ZZPlay 隐私政策
Privacy Policy

一、总则：我们不收集任何数据

ZZPlay 是一款本地优先的媒体播放器。我们没有服务器，不设账号，不接入任何统计、分析或广告 SDK；我们不收集、不存储、不出售、也不共享你的任何个人信息。

二、完全留在设备上的数据

以下数据仅保存在你的设备本地，只用于功能本身，随删除 App 一并清除：

• 你导入或访问的图片、视频、PDF 及其缩略图缓存
• 观看进度、播放偏好、幻灯片间隔等设置
• 诊断日志（播放/网络关键事件上限 4MB 循环覆盖；系统崩溃诊断最多保留 14 天、10 份，超限自动清理）——日志会记录媒体文件名以便定位播放问题；永不自动上传，仅当你在「设置 → 通用 → 帮助与反馈」主动导出发送时才离开设备

这些数据可能随系统备份（iCloud / 电脑备份）由 Apple 依其政策处理。

三、局域网（SMB）访问

连接局域网共享时，App 与你指定的设备在本地网络内直接通信；SMB 登录凭据仅保存在系统钥匙串（Keychain）。数据不经过任何第三方服务器——我们也没有服务器。

四、零数据外发的设备端处理、零麦克风

本 App 没有 AI 对话、没有内容分析外发、不申请麦克风与语音识别权限，从不收音。「自动生成空间场景」用的是 visionOS 系统在本机把 2D 图片转成 3D 空间照片的能力——全程在设备上完成，图片不上传、不经过任何服务器（我们也没有服务器）。

五、在线字幕（部分地区）

若你配置了自己的 OpenSubtitles 账号，匹配字幕时会向 OpenSubtitles 发送视频文件名与文件哈希，受 OpenSubtitles 隐私政策约束。不配置则此功能不可用、无任何外发。

六、购买

打赏为 Apple 应用内购买，支付全程由 Apple 处理，我们不接触你的任何支付信息。

七、系统权限清单

• 本地网络：发现并连接局域网 SMB 共享
• 空间配件与手部感知：追踪 PS VR2 手柄射线、对正画面朝向
• 世界感知：感知头显在空间中的位置与朝向，用于对正画面、锚定环境与手柄射线

权限均按需弹窗征求，可在系统设置中随时撤销。

八、儿童

本 App 不面向 13 周岁以下儿童，不有意收集儿童信息（事实上我们不收集任何人的信息）。

九、政策变更

政策如有变更，将随 App 更新在本页发布；重大变更会在版本更新说明中提示。

十、联系我们

关于隐私的任何疑问，请发邮件至 zzplay111@gmail.com。

English

1. Overview: we collect nothing

ZZPlay is a local-first media player. We run no servers, require no accounts, and embed no analytics, tracking, or advertising SDKs. We do not collect, store, sell, or share any personal information.

2. Data that never leaves your device

The following stays on your device, serves only its feature, and is removed when you delete the app:

• Photos, videos, and PDFs you import or access, plus their thumbnail caches
• Watch progress, playback preferences, slideshow settings
• Diagnostic logs (playback/network key events, capped at 4 MB with rolling overwrite; system crash diagnostics kept for at most 14 days and 10 files, pruned automatically) — logs include media file names to help diagnose playback issues; never uploaded automatically; they leave your device only when you export and send them yourself via Settings → General → Help & Feedback

Such data may be included in system backups (iCloud / computer), handled by Apple under its own policies.

3. Local network (SMB)

When you connect to a network share, the app talks directly to the device you specify over your local network. SMB credentials are stored only in the system Keychain. No third-party server is involved — we don't have one.

4. On-device processing, zero microphone

This app has no AI chat and sends none of your content anywhere for analysis. It does not request microphone or speech-recognition permissions and never records audio. "Generate spatial scene" uses the visionOS system capability that turns a 2D photo into a 3D spatial photo on your device — it runs entirely locally; the image is never uploaded and passes through no server (we don't have one).

5. Online subtitles (select regions)

If you configure your own OpenSubtitles account, subtitle matching sends the video file name and a file hash to OpenSubtitles, governed by the OpenSubtitles privacy policy. Without your own account this feature is unavailable and nothing is sent.

6. Purchases

Tips are Apple in-app purchases. Payment is handled entirely by Apple; we never see your payment details.

7. System permissions

• Local network: discover and connect to SMB shares
• Spatial accessories & hand sensing: track PS VR2 controller rays and align content to your view
• World sensing: sense the headset's position and orientation in space, to align content to your view and anchor the environment and controller rays

Each permission is requested in context and can be revoked anytime in system settings.

8. Children

The app is not directed at children under 13 and does not knowingly collect information from children (we collect no one's information).

9. Changes

Updates to this policy ship with app updates on this page; significant changes are noted in release notes.

10. Contact

For privacy questions, email zzplay111@gmail.com.