Car Player Privacy Policy

2026-10-16

Nanjing Oumi Software Development Co., Ltd. (南京欧米软件开发有限公司, “we”) provides Car Player (“the App”). This policy explains how information is processed when you use local video playback, casting from other apps, and CarPlay, and how you can manage that information. For privacy questions and rights requests, contact contact@okaapps.com.

1. Scope

This policy covers the App and its included casting enhancement extension. Services provided by third-party video platforms, file providers, Apple system services, and our official website are subject to their own privacy notices. Viewing this policy and the Terms of Use in the App does not require visiting a website.

The App requires no account and displays no in-app ads. It integrates a third-party attribution SDK to measure advertising performance. We do not sell your personal information, use your videos to build advertising profiles, or use them to train AI models. The App has no feature that uploads your video library to our servers or synchronizes viewing history. However, network video playback, device discovery, and support emails you choose to send involve the information transfers described below.

2. Local Videos and Import Records

When importing from Photos, the App obtains only the videos you select through the system picker; it does not browse your entire photo library. File import reads the files you choose. Folder import scans the selected folder and its subfolders to identify and import playable videos, without scanning other directories you have not authorized.

For subsequent playback, the App stores video copies and thumbnails in its storage, along with titles, filenames, duration, file size, import time, and app-generated record identifiers. This information supports library display, playback, and deletion. Thumbnails come from video frames; the App does not perform facial recognition or extract biometric features.

For local videos, the App also saves the last playback position, video duration, last playback time, and whether playback has finished. These records stay in the device’s app storage, support progress display and resuming playback on the phone or connected CarPlay display, and are not uploaded to our servers. Deleting a local video also deletes its playback progress record.

If a selected video is stored in iCloud or another file service, the system may first download it from that service, whose data practices apply. Importing does not send the video to us. When you play through CarPlay, video and audio are output to the connected vehicle display and sound system.

3. Receiving Casts and Network Playback

Receive Casts is enabled by default. When the system permits the relevant network access, the App provides a DLNA/UPnP receiver service. To make the receiver discoverable, it announces the device name you set, a randomly generated receiver identifier, local network address, port, and playback capabilities on reachable networks, and processes source addresses and control information in discovery requests. The identifier is stored locally to identify the same receiver; it is not an advertising identifier or hardware serial number.

When another app starts a cast, the App receives the media address, title, media type, and playback commands it provides, to load content, generate previews, and control playback. Media addresses may include temporary tokens or signatures generated by the content provider. Playback status, media information, and progress may also be returned through the casting protocol to controllers that request them.

For network media, your device directly requests the source server and its delivery nodes. They receive the network IP address, media address, request headers, and other information necessary to fulfill those requests, and process it under their own policies. The App does not require you to give us third-party account credentials and does not automatically add received network videos to the local library. Players may create playback buffers or temporary caches.

You can choose the system player, MPV, or VLC. Automatic selection tries the system player first, then MPV and VLC if loading fails or times out, so the same media source may receive additional playback requests. MPV, integrated through MPVKit, and VLC, integrated through VLCKit, decode, buffer, and render media on the device; they are not used as advertising or behavioral analytics services. The App does not enable their remote script downloads or persistent video caches. Component information is available under Settings—Help—About—Open-Source Licenses.

The current receiving protocol has no separate login or pairing step for each sender. Other devices on reachable networks may discover the receiver or send control requests. We therefore recommend enabling receiving on trusted networks and avoiding sensitive information such as your real name or phone number in the device name. Closing playback ends only that playback session. To stop accepting new casts, turn off Receive Casts under Settings—Receiving & CarPlay.

4. CarPlay and Playback State

The App uses CarPlay connection status to determine playback output. Once connected, video, audio, titles, and playback status may appear in the vehicle, while the phone may also show a playback preview. People who can see or hear these devices may encounter the content. Choose content with your viewing environment in mind.

The current media address, title, duration, playback position, volume, and speed support the current session and control between devices. Preferences such as device name, receiving switch, selected player, and local video end behavior are stored locally for your next use.

5. Optional Casting Enhancement and System Permissions

Local network access is used to discover, receive, and control casts. You can manage this permission in iOS Settings. Denying it may prevent receiving features that depend on the local network; playback of imported videos on the phone does not require it. Photos and file imports are authorized through system pickers; canceling a selection imports nothing. Revoking access to a source does not automatically delete copies already imported.

Casting enhancement is optional and requires you to enable it and approve an iOS VPN configuration. It uses a system network extension to process specific multicast traffic needed for device discovery, including source and destination addresses, ports, and discovery requests, and exchanges the device name, receiver identifier, and connection address with the local receiver service.

The current enhancement has no remote VPN exit, configures no global default route, and is not used to proxy all internet traffic or collect browsing history. Turning it off stops the tunnel. The installed system VPN configuration may remain and can be removed in iOS Settings. Turning off Receive Casts also stops the App’s enhanced receiving service.

For advertising measurement, iOS may ask for tracking permission. Refusing does not restrict playback, casting, trials or purchases. You can change this permission in iOS Settings; refusal prevents access to IDFA but does not stop all attribution and event measurement.

6. Diagnostics and Support

To troubleshoot connection and playback problems, the App and system components may record service status, errors, network interfaces, local or request-source IP addresses, ports, and other technical information in device system logs. The App includes no third-party analytics or crash-reporting service that automatically uploads these logs. Apple controls the system’s own diagnostic settings and retention mechanisms.

If you email contact@okaapps.com, we receive your email address, message, and any screenshots, logs, or other material you choose to attach, to reply, investigate, and handle your request. Please provide only what is needed and remove passwords, complete authorization links, and unrelated personal content. Messages pass through your and our email services. Contacting support alone will not add you to a marketing list.

7. Sharing, Storage, and Protection

We use a third-party attribution SDK for install attribution and advertising analysis. The SDK may process IP addresses, device identifiers (IDFA only when authorized), device and app information, installs and sessions, paywall, trial, offer and purchase events, transaction identifiers, amounts and currencies, and first vehicle-video connection/playback events. We do not attach video files, media URLs, titles, viewing history or vehicle identifiers to these events. The SDK processes measurement data on servers in Europe and the United States. For its data practices and rights, see https://www.adjust.com/terms/privacy-policy/ and contact us at contact@okaapps.com. Further sharing with advertising partners is subject to the enabled integration and applicable permissions.

Local video copies, indexes, and preferences are primarily stored in the device’s app storage, protected by iOS app isolation and system access controls. This does not mean all data always exists only on your phone: system backups, device migration, cloud file sources, network media, and email may involve external servers located according to the relevant service. We have not set up a cloud video library for the App. If we introduce cross-border or other personal information processing of our own, we will explain it in advance and fulfill applicable legal requirements.

For compatibility with content sources, the App may handle HTTP media links, and local casting protocols may communicate in plain text. Such connections do not have HTTPS transport encryption. Use trusted networks and lawful, trustworthy content sources. We take reasonable protective measures within our control and, if a security incident affects information we process, will take remedial, notification, and other measures required by law.

8. Retention, Deletion, and Your Choices

Imported video copies, thumbnails, and records remain until you delete them. On the Local Videos page, tap Select and choose individual videos or use Select All, then tap Delete and confirm in the alert. This removes only the in-app copies, thumbnails, and import records; originals in Photos and source folders are kept.

When a playback session ends, is closed, or changes content, the App clears or replaces the current media state and receiving notice. It does not save third-party casting history as a long-term viewing record. Temporary player buffers are released with the playback instance; system caches and diagnostic logs follow system management rules. Clearing local video records does not clear those system data, your preferences, or the system VPN configuration.

You can change the device name, turn off receiving, stop playback, disable enhancement, and manage permissions and backups through iOS at any time. Deleting the App removes its local app data; iOS’s Offload App feature may retain documents and data. Existing system backups, file-provider data, and VPN configurations may need separate management. Restoring a backup may restore previously saved data.

Support correspondence is retained only as needed to handle requests, conduct necessary follow-up, and meet legal obligations, then deleted or otherwise appropriately handled. You may email contact@okaapps.com to request information about, access to, correction, copying, or deletion of personal information we hold, withdraw consent-based authorization, or make a privacy complaint. We verify requests only as necessary and handle them under applicable law. Content stored solely on your device usually requires action using local features; we cannot remotely access or restore it for you. Withdrawal does not affect lawful processing before consent was withdrawn.

9. Minors

The App is not specifically directed at children. Minors should use it with a guardian’s guidance. Children under 14 should obtain a guardian’s consent before using features involving personal information. Do not provide unnecessary identifying information about children through support. If a guardian discovers that a child’s information was improperly provided to us, they can contact the email above; we will investigate and take measures such as deletion as required by law.

10. Updates and Contact

We update this policy as features and data practices change and show its revision date in the App. Significant changes, including processing purposes, information types, or disclosures, will be communicated appropriately. Where renewed or separate consent is required, we obtain it before the relevant processing; merely updating the text does not replace required authorization.

Operator: Nanjing Oumi Software Development Co., Ltd. (南京欧米软件开发有限公司). Email: contact@okaapps.com. Official website: https://okaapps.com.