Panvox Privacy Policy
This policy applies to the Panvox app on all platforms. 中文版
Effective Date: October 6, 2026
Summary (read this first)
- Panvox has no account system — no sign-up, and we collect no identity information.
- All of your media files, playback history, and subtitle caches stay on your device.
- The app contains no analytics, advertising, or crash-reporting components.
- The only data that ever leaves your device: ① the connection details of media sources you add yourself (e.g. your NAS / WebDAV server); ② the transcribed text of a video's audio, sent to the large-model provider you configure, and only when you use AI subtitles.
1. Information We Collect
1.1 What we do not collect
Panvox does not collect, generate, or transmit:
- Registration or login information (there is no account system);
- Usage statistics, behavioral analytics, or advertising identifiers (IDFA / GAID / device fingerprints);
- Crash reports or performance-monitoring data;
- Your video or audio files themselves (see 1.2).
1.2 Data stored only on your device (never uploaded)
| Data | Purpose | Storage |
|---|---|---|
| Library index, playback position, watch history | Resume playback, UI display | Local app data directory |
| Generated subtitles and caches | Local cache for AI subtitles (SRT) | Local subtitle cache directory |
| Media-source details (WebDAV/SMB server address, username, password) | Connecting to the servers you specify | Local secure storage only (system keychain / encrypted config); never sent to the developer or any third party |
Uninstalling the app or clearing its data completely removes all of the above.
1.3 Data that leaves your device
① Media-source connections (core feature): when you add a WebDAV/NAS/SMB source, the app connects only to the server you specified (address, port, credentials for authentication). Traffic flows directly between your device and that server — never through developer infrastructure.
② Transcribed text for AI subtitles (optional feature): speech recognition for AI subtitles runs on your device by default (a built-in recognition model; audio never leaves the device). When generating translated subtitles, the text transcript of the video's speech is sent over HTTPS to the large-model provider you configure in settings (any compatible endpoint — you enter the provider URL and API key yourself). The audio file itself is never uploaded. If you configure no model service, or use the offline translation model, no data leaves your device at all.
API keys and provider settings are stored only in the local configuration.
1.4 Crash reporting and diagnostics
The current version integrates no crash collection. If an optional crash reporter is ever added, we will update this policy and ask for your explicit consent in-app before enabling it.
2. Third-Party Services
| Provider | When involved | Notes |
|---|---|---|
| The large-model provider you configure | When using AI subtitle translation | Receives the transcript; its handling of data is governed by that provider's own privacy policy — please read it when choosing a provider |
| App stores (Apple / Google / Microsoft / Huawei) | Download, updates, purchases | Distribution and payments are handled by the stores under their own privacy policies |
Other than the two above, Panvox uses no third-party SDKs.
3. Data Security
- Credentials are kept only in local secure storage; media-source and AI traffic is TLS-encrypted (HTTPS);
- Subtitle/translation requests are not tied to any device identifier;
- We run no servers, so there is nothing on our side to access or leak.
4. Children
Panvox collects no personal information (see Section 1), hence none from children. The app itself contains no age-restricted content; what media is available is determined by the user (or parent) supplying it.
5. Your Rights
Because nearly all of your data lives on your device:
- Deletion: uninstalling the app or clearing its data deletes everything locally, completely;
- Export: subtitles are saved locally in standard SRT format and can be taken out at any time;
- Access / correction: for anything else you believe concerns you, contact us below.
If you are in the EU (GDPR), California (CCPA/CPRA), or any jurisdiction with statutory data rights: since we build no profiles and never transmit your personal data to developer-side systems, local deletion as described above satisfies legal erasure; data held by your chosen model provider is governed by that provider's privacy policy.
6. Changes to This Policy
If this policy changes materially (e.g. any new data collection), we will announce it in-app and in store release notes; changes introducing new data collection take effect only after we obtain your consent again.
7. Contact
- Email: mfjt55@163.com
- Feedback & issues: GitHub Issues