隐私政策

最后更新：2026年7月 · 适用产品：音盒 EchoBox（iPhone / iPad / Mac / Apple TV）

音盒是一款连接你自有 NAS 与网盘的私人音乐播放器。音盒不提供、不托管任何音乐内容，也不运营需要注册的账号体系。我们坚持数据最小化：绝大多数信息只保存在你的设备与你自己的私人 iCloud 中。

一、我们收集与处理的信息

1. 你主动提供的连接信息

为连接你指定的媒体服务器或网盘，你会填写服务器地址、用户名、密码，或网盘的授权凭据（如 Cookie / 令牌）。这些信息保存在你的设备本地；若你开启 iCloud 同步，它们会保存在你自己的私人 iCloud 中，用于在你的设备间同步。这些凭据不会上传到音盒运营方的服务器。

2. 音乐库与使用数据

音盒会在本地生成并缓存你的音乐库信息（专辑、歌曲、封面等元数据）、播放历史、评分、隐藏与整理设置、当前播放进度。若你开启 iCloud 同步，其中部分数据会通过你的私人 iCloud 同步。这些数据用于提供播放与整理功能，默认不发送给音盒运营方。

3. 播放所需的网络请求

播放、浏览、搜索、获取封面与歌词时，音盒会直接向你配置的服务器 / 网盘发起请求。相关地址、凭据与流量在你的设备与你的服务器之间传输，音盒运营方不介入、不留存这些内容。

4. 购买信息

订阅与买断通过 Apple App Store 应用内购买完成。支付由 Apple 处理，我们不会收集或存储你的支付方式、银行卡号等信息。音盒仅通过 Apple 提供的凭据判断你是否拥有有效的购买权益。

5. 我们不做的事

不接入第三方广告网络，不做广告追踪。
不要求你注册音盒账号、不收集手机号或身份证件。
不会将你的凭据、音乐库或收听记录出售或共享给第三方用于营销。

二、信息的使用目的

连接并播放你自有来源的音乐；
展示与整理你的音乐库、歌词、封面；
在你开启同步时，通过你的私人 iCloud 在设备间同步配置与整理结果；
校验你的 App 内购买权益；
诊断与修复故障（诊断信息经过脱敏，且默认仅用于你本机排查）。

三、信息的存储与保留

本地数据保存在应用沙盒中，你卸载 App 即清除。iCloud 同步数据保存在你自己的 Apple 账号下，受 Apple iCloud 条款约束，你可随时在设备内关闭同步或清除数据（见「数据与账户删除」）。

四、第三方

Apple：App 分发、应用内购买与 iCloud 同步由 Apple 提供，适用 Apple 隐私政策。
你配置的服务器 / 网盘：由你自己拥有或授权，其数据处理由对应服务商的条款约束。

五、你的权利（依据《个人信息保护法》等）

你有权访问、更正、删除你在音盒中的个人信息，撤回同步授权，以及注销与音盒相关的本地/同步数据。多数操作可直接在 App 内完成（见数据与账户删除）。如需协助，请通过下方邮箱联系我们。

六、未成年人

音盒不面向 14 周岁以下儿童设计，也不会有意收集儿童个人信息。

七、政策更新

本政策可能不时更新，更新后会在本页面公布并注明最新日期。重大变更我们会以合理方式提示。

八、联系我们

如对本隐私政策有任何疑问，请联系：support@echobox.cc

运营主体名称与联系地址：待补充。

Privacy Policy

Last updated: July 2026 · Product: EchoBox (iPhone / iPad / Mac / Apple TV)

EchoBox is a private music player for your own NAS and cloud drives. It does not host or provide any music content and has no account system to register. We follow data minimization: almost everything stays on your device and in your own private iCloud.

1. Information we process

a. Connection details you provide

To connect a media server or cloud drive you choose, you enter its address, username and password, or a drive's authorization credential (e.g. cookie / token). These are stored on your device and, if you enable iCloud sync, in your own private iCloud to sync across your devices. They are not uploaded to any EchoBox-operated server.

b. Library and usage data

EchoBox builds and caches your library information (albums, songs, artwork and other metadata), playback history, ratings, hide/organize settings and current position locally. If you enable iCloud sync, some of this syncs through your private iCloud. It is used to power playback and organization and is not sent to EchoBox by default.

c. Network requests for playback

To play, browse, search and fetch artwork/lyrics, EchoBox talks directly to the servers/drives you configured. The addresses, credentials and traffic move between your device and your servers; EchoBox's operator is not in the middle and does not retain this content.

d. Purchases

Subscriptions and the lifetime purchase happen through Apple's in-app purchase. Payment is handled by Apple; we do not collect or store your payment method or card details. We only read Apple's entitlement to know whether you have an active purchase.

e. What we do not do

No third-party ad networks and no advertising tracking.
No EchoBox account, phone number or ID collection.
We never sell or share your credentials, library or listening history with third parties for marketing.

2. How information is used

Connect to and play music from your own sources;
Display and organize your library, lyrics and artwork;
When you enable sync, sync setup and organization across your devices via your private iCloud;
Verify your in-app purchase entitlement;
Diagnose and fix issues (diagnostics are redacted and, by default, for your own on-device troubleshooting).

3. Storage and retention

Local data lives in the app sandbox and is removed when you uninstall the app. iCloud-synced data lives under your own Apple account, governed by Apple's iCloud terms; you can turn off sync or clear data anytime (see "Data & Account Deletion").

4. Third parties

Apple: app distribution, in-app purchase and iCloud sync are provided by Apple under the Apple Privacy Policy.
Your configured servers / drives: owned or authorized by you and governed by their providers' terms.

5. Your rights

You may access, correct and delete your personal information in EchoBox, withdraw sync consent, and remove EchoBox's local/synced data. Most of this is available in the app (see Data & Account Deletion). Contact us for help.

6. Children

EchoBox is not directed to children under 14 and does not knowingly collect their personal information.

7. Changes

We may update this policy from time to time and will post the revised version here with a new date.

8. Contact

Questions? Contact support@echobox.cc

Operating entity name and address: to be completed.