Privacy Policy

Scope and principles

This policy covers SSplayer (formerly named BCplayer) for iPhone, iPad, and Apple Watch, plus this privacy and support site. SSplayer contains no advertising or third-party analytics SDK, performs no cross-app tracking, does not sell user data, and does not use Netdisk content for profiling or model training.

Baidu Netdisk is optional. Declining or disconnecting it does not affect local Files import, offline playback, playlists, or workout routines.

Local files and on-device data

When you select audio, video, images, PDF documents, analysis manifests, or folders through Apple’s Files interface, the app reads only the selected items and stores the required copies in its local library. Names, media metadata, artwork, waveforms, favorites, playlists, playback position, and preferences are processed and stored on device.

The app does not modify source files. Removing a library item removes only SSplayer’s local copy. Media copies are excluded from device and iCloud backup where possible.

Optional Baidu Netdisk connection

SSplayer uses Baidu Netdisk Open Platform APIs only after you choose to connect and consent on Baidu’s official authorization page. Within the directory scope granted by Baidu and you, the app receives the account display information and file metadata needed to browse—such as names, paths, types, sizes, and file identifiers—and downloads only the files or supported contents of folders you explicitly select.

This data is used only to show the directory, build a download queue, validate downloads, and import into the local library. SSplayer offers no public-share search, transfer-to-account service, online catalog, or account sharing. It does not automatically download an entire Netdisk without a user selection and does not delete or alter the source files.

Selected content travels through Baidu’s official service directly to SSplayer’s private space on the device. It is not uploaded to a developer-operated media server. You must import only content you created, licensed, or are otherwise legally entitled to use.

OAuth token service

To keep Baidu’s SecretKey out of the app, a developer-operated HTTPS token service performs authorization-code exchange and token refresh. Hosted on Tencent Cloud infrastructure, it transiently processes an authorization code or refresh token only to complete the request you initiated. It receives no Netdisk file list, file name, media content, playlist, or playback history and creates no SSplayer user account.

The application does not intentionally persist authorization codes, access tokens, or refresh tokens in a business database and prohibits these values from application logs. The token function currently has no persistent application logging configured. Tencent Cloud may still process necessary infrastructure records under its service-security rules, such as request time, status, source IP, and coarse error category. SSplayer does not use those records for advertising, profiling, or behavior analytics; their retention and deletion are governed by Tencent Cloud.

Baidu credentials are stored in the iOS Keychain on your device. SSplayer does not place credentials in this GitHub site, public support tickets, or public logs.

Experimental movement cues on Apple Watch

This feature is off by default. Only after you enable it and explicitly start reminders on your watch does SSplayer request workout authorization and use a workout session to support movement-transition cues during fitness practice while the screen is inactive. The iPhone synchronizes a cue schedule and playback state to the paired watch, which executes reminders locally.

SSplayer currently requests no health-sample read access, does not query heart rate, active energy or other health samples, does not create or save workout records, and does not transmit HealthKit data to the developer, Baidu Netdisk or other third parties. watchOS may independently manage sensors and system fitness behavior during a workout session under Apple's policies.

You can end reminders, disable the experiment, or revoke authorization in system health-permission settings. Declining authorization does not affect ordinary music playback or watch remote controls. Workout sessions may increase battery use. This feature remains experimental and should not yet be used for live teaching.

Voluntary developer support and Apple In-App Purchase

Starting with version 1.3.8, the iPhone and iPad apps offer Settings → About → Support the Developer. Water, coffee, and milk tea are labels for voluntary tips, not physical goods. Each tip is a one-time consumable purchase through Apple In-App Purchase. Tips are not subscriptions, do not renew automatically, and unlock no features. All features remain available without tipping.

Apple StoreKit and the App Store provide product information, localized prices, purchase confirmation, and payment processing. Neither SSplayer nor the developer receives your payment card number, bank account details, or Apple Account password. On your device, the app handles product identifiers, transaction identifiers, verification results, and revocation status returned by StoreKit to show the outcome, avoid duplicate processing, and resume unfinished transactions.

The current implementation does not upload tip transactions to developer-operated servers, create developer-side user purchase profiles, or use transactions for advertising, profiling, or third-party analytics. The Baidu token service is separate from tipping and receives no purchase records.

Apple processes payments, purchase records, and refunds under its Privacy Policy and applicable service rules. The developer may view sales and financial reports provided by Apple through App Store Connect; this does not mean the app sends your payment card information to the developer. Uninstalling SSplayer does not delete Apple’s purchase records or automatically request a refund. Use Apple’s purchase-history, refund, or privacy channels for those requests.

Service providers

• Baidu Netdisk provides account sign-in, authorization, file metadata, and user-selected files under its policies.
• Tencent Cloud hosts the minimal token endpoint and its network and security infrastructure.
• Apple provides Files, Keychain, background media, sharing, app distribution, and In-App Purchase and transaction processing when you choose to make a purchase.
• GitHub Pages serves this static site only when you open it. The app sends no media or Baidu account data to GitHub.

Each provider receives only what is necessary for its role. SSplayer does not permit the information to be used for advertising or cross-app tracking.

Retention, deletion, and revocation

• Delete imported items, download cache, playlists, and favorites in the app.
• Disconnect Baidu Netdisk in Settings to remove the local Keychain session and stop future access.
• Revoke SSplayer separately from Baidu’s account authorization management.
• Disconnecting does not delete source files. Imported local copies remain until you remove them in SSplayer.
• Uninstalling normally removes the local library and settings. To end Baidu authorization reliably, disconnect and revoke before uninstalling.

See Privacy choices and deletion for the steps.

Children, transfers, and changes

SSplayer does not collect data from children or create age-based profiles. It does not intentionally transfer media, file listings, or playback history overseas. Service infrastructure may process connection data under its published terms.

If accounts, networking, logging retention, or other data practices materially change, this policy, the in-app disclosure, and App Store privacy answers will be updated before the feature ships.

Contact and terms

For privacy, deletion, or security questions, use the Support page. Never include Baidu credentials, tokens, private paths, or media in a public ticket.

Use is also subject to the SSplayer Terms of Service and the terms of Baidu, Apple, and other applicable providers.