Jellume隐私政策 · 简体中文
1. 范围与负责方
本政策说明 Altria Yu（Jellume 的开发者）如何处理 Jellume 移动应用及本网站相关的信息。Jellume 是独立的 Jellyfin / Emby 客户端，不提供媒体内容或媒体服务器账号，也不隶属于 Jellyfin、Emby、Apple、Google 或 RevenueCat。
本政策区分设备本地处理、你选择连接的服务，以及商店版本的购买验证。联系开发者：yualtria3@gmail.com。
2. 媒体账号与设备本地数据
连接服务器时，应用将你输入的登录资料直接发送至你指定的 Jellyfin / Emby 服务器以完成鉴权。应用不持久保存媒体登录密码；连接地址、账号标识、访问令牌和设备身份保存在平台安全存储中。主题、语言、播放器偏好等一般设置保存在设备本地设置存储中。
媒体元数据、封面、字幕、弹幕和播放缓冲会按使用需要加载或缓存。应用向所连接的媒体服务器发送搜索、收藏、已看状态、播放进度及会话信息，以提供相应功能。服务器会收到网络地址、客户端和设备标识等请求信息，其运营者可按自己的规则记录这些信息。开发者不运营用于汇集你的媒体账号、服务器列表或观看历史的中央服务。
3. 购买与 RevenueCat
iOS 商店版和 Google Play 版使用 Apple / Google 商店及 RevenueCat 完成商品展示、交易验证、权益检查、恢复购买与退款状态同步。相关处理可能包括匿名应用用户标识、商品和交易标识、收据或购买令牌、购买及权益状态，以及必要的应用、平台、设备与网络请求信息。用途包括提供购买功能、防止欺诈和购买分析。付款卡号等支付资料由商店处理，开发者和 Jellume 不接收完整付款卡信息。
应用使用 RevenueCat 管理的匿名计费身份，不将媒体服务器账号、地址、密码、令牌或观看记录作为计费身份或购买属性提交；客户端关闭了自动设备标识收集和 SDK 诊断选项。匿名标识不代表交易数据完全不可关联。免费 Android 自发行版不初始化或查询 RevenueCat 购买服务。
4. 可选同步、弹幕及外部资源
只有在你操作 WebDAV 同步时，应用才连接你指定的 WebDAV 服务。连接列表（含访问令牌）先在设备上通过 PBKDF2-SHA256 / AES-256-GCM 加密，再上传至你指定的位置。WebDAV 密码及加密口令仅用于当前操作，不写入应用设置；开发者不接收或保管解密口令。WebDAV 服务仍可看到请求元数据和密文，口令丢失可能导致无法恢复。
使用外部弹幕 API 时，搜索词、作品名称、年份、集数或时长等匹配信息可能发送至你配置的服务。外部封面、媒体、字幕与弹幕提供者会接收加载请求及网络地址。它们适用各自的政策。主动检查上游版本时，应用会访问 GitHub 查询桌面参考项目的发布信息；这不是移动版更新服务。
5. 本网站与联系支持
本网站由 Cloudflare 托管。访问时，Cloudflare 会处理 IP 地址、请求时间、页面地址、浏览器信息等网络请求数据，用于交付页面、保障安全和运行服务，详见 Cloudflare 隐私政策。本网站不加入广告、分析脚本、Cookie 或本地存储，也没有账号注册或表单。
你通过邮件联系时，开发者会处理你自愿提供的邮箱、消息及附件以回复、排查问题和处理权利请求。请勿发送服务器密码、访问令牌或不必要的私人媒体信息。
6. 使用、共享与跨境处理
上述信息用于提供你请求的功能、验证购买、维护安全和回复支持。开发者不出售你的个人信息，不使用广告 SDK，也不将媒体活动用于跨应用广告追踪。除你选择的服务、商店及购买验证服务、网站托管和邮件服务外，不为广告目的共享数据；依法必须披露或保护合法权利的情形除外。
根据适用地区，处理依据可能包括履行服务或购买合同、你选择启用的可选功能及相应同意、维护服务安全的合法利益，以及法律义务。相关服务商可能在你所在地区以外处理数据；其隐私政策说明适用的传输和保护措施。选择服务器前请确认其位置及政策。
7. 保留、安全与删除
本地连接与设置会保留到你删除连接、重置相关设置或清理应用数据；平台安全存储可能在卸载后仍保留，因此不要将卸载视为完整删除保证。删除本地连接不会自动删除媒体服务器、WebDAV 备份、商店或 RevenueCat 记录。请分别删除远端备份，并向对应服务商或开发者提出请求。
支持邮件仅在处理请求、后续必要沟通或法律要求所需期间保留。购买和基础设施记录依据相关服务商政策、交易核验及法定保留要求处理，开发者不承诺其立即删除。传输使用服务所支持的连接协议；请优先使用 HTTPS。安全存储及加密降低风险，但无法保证任何系统绝对安全。
8. 你的选择与权利
你可以停止连接服务器、关闭可选弹幕功能、不使用同步、删除本地连接并重置设置，或联系远端服务商删除其持有的信息。商店购买和历史订阅通过对应 Apple / Google 账号管理。拒绝购买验证所需的数据处理可能导致商店版无法解锁或验证权益。
依所在地法律，你可能享有访问、更正、删除、限制处理、反对处理、数据可携带及撤回同意等权利，并可向所在地监管机构投诉。请通过 yualtria3@gmail.com 联系开发者；开发者会在适用法律期限内处理，并可能进行必要身份核实。开发者无法访问的数据，需要由持有数据的服务商处理。
9. 未成年人及政策变更
Jellume 不面向低于当地适用数字同意年龄的儿童提供定向服务。未成年人应在监护人指导下使用，并遵守商店年龄及购买规则。若你认为儿童向开发者提供了个人信息，请联系开发者处理。
功能或数据处理变化时，本政策可能更新，新版本会在本页标注日期；依法需要时会另行通知或取得同意。中英文内容旨在表达相同政策；若有歧义，请联系开发者澄清，适用法律赋予的权利不受影响。
Privacy Policy · English
1. Scope and responsibility
This policy explains how Altria Yu, the developer of Jellume, handles information in connection with the Jellume mobile app and this website. Jellume is an independent Jellyfin / Emby client. It does not supply media content or media-server accounts and is not affiliated with Jellyfin, Emby, Apple, Google, or RevenueCat.
This policy distinguishes on-device processing, services you choose to connect, and purchase verification in store editions. Contact the developer at yualtria3@gmail.com.
2. Media accounts and on-device data
When you connect a server, the app sends the login details you enter directly to the Jellyfin / Emby server you specify for authentication. The app does not persist your media login password. Connection addresses, account identifiers, access tokens, and device identities are kept in platform secure storage. General preferences such as theme, language, and player settings are stored locally on the device.
Media metadata, artwork, subtitles, comments, and playback buffers are loaded or cached as needed. The app sends searches, favorites, watched status, playback progress, and session information to your connected media server to provide those features. The server receives request information such as your network address and client and device identifiers; its operator may log this under its own rules. The developer does not operate a central service that aggregates your media accounts, server list, or viewing history.
3. Purchases and RevenueCat
The iOS store and Google Play editions use Apple / Google and RevenueCat for product display, transaction validation, entitlement checks, purchase restoration, and refund-status updates. Processing may include an anonymous app user identifier, product and transaction identifiers, receipts or purchase tokens, purchase and entitlement status, and necessary app, platform, device, and network request information. Purposes include purchase functionality, fraud prevention, and purchase analytics. Payment card details are handled by the store; the developer and Jellume do not receive full payment card information.
The app uses a RevenueCat-managed anonymous billing identity. Media-server accounts, addresses, passwords, tokens, and viewing history are not submitted as billing identities or purchase attributes. Automatic device-identifier collection and SDK diagnostics are disabled in the client. An anonymous identifier does not make transaction data entirely unlinkable. The free direct-distribution Android edition does not initialize or query RevenueCat purchase services.
See the RevenueCat Privacy Policy, Apple Privacy Policy, and Google Privacy Policy.
4. Optional sync, comments, and external resources
The app connects to your chosen WebDAV service only when you perform a sync operation. The connection list, including access tokens, is encrypted on your device using PBKDF2-SHA256 / AES-256-GCM before upload to your chosen location. Your WebDAV password and encryption passphrase are used only for the current operation and are not saved in app settings. The developer does not receive or hold your decryption passphrase. The WebDAV provider can still see request metadata and ciphertext. Losing the passphrase may prevent recovery.
When you use an external comment API, search terms and matching information such as a title, year, episode, or duration may be sent to the service you configure. External artwork, media, subtitle, and comment providers receive loading requests and your network address under their own policies. If you manually check upstream versions, the app contacts GitHub for releases of the desktop reference project; this is not a mobile-app update service.
5. This website and support
This website is hosted by Cloudflare. On a visit, Cloudflare processes network request data such as IP address, request time, page address, and browser information to deliver pages, maintain security, and operate its services. See the Cloudflare Privacy Policy. This website adds no advertising or analytics scripts, cookies, or local storage, and has no account registration or forms.
If you email the developer, the developer processes the email address, message, and attachments you choose to provide to respond, investigate issues, and handle rights requests. Do not send server passwords, access tokens, or unnecessary private media information.
6. Use, sharing, and international processing
The information described above is used to provide requested features, verify purchases, maintain security, and respond to support requests. The developer does not sell your personal information, use advertising SDKs, or use media activity for cross-app advertising tracking. Apart from the services you select, stores and purchase-verification services, website hosting, and email services, data is not shared for advertising. Disclosure may be necessary to comply with law or protect lawful rights.
Depending on applicable law, processing grounds may include performing a service or purchase contract, optional features you enable and associated consent, legitimate interests in service security, and legal obligations. Providers may process data outside your region; their policies describe applicable transfer safeguards. Check a server's location and policies before connecting.
7. Retention, security, and deletion
Local connections and settings remain until you delete connections, reset the relevant settings, or clear app data. Platform secure storage may survive uninstall, so uninstalling is not a guarantee of complete deletion. Deleting a local connection does not automatically remove media-server records, WebDAV backups, or store and RevenueCat records. Delete remote backups separately and direct requests to the relevant provider or developer.
Support emails are retained only as needed to handle the request, necessary follow-up, or legal obligations. Purchase and infrastructure records are handled under provider policies, transaction-verification needs, and legal retention requirements; the developer does not promise immediate deletion of those records. Transfers use the protocols supported by the services you select; prefer HTTPS. Secure storage and encryption reduce risk, but no system is absolutely secure.
8. Your choices and rights
You may stop connecting servers, disable optional comments, choose not to sync, delete local connections, reset settings, or ask remote providers to delete information they hold. Manage store purchases and any historical subscriptions through the relevant Apple / Google account. Declining processing needed for purchase verification may prevent unlocking or verifying access in store editions.
Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, obtain portable data, or withdraw consent, and may complain to your local supervisory authority. Contact yualtria3@gmail.com. The developer will handle requests within applicable legal deadlines and may need to verify your identity. Requests for data the developer cannot access must be handled by the provider holding it.
9. Children and policy changes
Jellume is not directed to children below the applicable age of digital consent in their region. Minors should use it with a guardian's guidance and follow store age and purchase rules. If you believe a child has supplied personal information to the developer, please contact the developer.
This policy may change when features or data practices change. Updated versions will show a new date here, with further notice or consent where required by law. The Chinese and English texts aim to express the same policy. Contact the developer about ambiguity; rights granted by applicable law are unaffected.