Channo Privacy Policy

Channo 是播放器，不是内容平台。你导入的 M3U / Xtream / 流地址与节目单保存在本机；独立的 Xtream 账户密码由系统钥匙串管理；含鉴权信息的播放地址也可能作为列表数据保存在本机。没有账号系统，不做广告或跨 App 追踪。新版使用 Google Analytics for Firebase 与 Firebase Crashlytics 分析产品使用、播放质量及崩溃。「使用情况与故障报告」默认开启，可随时关闭，统一控制这两项 Google 服务。Channo 不主动添加明文源地址、账号密码、频道标题或搜索内容到上报字段。

Channo is a player, not a content service. Playlists, Xtream credentials, and guide data stay on this device; separate Xtream login passwords are managed by the system Keychain; authenticated stream URLs may also be stored as local playlist data. No accounts, ads, or cross-app tracking. New builds use Google Analytics for Firebase and Firebase Crashlytics to understand feature use, playback quality and crashes. Usage & fault reporting is on by default and can be turned off; one setting controls both Google services. Channo does not add raw source URLs, credentials, channel titles or search text to reporting fields.

• 来源配置、频道列表、收藏、最近播放、播放偏好（Core Data）
• 独立 Xtream 账户密码由系统钥匙串管理；频道鉴权地址可能包含凭据，作为本地列表数据保存
• 语言选择、引擎偏好、分析开关等 UserDefaults
• iCloud 同步由设备设置控制：来源地址与偏好进入你的私有 iCloud。独立钥匙串密码不随此功能导出；来源地址中的令牌或其他鉴权信息仍可能同步

• Sources, channels, favorites, recents, playback prefs (Core Data)
• Separate Xtream login passwords use Keychain; authenticated channel URLs may contain credentials and remain in local playlist storage
• Language, engine prefs, analytics toggle in UserDefaults
• iCloud sync follows device settings and copies source URLs and preferences to your private iCloud. Separate Keychain passwords are not exported by this feature; URL tokens or other authentication details may still sync

• 播放与刷新会直接访问你提供的主机（含明文 http，因 IPTV 源普遍如此）
• 本地网络：用于 iPhone 遥控同网 iPad 上的 Channo（Multipeer / Bonjour）
• 我们不运营内容 CDN，也不中转你的流

• Playback/refresh contacts hosts you supply (including cleartext HTTP, common for IPTV)
• Local Network: phone remote-control of Channo on a same-network iPad
• We do not run a content CDN or proxy your streams

Google Analytics for Firebase 统计应用活跃、会话、页面访问、功能操作、来源导入结果、购买与恢复结果，以及播放是否成功、首帧等待、卡顿、黑屏、实际检测到的封装与音视频编码、使用的引擎。数据用于改进 Channo 的易用性和兼容性，不用于广告。

Google 通过应用安装实例标识关联这些事件，并接收应用/系统版本、设备类型、语言等技术信息。安装标识并非实名账号，也不等于跨设备的同一人。Google 可从掩码 IP 地址派生大致地区；我们不请求精确位置。SDK 可能自动记录 StoreKit 商品和购买信息，不接收支付卡信息。

我们不向 Google 传入来源或频道名称、URL、主机地址、token、账号密码、搜索内容、任意错误文本或自定义用户账号 ID。不使用广告 ID、IDFV、Google Signals 或跨 App 追踪；广告存储与个性化许可保持拒绝。数据可能在你所在国家或地区以外处理，受 Google 的数据处理条款约束。

在 iPhone/iPad 的「设置 → 隐私」或 Apple TV 的 Pro 页关闭「使用情况与故障报告」，可停止后续采集并重置本地统计数据。再次开启不会补报关闭期间的行为。Google Analytics 中的用户与事件数据保留期设为 14 个月，新的活跃可能重置用户数据的保留期；基于汇总数据的标准报表可能保留更久。关闭或卸载不会自动删除 Google 已接收的历史数据；如需了解保留期或请求删除，请通过下方邮箱联系我们。无账号且安装标识已重置时，可能无法定位单个安装的历史记录。

Google 的处理方式见 Google 隐私政策和 Firebase 隐私与安全。

Google Analytics for Firebase measures activity, sessions, screen visits, feature actions, source import results, purchases/restores and playback outcomes, startup time, stalls, black-screen counts, detected container/audio/video formats and playback engines. This helps improve usability and compatibility, not advertising.

Google associates events with an app installation identifier and receives technical information such as app/OS version, device type and language. An installation is not a named account or a cross-device identity. Google may derive an approximate region from masked IP addresses; we do not request precise location. The SDK may automatically measure StoreKit products and purchases; we do not receive payment card details.

Channo does not provide source/channel names, URLs, host addresses, tokens, credentials, search text, free-form errors or custom account IDs to Google. No advertising ID, IDFV, Google Signals or cross-app tracking is used; advertising storage and personalization consent stay denied. Data may be processed outside your country under Google's data-processing terms.

Turn off Usage & fault reporting under Settings → Privacy on iPhone/iPad, or on the Pro page on Apple TV, to stop subsequent collection and reset local analytics data. Re-enabling does not replay disabled-period activity. User and event data retention in Google Analytics is set to 14 months; new activity may reset user-data retention. Aggregated standard reports may be retained longer. Disabling or uninstalling does not automatically delete history already received by Google. Contact us below for retention details or deletion requests. Without an account, and after an installation identifier is reset, we may be unable to locate an individual installation's historic records.

See Google's Privacy Policy and Firebase Privacy and Security.

Firebase Crashlytics 接收可捕获的 Swift 与原生崩溃堆栈、应用和系统版本、设备状态及 SDK 诊断信息，并使用安装 UUID / Firebase Installation ID。Channo 添加固定的页面、引擎、封装与编码、故障阶段、数值错误码和随机播放请求标识，以定位导入失败、黑屏与无法播放。不会主动添加来源地址、密码、频道标题或原始错误对象；SDK 自身可能包含系统异常原因。

同一个「使用情况与故障报告」开关控制 Analytics 与 Crashlytics。关闭后停止后续上报、重置本地统计数据，并删除 SDK 尚未发送的崩溃报告；再次开启不会补报关闭执行期间的待发报告。已发出或正在传输的数据无法通过该开关撤回。崩溃通常在下次启动发送；离线、未再次启动或系统直接终止进程时不保证收到报告。

Crashlytics 的崩溃数据保留 90 天后开始移除，与 Analytics 的 14 个月设置不同。数据按 Google 条款处理，可能在境外存储。Channo 不使用自建远程诊断服务器。

Firebase Crashlytics receives supported Swift/native crash stacks, app/OS versions, device state and SDK diagnostics, and uses installation UUIDs / Firebase Installation IDs. Channo adds fixed page, engine, container/codec, failure stage, numeric error code and random playback request identifiers to investigate import failures, black screens and playback errors. It does not add source URLs, passwords, channel titles or original error objects; the SDK may include system exception reasons.

The same Usage & fault reporting setting controls Analytics and Crashlytics. Turning it off stops subsequent reporting, resets local analytics data and deletes SDK reports that have not been sent. Re-enabling does not send pending reports from disabled executions. This setting cannot retract data already sent or in transit. Crashes normally upload on the next launch; offline operation, no subsequent launch or direct system termination can prevent a report.

Crashlytics starts removing crash data after 90 days, separately from the 14-month Analytics setting. Google processes data under its terms, potentially outside your country. Channo uses no self-hosted remote diagnostic server.

• 无广告 SDK、无 ATT 跨 App 追踪；Google 使用情况统计可关闭
• 不要求注册登录，不索取通讯录、相册、相机、麦克风、精确位置
• 不出售或向广告商共享你的数据

• No ad SDKs or ATT cross-app tracking; Google usage analytics can be disabled
• No sign-in; no contacts, photos, camera, mic, or precise location
• We do not sell or share your data with advertisers