AuraPlayer Privacy Policy
- Effective Date: October 13, 2026
- Developer: AppFlowStudio
- Contact: aurafeedback@163.com
AuraPlayer (the "App") is a local media playback and library management tool. We process your data under a strict data-minimization principle. This policy explains what information we collect, how we use and protect it, and the rights you have.
In case of discrepancy among translated versions of this policy, the English version prevails.
1. Information We Collect
Device and Identifiers
- A random device identifier generated locally on your device, used for quota management and service governance;
- Operating system type, App version, and interface language.
Network and Security
- Your IP address, used solely for rate limiting, abuse prevention, and service security.
Information You Submit
- When you use the smart scraping feature, the media file names you choose to submit (file names only — never file contents), used to match movie and music metadata.
Subscription and Transaction Data
- Subscriptions and payments are handled by Apple. To validate your subscription status, we receive anonymous transaction identifiers provided by Apple (such as order numbers). These contain no name, Apple account details, or payment information.
What we do NOT collect
- The contents of your media files, your photo library, contacts, location, or any data unrelated to the App's features. Playback, streaming, and casting connections take place directly between your device and the servers you specify (such as your NAS, the IPTV playlist sources you add, or your casting devices). Your media data never passes through our servers;
- The App contains no advertising components or tracking SDKs, does not use IDFA or any other advertising identifier, and performs no cross-app tracking or user profiling.
2. How and Why We Use Information
We use the above information to:
- Provide and maintain core features such as smart scraping and network configuration;
- Manage quotas and prevent abuse of our APIs;
- Compile anonymized usage statistics that help us improve the product;
- Handle inquiries and requests you send us.
Legal basis: providing subscription features and quota management is necessary for the performance of our service contract with you; logging and rate limiting are necessary for information security; by submitting file names for scraping, you consent to our processing of that information for that purpose.
3. Third-Party Services
| Third Party | Purpose | Data Transferred |
|---|---|---|
| Zhipu AI (GLM, bigmodel.cn) | AI-powered title cleaning | Media file names you submit |
| TMDB (The Movie Database) | Movie and TV metadata matching | Search terms (titles) |
| Apple | Subscriptions, trials, and payments | Processed by Apple under its own privacy policy |
These providers process data under their respective privacy policies and security standards.
4. Storage and Security
Storage Location and Cross-Border Transfer
- Our servers are located in China. If you use the App from outside China, your information will be transferred to and stored on servers in China over encrypted channels in order to provide the service. By using the relevant features, you consent to such transfer for that purpose.
Retention Periods
| Data Category | Retention |
|---|---|
| Device identifier | As long as necessary to provide the service; deleted or anonymized within 12 months after uninstall |
| Scraping file-name cache | Up to 7 days, then automatically deleted |
| IP and security logs | Up to 30 days |
| Transaction identifiers | As long as necessary for subscription validation; deleted after the subscription lapses |
Safeguards and Incident Notification
- We apply industry-standard safeguards including encrypted transport, access control, and least-privilege principles;
- In the event of a personal data security incident, we will activate contingency measures immediately and inform you of the nature of the incident, its likely impact, and the remedial steps taken, via in-app notices, email, or other reasonable means.
5. Your Rights
- You may request access to, a copy of, correction or deletion of your personal information, or withdraw your consent;
- We will respond within 15 working days of receiving your request; where an extension is genuinely necessary, we will explain why;
- The App has no account system: uninstalling the App is the equivalent of account deletion. Upon uninstallation we stop collecting any new data, and previously collected information is deleted or anonymized in accordance with the retention periods in Section 4 (caches are automatically cleared within 7 days; the device identifier is deleted or anonymized within 12 months);
- If you believe our processing of your personal information infringes your rights, you may complain via aurafeedback@163.com. If you are not satisfied with the outcome, you also have the right to lodge a complaint with a data protection supervisory authority.
6. Children
The App is not directed at minors, and we do not knowingly collect personal information from minors. If we become aware of any such data, it will be deleted upon notice.
7. Changes to This Policy
We may update this policy from time to time. Updates will be published on this page with a revised effective date. Material changes will be communicated via in-app notices or other appropriate means.
8. Contact Us
Questions about this policy: aurafeedback@163.com