the internet sees for your connection.
Windows Update check, only when you ask (for example "is my PC up to date"): the app asks the Windows Update service on your PC which updates are waiting. Nothing is downloaded or installed unless you ask for that.
Phone as a microphone
If you link a phone, its audio travels only across your own local network to your PC.
Websites you ask for
Searches and pages you ask the app to open are opened in your own browser, under that site's own privacy policy.
No data is sent to XLUNA.