Popvee Player Privacy Policy

Version: 2026-07-15-1 · Last updated: July 15, 2026

I. Applicability and Definitions

This Privacy Policy describes how Popvee Player (hereinafter referred to as "this Software") collects, uses, shares, stores, and protects your personal information during your use. Please read and fully understand this Policy carefully before using this Software. The term "personal information" adopts the definitions set forth in applicable laws and regulations, including the Personal Information Protection Law (China), CCPA (California, USA), GDPR (EU), and others.

II. Information We Collect

We collect only the information necessary to provide core functionality:

• Account Information (at registration): email address, username, and hashed password; for Sign in with Apple, an anonymous ID provided by Apple and an optional email address.
• Device Information: device model, macOS version, client version number, anonymous device identifier (used for device binding and crash localization).
• Preferences and Sync Data (PRO users): favorites, watch history, home channel configuration, playback preferences (uploaded only when you actively enable synchronization).
• Third-Party Account Credentials: cloud drive tokens, NAS account credentials, TMDB keys, translation keys — stored locally, such as in your macOS Keychain where applicable, and not uploaded to our servers unless a feature clearly informs you otherwise and you actively enable it.
• Crash and Diagnostic Data: stack traces and operation logs (excluding video content) when errors occur.

III. How We Use Your Information

① To provide and maintain the service, processing account registration, login, subscription, and feature invocations; ② to synchronize across devices the data you actively choose to sync; ③ to diagnose and repair faults; ④ to improve product experience and develop new features; ⑤ to comply with legal and regulatory requirements or respond to lawful requests from competent authorities. We will not use your personal information for purposes unrelated to the foregoing.

IV. Third-Party Sharing and Cross-Border Transfer

We share your information with third parties only in the following circumstances:

• Third-party services you actively invoke: cloud drive OAuth, TMDB queries, subtitle translation (subtitle text sent to translation engines such as Baidu/DeepL/OpenAI), Apple In-App Purchase verification (receipt sent to Apple);
• Essential operational service providers: cloud storage (Alibaba Cloud/AWS), email delivery, crash monitoring (Sentry);
• Legal obligations: as required by laws and regulations or lawful demands from judicial authorities.

Data of users in mainland China is stored on domestic servers and is not transferred abroad. Data of overseas users is stored on AWS in the United States and is subject to local privacy laws. We do not sell your personal information to any third party.

V. Data Storage and Security

We employ industry-standard security measures to protect your information: HTTPS full-link encryption, argon2id/bcrypt password hashing, periodic Token rotation, and storage of sensitive credentials in your local Keychain. Account information is retained until you actively cancel your account; sync data is purged 24 months after your last use; crash logs are retained for 90 days.

VI. Special Notes on AI Subtitles and Translation

AI subtitle generation is performed offline on your local device (based on the SenseVoice model), and audio files are not uploaded. Generated subtitle files are stored in your local Application Support directory. Subtitle translation requires sending text to third-party translation services (default: Baidu for China region, DeepL for US region). Please carefully evaluate whether you are willing to send your subtitle text to such services. Upon completion of translation, our servers do not retain the source text or the translated text.

VII. Google Drive API Data

Popvee Player requests the Google Drive read-only permission solely to let users browse, locally index, and stream media files stored in their own Google Drive accounts.

• OAuth tokens are stored in the user’s macOS Keychain and are not uploaded to Popvee servers.
• Google Drive file metadata and the media-library index are processed and stored locally on the user’s device.
• Original media files are streamed directly between Google Drive and the user’s device. Popvee does not upload or permanently store those files on its servers.
• If the user explicitly enables online metadata matching, a normalized media title may be sent to TMDB to retrieve posters and descriptive metadata. Original media files and Google OAuth credentials are never sent to TMDB.
• Users can disconnect Google Drive from within Popvee Player. Disconnecting removes the locally stored OAuth credentials and the associated local Drive index.
• Google Drive data is not used for advertising, credit decisions, surveillance, or training generalized AI models.

Popvee Player’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

VIII. Google Drive 数据使用

Popvee Player 仅请求 Google Drive 只读权限，用于用户主动连接后的目录浏览、本机影库索引及媒体播放。

• Google OAuth Token 仅保存在用户设备的 macOS 钥匙串，不上传至 Popvee 服务器。
• Google Drive 文件名、目录、大小及媒体索引在用户设备本地处理和保存。
• 原始视频文件由 Google Drive 直接传输至用户设备，Popvee 不会在服务器中转、上传或永久存储这些文件。
• 用户主动启用在线元数据匹配时，规整后的影视标题可能被发送至 TMDB，以获取海报和影视资料；原始视频与 Google OAuth 凭据不会发送给 TMDB。
• Google Drive 数据不会用于广告、征信、监控或通用 AI 模型训练。
• 用户可在 Popvee Player 中断开 Google Drive。断开后删除本机 OAuth 凭据及相关 Drive 索引。
• Popvee Player 对 Google API 数据的使用和传输遵守 Google API Services User Data Policy，包括 Limited Use 要求。

IX. Your Rights

You may, at any time: ① view and modify your account profile (Settings → Account); ② export all of your data (a download link will be provided, generated within 24 hours); ③ cancel your account (revocable within 30 days of cancellation; after 30 days, data is physically deleted); ④ revoke third-party service authorizations (disconnect from the corresponding connection list). For questions, complaints, or suggestions regarding the handling of personal information, you may contact us through the in-app feedback channel or by email; we will respond within 15 days.

X. Policy Changes and Protection of Minors

This Policy may be revised in response to changes in laws and regulations or product features. The updated version will be prominently displayed within the software or on the official website, and for material changes, a pop-up or other prominent notice will seek your renewed consent where required. This Software does not provide services to minors under the age of 13. If you discover an erroneous registration of such a minor, please notify us through the feedback channel, and we will promptly delete the associated account and data. This Policy was last updated on: July 15, 2026.