Privacy Policy

1. Introduction

HS Player ("we," "us," "our") is a music player application that integrates with various cloud storage services (including Google Drive, Dropbox, OneDrive, Yandex.Disk, and MEGA) to provide users with access to their music files stored in the cloud. This Privacy Policy specifically addresses how we collect, use, and protect information obtained through our cloud storage integrations.

This policy is designed to comply with the privacy policies of all integrated cloud services and applicable privacy laws including GDPR and CCPA.

2. Information We Collect from Cloud Storage Services

2.1 Data We Access

• File Metadata: Names, sizes, creation dates, and modification dates of music files
• Folder Structure: Directory information and folder hierarchy
• Access Tokens: OAuth 2.0 tokens for secure authentication
• File IDs: Unique identifiers for accessing specific files
• Drive API Scopes: We request access to view and manage your Google Drive files and folders
• File Permissions: Read access to file metadata and content for playback

2.2 Data We Do NOT Collect

3. How We Use Your Information

3.1 Primary Uses

• Display your music files and folders in the app interface
• Stream music files for playback
• Enable file management operations (create, rename, delete folders)
• Provide navigation through your cloud storage structure
• Maintain secure authentication with cloud storage APIs
• Access file content for real-time streaming and playback
• Manage file organization and structure within your cloud storage

3.2 Usage Limitations

4. Data Security

4.1 Token Security

• Access tokens are stored securely in iOS Keychain
• Tokens are automatically refreshed when they expire
• Tokens are immediately revoked when you sign out
• We use HTTPS for all API communications
• Tokens are encrypted and protected by iOS security mechanisms
• No tokens are transmitted to our servers or third parties

4.2 Data Protection

• All data transmission is encrypted using TLS 1.2 or higher
• Local storage is protected by iOS security mechanisms
• No data is stored on our servers
• Regular security audits of our API integrations

5. Your Rights and Controls

5.1 Access Control

• You can revoke cloud storage access at any time through your account settings
• You can delete the app and all associated data from your device
• You can request information about what data we process
• You can request deletion of any stored data
• You can limit app permissions to specific folders or files
• You can disable specific API scopes through your cloud storage provider settings

5.2 Permission Management

• Manage app permissions through your cloud storage account settings
• Limit access to specific folders if desired
• Completely disable cloud storage integration
• Control token refresh and renewal

6. Data Sharing and Third Parties

6.1 No Third-Party Sharing

6.2 Legal Exceptions

We may disclose data only in the following circumstances:

• When required by law or legal process
• To protect our rights, property, or safety
• In connection with a business transfer (with prior notice)
• With your explicit consent

7. Data Retention and Storage

7.1 Local Storage

• Access tokens are stored locally on your device
• App settings and preferences are stored locally
• No data is stored on our servers
• Cache files are automatically cleared when not needed
• File metadata is cached locally for improved performance
• All cached data is encrypted and protected

7.2 Data Deletion

• All local data is deleted when you uninstall the app
• Access tokens are automatically revoked upon sign out
• You can manually revoke access through your cloud storage account settings
• No residual data remains after app removal

8. Compliance with Laws and Regulations

8.1 GDPR Compliance (EU Users)

• We process data based on legitimate interest (app functionality)
• You have the right to access, rectify, and erase your data
• You have the right to data portability
• You have the right to object to data processing
• We provide clear information about data processing purposes
• We ensure data minimization and purpose limitation

8.2 CCPA Compliance (California Users)

• You have the right to know what personal information we collect
• You have the right to delete your personal information
• You have the right to opt-out of data sales (we don't sell data)
• You have the right to non-discrimination

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will notify you at least 30 days before changes take effect
• We will update the "Last Updated" date at the top of this policy
• Continued use of the app constitutes acceptance of the new policy
• You can always review the current policy on our website

10. Additional Information

10.1 Cloud Storage Privacy Policies

This policy supplements the privacy policies of the cloud storage services we integrate with. For information about how these services handle your data, please review their respective privacy policies:

• Google Privacy Policy
• Dropbox Privacy Policy
• Microsoft Privacy Statement
• Yandex Privacy Policy
• MEGA Privacy Policy

10.2 API Services User Data Policy

Our use of cloud storage APIs complies with the respective API services user data policies of each provider. Specifically for Google Drive API, we comply with Google's API Services User Data Policy and ensure that:

• We only request the minimum necessary permissions for app functionality
• We do not use the data for any purpose other than music playback and file management
• We provide clear information about data usage in this privacy policy
• We implement appropriate security measures to protect user data
• We respect user choices regarding data access and deletion

10.3 App Store Requirements

This policy also complies with Apple's App Store Review Guidelines regarding privacy and data handling.