隐私政策

Who we are and what this notice covers AIXBrowser is provided by NOVASIGHT TECHNOLOGY LIMITED, Flat 1506, 15/F, Cheung Fung Commercial Bldg, 21-25 Cheung Sha Wan Road, Sham Shui Po, Hong Kong. Contact support@noyvi.com for support or privacy requests. This notice covers AIXBrowser and its service. Websites, YouTube, podcast publishers, search providers and external apps that you choose to open operate under their own notices and terms. YouTube and podcast providers AIXBrowser uses YouTube API Services to obtain public video information for content discovery. Opening or using YouTube sends requests to Google/YouTube, which may process your IP address, device/browser information, cookies and activity under the Google Privacy Policy: https://policies.google.com/privacy . YouTube content may include advertising and has its own privacy choices. Our directory APIs do not request OAuth access to your YouTube account; signing in on a YouTube website is separate from these public-information requests. Our service uses Apple Podcasts Search API and Podcast Index to discover podcast feeds. These directory requests are made by our service; they do not upload your local listening history. Podcast audio and artwork requests from your TV reach the publisher or its media, artwork and hosting/CDN providers. They can receive your IP address, the requested media or artwork address, technical request information and request times under their own notices. A directory listing does not grant audio or artwork reuse rights. Programme source and licence information remains subject to the publisher's specific conditions. Provider documents: Apple Privacy Policy https://www.apple.com/legal/privacy/ ; Apple Search API information https://performance-partners.apple.com/search-api ; Podcast Index Privacy Policy https://github.com/Podcastindex-org/legal/blob/main/PrivacyPolicy.md . These provider requests are separate from AIXBrowser reporting. Reporting settings do not stop requests needed to open the third-party content you choose. Data used to operate the service We use installation and session identifiers, IP address, device/app information, country and language settings, service requests and privacy choices to provide content, browsing, playback and phone remote control, protect the service and remember your choices. Your IP address or device settings help select regional content; we do not use GPS for this. Search suggestions may send typed text to our service before you press Search; text recognized as a website address is excluded. Searching, opening a website or playing content sends the relevant query, address or request to the service or provider involved. Do not include confidential information in searches. Voice search is optional. After you start it and allow microphone access, your device's recognition service may send audio to its provider. Recognized text automatically starts a search. You can type instead or revoke microphone permission in Android settings. This permission does not enable analytics or diagnostics. Favorites, history, saved items and playback progress are mainly stored on your TV. Local recommendations do not require uploading your full history, although individual requests reach us or the relevant provider. If you contact support, we use your email address, message and information you provide to respond, using mail service providers. Do not send passwords, verification codes or private browsing records. Usage statistics and crash diagnostics AIXBrowser uses Google Analytics for Firebase to understand new and active app installations and limited screen, feature, category, result and duration information. Basic usage statistics are on by default in this version, with no separate in-app switch. Google receives an app-instance identifier and app/device technical information. Our events exclude search terms, website or video addresses, content titles, full browsing or viewing history and private IPTV addresses. Previously saved refusals remain effective. Crash reporting is a separate setting. It stays off until you allow it in regions requiring prior permission and when your region is unknown; elsewhere it may start on. You can turn it off in Privacy & data, including while offline. A saved refusal remains effective. When enabled, Google Firebase Crashlytics receives crash details, app/device technical information and installation/session identifiers to help us fix failures. Private browsing pauses app reporting. Excluded activity is not reported later. Turning crash reporting off stops new crash collection and requests local cleanup; reports already sent for delivery may still arrive. This does not immediately delete data Google has already received. Necessary service and cleanup requests are separate. These reports are not used for advertising. Websites, cookies, private mode and phone remote Normal browsing allows first-party and third-party cookies and website storage by default. You can switch third-party cookies off for all sites in settings. Switching them off does not erase existing website data; use the website-data clearing control, which may sign you out. Private browsing blocks third-party cookies. Your device's web safety service may receive requests to check unsafe content, separately from app reporting. Private mode separates temporary website data where your device supports it and attempts to clear it when the session ends. The app warns if full isolation is unavailable. It does not make you anonymous or hide traffic from websites, providers, network operators or external apps. Phone remote pairing exchanges authorization information and commands. The phone browser saves the TV address and authorization for reconnection; authorization can remain valid for up to 365 days and can be revoked on the TV. Expired saved authorization is removed when the phone browser next reads it, not necessarily when a closed browser's authorization expires. Pair only trusted devices. Storage, recipients and international processing We use cloud hosting, security, support, analytics and diagnostics service providers for the purposes described here. Our own service is hosted in the United States. Google Analytics and Crashlytics process statistics and crash reports separately from our own service. Your data may be processed outside your country. Search, media, voice and website providers also receive the requests you direct to them. We do not sell personal information or use it for cross-context behavioural advertising. Retention depends on purpose. Product-count aggregates have a 90-day retention setting. Superseded privacy choices are eligible for cleanup when their effective date is over 365 days old. Installation IDs and the latest choices are kept as needed for the service and your preferences; security/audit records only for a specific security, dispute or legal purpose. We review these needs at least every 90 days and delete or de-identify records no longer needed, subject to legal requirements. Backups are eligible for cleanup after 30 days; recovery needs and deletion schedules may extend this period. Usage analytics retains user-level data for 14 months, renewed by new activity, and other event data for 2 months; most standard aggregate reports are outside these settings. The diagnostics provider describes 90 days before deletion of crash traces and associated identifiers begins. Turning a choice off does not immediately erase previously received data. Support correspondence is scheduled for clearance 90 days after closure. Minimum privacy-request records are kept for 12 months after closure, with original attachments scheduled for clearance after 30 days. Legal obligations and unresolved disputes may require longer retention. Your choices and requests Reading this policy does not itself give consent. The legal basis depends on the purpose and applicable law. For processing objectively necessary to provide your requested service, we rely on contract; for proportionate security and abuse prevention, legitimate interests; and where applicable, legal obligations. Where processing relies on your consent, you may withdraw it. You may object to processing based on legitimate interests. Contact support@noyvi.com to exercise these rights. Privacy & data provides the crash-reporting setting and available deletion controls. Basic statistics have no separate in-app switch; previously saved refusals remain effective. Server deletion requires a successful online response; uninstalling is not a server-deletion request. Local deletion may clear your library, private IPTV sources and child-lock PIN even if the server request fails. Backups, aggregate records and provider-held data follow their separate retention and deletion rules. Website accounts and site data have separate controls. Email support@noyvi.com to exercise applicable access, correction, deletion, restriction, objection or portability rights, withdraw consent or make a complaint. We may need to verify your authority and will explain applicable limitations or appeal options. Withdrawal does not affect earlier lawful processing. You may complain directly to your competent data-protection authority without first contacting us. Regional rights depend on applicable law, not your content-market setting. EEA users may contact their supervisory authority, UK users the ICO, Swiss users the FDPIC and Brazilian users the ANPD. Where applicable, Brazilian rights include processing confirmation, anonymisation or blocking; Canadian rights include access and correction. U.S. state rights and appeals depend on the law that applies to you. Children, security and changes AIXBrowser is not designed specifically for children. A shared TV's settings and the child lock do not verify age or parental consent. Contact support@noyvi.com if you believe we have improperly processed a child's personal information. We use safeguards such as access controls and encrypted transmission, but no system is perfectly secure. The policy shows its version and effective date. Material changes to collection require updated information and any choices required by applicable law. Earlier consent does not authorize a new purpose. Advertising AIXBrowser currently places no advertising of its own. Websites and media providers may show their own ads and apply their own privacy choices. Future AIXBrowser advertising would require updated information and any applicable choices before processing starts; current statistics or diagnostic choices do not authorize it.

Normal browsing allows first-party and third-party cookies and website storage by default. You can switch third-party cookies off for all sites in settings. Switching them off does not erase existing website data; use the website-data clearing control, which may sign you out. Private browsing blocks third-party cookies. Your device's web safety service may receive requests to check unsafe content, separately from app reporting. Private mode separates temporary website data where your device supports it and attempts to clear it when the session ends. The app warns if full isolation is unavailable. Private mode does not hide network activity or erase data already received by websites or other providers. App reporting pauses in private browsing; excluded activity is not reported later. Websites have their own data practices and cookie choices, which AIXBrowser does not accept on your behalf. The phone remote saves the TV address and authorization in the phone browser. Authorization may remain valid for up to 365 days and can be revoked on the TV. Expired saved authorization is removed when next read; a closed browser may retain its copy longer. Website accounts, local browsing data and service-provider data have separate deletion controls. See the Privacy policy or contact support@noyvi.com.