Privacy Policy

Introduction and key notices

Deepspace (深空放映 in Chinese, “the app”) is developed and operated by Guizhou Redshift Deep Space Technology Co., Ltd. (贵州红移深空科技有限公司, “we”, “us”). We understand how important your personal information is to you, and we protect it in accordance with the Personal Information Protection Law, the Cybersecurity Law and the Data Security Law of the People’s Republic of China and the relevant national standards, taking appropriate security measures to keep it safe. This English text is the English version of the document that applies to the app’s release in mainland China. If this English text and the Chinese version differ, the Chinese version prevails.

Key notices:

1. This policy applies to the app and its related account, membership, AI, metadata and diagnostic services, and takes effect alongside the Terms of Use.
2. This policy describes how we handle your personal information in different situations. We handle the information needed to provide a feature or service only when you enable that feature or use that service; if you do not use it, we do not handle the corresponding information.
3. The app is a player and does not provide video content. Your media files are read and played directly from the sources you connect, and are never uploaded to our servers.
4. Please read the clauses shown in bold with particular care, especially those about information sharing, cross-border transfer, retention periods and the protection of minors. Your local library and playback do not require us to process your personal information. If you do not agree to the processing related to the online features described in this policy, please do not use the account, AI or metadata features; local playback is unaffected.
5. The app is intended primarily for adults. Where a minor uses the app, this should be under the consent and guidance of their guardian; we do not knowingly collect the personal information of anyone under 14.

On first launch, the app presents this policy and the Terms of Use. Online services are enabled only after you explicitly agree. If you decline, you can still use your local library and playback, and you can read and agree again in settings. Before signing in or registering, you must also explicitly check that you agree to both documents. An App update carrying revised agreements asks for your consent again.

This policy covers:

• 1. Information we collect and use
• 2. How we use cookies and similar technologies
• 3. How we share, transfer or publicly disclose your personal information
• 4. How we store and protect your personal information
• 5. How you exercise your rights over your personal information
• 6. Protection of minors
• 7. Changes to this policy and how we notify you
• 8. How to contact us

1. Information we collect and use

1.1 Features you can use without signing in

Your local library and playback need no registration or sign-in. When you are not signed in or use the local library, the sources you add, your library, watch progress and playback history are stored only on your device. We create an account for you and handle the account information described below only once you choose to sign in. If you do not agree with this policy, your local library and playback remain available, and we collect and report nothing for them.

Sources you connect: you can connect cloud drives and media services you already have (for example OneDrive, Dropbox, Baidu Netdisk, 123 Cloud Drive, and SMB, NFS, FTP, WebDAV, Jellyfin or Emby services on your local network). These connections are made directly between your device and the relevant service; your account, password and authorization tokens are kept only on your device and are never uploaded to our servers.

1.2 Accounts and signing in

• Signing in with a phone number: the mainland China phone number you provide is passed to Alibaba Cloud’s number verification service and to the telecom operator to send and verify the SMS code. The number is stored encrypted on our servers, and only a masked number is shown in the app.
• Signing in with WeChat or Apple: we only receive and verify the authorization result returned by the provider. WeChat sign-in uses only the UnionID; Apple sign-in requests access to an email address, and we store only the address the provider marks as verified, encrypted, together with whether it is an Apple private relay address. We do not collect nicknames or avatars.
• Revocation credential for Apple sign-in: when you sign in with Apple we store an encrypted credential, used only to revoke your Apple authorization when you delete your account.
• Sign-in device and security records: to keep accounts secure we record the sign-in device identifier, authentication time and result, session state, and authentication-related security events and source IP addresses. These are network operation and security logs, retained for one year, used only for rate limiting, security auditing and incident investigation; we do not build location profiles from them.
• Account device profile: after you sign in we record and use your device’s platform, device class, model, OS version, app version, device display name, interface language, region, cloud sync choice, and the notice version you were shown at sign-in, for account security, device management, cross-device syncing and consent records.
• Syncing sources to your account: after signing in you may choose to save the public configuration of your local sources to your account for syncing between devices, including name, type, public address and path, username, authentication method, scan scope, enabled state and order. Source passwords and authorizations are never uploaded; if you untick a source, its synced configuration is deleted from our servers.
• Account library sync: after you sign in, the app creates a separate library for your account (your local library is never merged into it or uploaded) and syncs the following to our servers so that you can restore it when you sign in to the same account on another device: the titles in the library (identified by TMDB work numbers) and when they were added or removed, watch progress and watched history, likes, hidden items and ratings, custom titles, your choices of poster, landscape artwork and logo (including logo text), lists and the titles in them, manual corrections you make to how files were identified (identified by digests from which file names cannot be recovered), and preferences that follow your account (subtitle and audio languages, skip durations, auto-play next episode and similar). We never upload your media files, file names, paths or file sizes, and we do not sync items that were not matched to metadata. Custom titles, list names and logo text are stored encrypted. Syncing takes place only while you are signed in and have agreed to this policy.

1.3 Installation statistics

To understand version distribution and runtime environments, the app generates a random installation identifier (not linked to your account) and reports device model, platform, OS and app version and build number, interface language, region format, time zone, network type, and the public IP address our servers observe. Each installation keeps only its first record and the most recent nine changes; reports are sent at least six hours apart, and may be sent earlier when the OS or app version changes. Region format does not indicate your location.

1.4 Membership and AI features

• Membership and credits: to deliver membership benefits, deduct allowances and reconcile refunds, we store your membership tier and billing period, the Apple transaction identifier and account binding, records of credits issued and consumed, and AI usage and cost.
• AI subtitle translation and AI Q&A: when you use these features the app sends what is needed to complete the request to our servers, which then call third-party large-model services. Subtitle translation sends the subtitle text to be translated, the title of the work and the language; AI Q&A sends the title, playback position, audio and subtitle track names, interface language and the question you type; when you ask the assistant to read the current subtitles, subtitle text near the playback position is sent as a tool result.
• Storing conversations: to provide history and continuous conversations we store conversation content on our servers, including the text you submit, the film and playback context sent with the request, model replies and protocol fields (including reasoning), until you delete the conversation or your account. The client keeps only a disposable display cache, without prompts or reasoning, cleared when you sign out, switch accounts or delete a conversation. You can delete a single conversation or all of them, and they are deleted with your account. Conversation text is not written to standard operation logs.
• Whether we train on it: we do not use your conversation content to train models. How upstream providers retain and use what they receive is governed by their own terms; we do not make commitments on their behalf about training use or deletion periods.
• AI usage: we count AI usage per billing period, used only for membership allowances and pricing, shown in the app as a percentage.
• Processing on your device: graphical subtitle recognition and subtitle language detection run on your device. Voice questions use Apple’s speech recognition, and whether audio leaves your device depends on whether the selected language supports on-device recognition; we do not receive your voice audio. AI assistant replies are labeled “AI generated” in the interface.

1.5 Film and TV metadata

To organize your library, the app uses titles, years and similar search terms detected from file names to call our metadata interface, and our servers pass those requests to the metadata service TMDB; provider credentials are never sent to the client. Public metadata is cached as JSON in Alibaba Cloud object storage and downloaded through time-limited signed URLs on Alibaba Cloud CDN (currently accelerated only within mainland China, with no overseas nodes); the CDN processes the download URL and your terminal IP address. Posters and stills are fetched by your device directly from TMDB’s image CDN, which will see the image request and your network IP address. These requests do not include your video files, source connection credentials or your library listing, and do not link your account to the public metadata cache; for account library sync see section 1.2.

Subtitle search and download: when you search for or download subtitles, the app sends the title, season and episode number, language, and a content fingerprint computed from the file you are playing to our servers, which pass it to the subtitle service OpenSubtitles. The fingerprint is derived from the file size and the first and last 64 KiB of the file using a fixed algorithm, and is used only so that the upstream service ranks subtitles for the same file first; the file itself is not sent, and we do not store your files.

1.6 Operation records and remote diagnostics

• Operation records: the app keeps key operations, warnings, errors and aggregated performance data on your device to help diagnose problems. These records do not contain authentication information, credentials, raw addresses, media titles or other sensitive free text, and leave your device only when collected during remote diagnostics.
• Remote diagnostics: once the app connects to our service it automatically registers a random terminal identity, with no sign-in required. Authenticated support staff can, through an administrative interface, operate the app on your device, collect runtime diagnostics and collect diagnostic records; collection may include the app’s screen and sound. The settings screen shows whether diagnostics are enabled, connected, actionable and collecting.
• Stopping at any time: you can choose “Stop remote connection” under “Me → Remote diagnostics”. After that we refuse operations and collection against the device and cancel the related collection and transfer; restarting the app does not restore it. Diagnostic records already collected before you stop are retained to complete the investigation. Our servers persist only the terminal identity, the stopped state and request metadata; diagnostic records are forwarded only temporarily.

1.7 Device permissions

• Local network: to reach SMB, FTP, NFS and WebDAV libraries on your local network.
• Microphone and speech recognition: used only when you ask the AI assistant a question by voice.
• Photo library (read): to read the photo you select when you choose a picture as a film’s cover; we do not scan or upload your photo library.
• Photo library (write): to write an image into your system photo library only when you choose to save it; we do not read other content in your library.
• Face ID, Touch ID or device passcode: to verify your identity before showing “Recently Deleted” and “Hidden” content.

You can turn these permissions off at any time in system settings; the corresponding feature then becomes unavailable without affecting the others.

1.8 Information we do not collect

• Your media files: films are read and played directly from your sources and are never uploaded to our servers.
• Your voice audio: voice questions are handled by system speech recognition; we neither receive nor store the audio.
• Source passwords, tokens, bookmarks, local absolute paths and authentication headers: kept only on your device; re-authorization is required on a new device.
• Your local library contents and viewing behavior: when you are not signed in or use the local library, your library and playback history are stored only on your device; your account library after sign-in is synced as described in section 1.2, and media files and file names are never uploaded.
• Your biometric information such as face or fingerprint: verification is performed by the system and we receive only whether it succeeded; we neither receive nor store biometric information.
• Device MAC address, IDFA/IDFV, hardware fingerprints, full language lists, contacts, precise location and lists of other apps.

1.9 Automated decision-making and sensitive personal information

• We do not make automated decisions based on your personal information, and do not set differentiated prices on that basis. How content is organized and recommended in the app is based on your local library and settings.
• We do not process your sensitive personal information (such as biometrics, financial accounts, location traces or health data). Face ID and Touch ID verification is performed by the system, and we receive only whether it succeeded.

2. How we use cookies and similar technologies

The app is a native application and does not use cookies, advertising identifiers or cross-app tracking technologies, and does not serve or measure advertising.

We use only two similar technologies: local storage for interface preferences and on-device settings, and the random installation identifier used for rate limiting and version statistics (see section 1.3). Neither is linked to your real identity, and you can clear the related data by signing out or uninstalling the app.

Our website may use essential local storage to keep your language and theme preferences, and does not use third-party advertising or analytics scripts.

3. How we share, transfer or publicly disclose your personal information

We handle your personal information only for lawful, legitimate, necessary, specific and clearly defined purposes. We do not sell your personal information.

3.1 Sharing and entrusted processing

To achieve the purposes described in this policy we use services provided by third parties. The main third parties that exist as SDKs inside the app, or to which we provide personal information, are:

Third party	Service and purpose	Information involved	How it is handled	Privacy policy
Tencent Technology (Shenzhen) Company Limited	WeChat Open Platform SDK, for WeChat sign-in	The UnionID in the authorization result; on iPhone and iPad the SDK may read the data returned by WeChat this time from the system clipboard	Collected directly by the SDK, de-identified	https://support.weixin.qq.com/cgi-bin/mmsupportacctnodeweb-bin/pages/RYiYJkLOrQwu0nb8
Alibaba Cloud Computing Co., Ltd.	Number verification service, for SMS codes	Phone number	Encrypted in transit and at rest	https://www.aliyun.com/
Alibaba Cloud Computing Co., Ltd.	Bailian platform (Qwen), for AI subtitle translation, AI Q&A and film image understanding	See section 1.4	Encrypted in transit, called server-side, provider credentials never sent to the client	https://www.aliyun.com/
Alibaba Cloud Computing Co., Ltd.	Object storage and CDN acceleration, for distributing the public metadata cache and encrypted server database backups	Download URLs, terminal IP; encrypted server database backups	Encrypted in transit; backups encrypted at rest	https://www.aliyun.com/
Beijing DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd.	DeepSeek open platform, for AI subtitle translation and AI Q&A	See section 1.4	Encrypted in transit, called server-side, provider credentials never sent to the client	https://platform.deepseek.com/
TMDB	Film and TV metadata and images	Search terms, IP address	Metadata requests passed on by our servers; images requested by your device directly from its image CDN	https://www.themoviedb.org/privacy-policy
Apple Inc.	Apple sign-in and system speech recognition	Authorisation result, verified email address; voice audio (whether it is processed on device depends on the language selected)	Provided by the system; we do not collect voice audio	https://www.apple.com.cn/legal/privacy/
OpenSubtitles	Subtitle search and download	Title, season and episode number, language, file content fingerprint	Passed on by our servers, lower-cased only per the upstream URL convention, with no film identity or episode parameters added	https://www.opensubtitles.com/

These third parties may be located outside the People’s Republic of China. We will fulfill our notification obligations and obtain your separate consent before providing personal information to them.

3.2 Transfer

If we undergo a merger, acquisition, transfer of assets, division, dissolution, declaration of bankruptcy or anything similar, and personal information is transferred as a result, we will inform you of the situation and of the recipient’s name and contact details, and will require the recipient to continue protecting your personal information in accordance with the law and to a standard no lower than this policy.

3.3 Public disclosure

We do not publicly disclose your personal information. It may be disclosed only where you have clearly agreed to the disclosure of information you specify, or where disclosure is required by laws, administrative regulations or a regulator.

3.4 Exceptions

Under laws and regulations we may handle your personal information without your prior consent where it is necessary to perform statutory duties or legal obligations; where it is necessary to respond to a public health emergency, or in an emergency to protect the life, health or property safety of natural persons; where we handle, within a reasonable scope, personal information you have made public yourself or that has been lawfully made public otherwise; and in other circumstances provided by laws and regulations.

4. How we store and protect your personal information

4.1 Storage location and retention periods

• Personal information we collect within the People’s Republic of China is stored within the country. Our services run on Alibaba Cloud, and encrypted backups of server data are kept in Alibaba Cloud object storage in the Hangzhou region.
• Retention periods:
  • Account information: until you delete your account;
  • Network operation and security logs (including authentication security events and source IP): one year;
  • Temporary numbers and device data used during SMS verification: cleared within 24 hours of expiry; sign-in process receipts are kept for at most 24 hours;
  • AI conversation content: until you delete the conversation or your account; encrypted backups at most 56 days;
  • Membership, transaction identifier, credits and usage records: deleted when you delete your account;
  • Installation statistics: each installation keeps its first record and the most recent nine changes;
  • Account library sync data: kept until you remove the content, clear the record or delete your account. After you remove a title, clear a rating or other record, or delete a list, our servers keep only the work number and its deleted state, so that other devices cannot sync deleted content back; this is deleted together with your account;
  • Encrypted backups: at most 56 days;
  • Deletion records: only the user identifier and the fact of deletion (including deleted states in the account library), used after a backup restore to prevent deleted accounts or deleted content from returning.
• If we terminate our services or operations, we will promptly stop collecting personal information, notify you in advance as required by law, and delete or anonymise personal information after termination, unless laws and regulations provide otherwise.

4.2 Cross-border transfer

Information is sent to service providers located outside China in the following situations: you sign in with Apple; your device requests posters and stills directly from TMDB’s image CDN; and system speech recognition is handled by Apple when on-device recognition is unavailable.

For these transfers of personal information abroad, we will inform you in accordance with the law of the recipient’s name, contact details, processing purposes, processing methods and categories of personal information, and how you may exercise your rights, and will obtain your separate consent. We will not obtain that consent through bundled or blanket authorization.

4.3 Security measures

We transmit data over encrypted connections; fields such as phone numbers and email addresses are stored encrypted and looked up through an irreversible index; access tokens are valid for 15 minutes; refresh tokens rotate on every use, with the old token invalidated immediately; session and runtime credentials are not written to ordinary logs; server backups are encrypted. We apply access controls and least-privilege authorization, so that only staff who need it to provide the service can reach the relevant data.

4.4 Handling security incidents

We maintain severity standards and procedures for personal information security incidents and an emergency response mechanism. If a personal information security incident occurs, we will take remedial action immediately and, as required by law, promptly inform you of the basic circumstances and likely impact, the measures we have taken or will take, the steps you can take to protect yourself and reduce risk, and the remedies available to you. Where individual notification is impracticable, we will publish a notice in a reasonable and effective manner and report the handling to the regulator as required.

4.5 Security advice

The internet is never completely secure. Please keep your account and sign-in method safe; if you believe your account may have been compromised, contact us immediately using the details in section 8.

5. How you exercise your rights over your personal information

• Access and review: on iPhone, iPad or Mac you can view your account information and sign-in methods under “Me → Account”, and your conversations in the AI assistant’s history; after you sign in, you can view the content synced to your account library on any of your devices.
• Correction and completion: if you find that account information is incorrect, contact us using the details in section 8 and we will correct it.
• Deletion: you can delete a single conversation or all conversations from the AI assistant’s history, or delete your account’s related information by deleting the account. Removing a title, clearing a record or deleting a list in your account library is synced to your other devices signed in to the same account.
• Withdrawing consent: you can sign out, turn off the relevant permissions in system settings, or stop remote diagnostics. Account library sync stops once you sign out.
• Obtaining a copy (data export): you can request a copy of your personal information using the details in section 8, and we will reply within 15 working days.
• Deleting your account: after you verify your identity and confirm under “Me → Account → Delete account”, the account is deleted immediately, the cloud identity and sign-in methods are removed, all sessions are revoked and the Apple sign-in authorization is revoked at the same time; your account library sync data on our servers is deleted; your local library and the downloaded copy of your account library on the device are kept and no longer sync.
• Complaints and reports: you can raise complaints or reports about personal information matters using the details in section 8, and we will reply within 15 working days.

6. Protection of minors

The app is intended primarily for adults. We do not knowingly collect the personal information of anyone under 14; where a minor uses the app, this should be under the consent and guidance of their guardian.

If we find that we have collected the personal information of anyone under 14 without their guardian’s consent, we will delete it in accordance with the law. Guardians can contact us using the details in section 8.

7. Changes to this policy and how we notify you

This policy may be updated as laws change and as the product develops. If there are material changes, we will notify you through this page, an in-app dialog or a site announcement in a reasonable and prominent way, and where applicable obtain your consent again before you continue using the service.

You can see the current version and the update date on this page. When an App update carries a revised policy, the app presents it together with the Terms of Use and enables online services only after you explicitly agree. If you decline, you can still use your local library and playback while online services remain disabled.

8. How to contact us

If you have any questions, comments, complaints or requests about this policy or your personal information, please email privacy@deepredshift.com, or contact contact@deepredshift.com.

We handle requests after verifying your identity and reply within the periods required by law; for access, copy, correction, deletion and complaint requests we normally reply within 15 working days. If you are not satisfied with our reply, you can also complain to or report the matter to a regulator.