Viozi is a player for files, media servers, cloud drives and live sources you choose. Palveni (palveni.com) is Viozi's official website and support channel. The operator is 句容市码上搞定信息技术工作室（个体工商户）, using the Welape developer name. App registration: 苏ICP备2026047334号-5A. Contact [email protected] about privacy.
The user data we collect from the app is limited to diagnostics you actively submit and the upload and security records needed to handle them. We do not separately collect your search history, playback activity, library or cloud-drive content. Services you choose to connect process necessary requests under their own policies.
Data on your devices
Your library, playback progress, favorites, settings, subtitles and caches are mainly stored on your devices. Playback connects to your chosen storage or media service; it does not require uploading your entire videos, music or library to Palveni. The app stores connection addresses, credentials or authorization tokens on your device. You can remove a source and revoke its authorization.
Services you connect
- Cloud drives and media servers: sign-in, directory listings, playback and file operations you initiate send necessary requests to that provider. These can include authorization information, file paths or identifiers. Providers also receive your network address. You can revoke access in their account settings.
- Google Drive: Google user data is used only for file browsing, playback and file operations you enable. It is not sold, used for advertising or used to train general-purpose AI models. Its use follows the Google API Services User Data Policy, including Limited Use.
- Authorization callbacks: some providers return authorization results through a developer-operated HTTPS page to the app. This relay completes sign-in and is not used for advertising. Browsers and infrastructure may retain necessary security access records.
- Metadata, ratings and subtitles: enabled features may send titles, years, TMDB/IMDb identifiers or file hashes to services such as TMDB, OMDb, Bangumi, Trakt, MDBList and OpenSubtitles. Live streams, guides and radio directories come from providers you choose or configure. Their privacy policies also apply.
- iCloud: when enabled, relevant settings, sources and library state sync through your Apple account under Apple's iCloud policies. Turning sync off does not necessarily erase existing cloud data; manage it through iCloud storage settings.
Baidu Netdisk authorization and folder scope
Connecting Baidu Netdisk is optional. Authorization takes place on Baidu’s OAuth page; Viozi does not ask you to give the developer your Baidu password. The requested scopes are basic,netdisk. Account identifiers distinguish connected accounts; file names, paths, identifiers, sizes, timestamps and media metadata support browsing and your personal library.
The folder picker lists the root and folders you open. Recursive library indexing covers only the folders you explicitly select and their descendants. No folder selection means no library scan. Selecting the root explicitly includes the entire drive. Folder selection controls the app’s use of data; it does not technically restrict Baidu’s OAuth grant to a single folder. Playback, downloads and caching read the selected media through links returned by Baidu.
Where supported, metadata or artwork writeback, saving edited media files and deleting remote files are separate operations you initiate. Authorization, scanning or playback alone does not automatically write or delete files. Tokens are stored in Apple Keychain and used to authenticate with Baidu. You can disconnect the source and revoke access in your Baidu account settings. Disconnecting does not delete files in the drive.
The Baidu HTTPS callback is hosted on Tencent Cloud EdgeOne. It returns the authorization result to Viozi, does not exchange tokens and does not host media. Browsers and hosting providers may retain necessary technical and security access records.
Subtitles, local networking and permissions
System speech recognition and translation use Apple's frameworks and language resources, subject to device and OS availability. Local-network access supports server discovery, DLNA, AirPlay, Wi-Fi uploads and device relays; media is sent to the devices you select. File, photo and other permissions are requested for the corresponding features and can be revoked in system settings.
Feedback and diagnostics you send
The app uploads your selected diagnostic package to Palveni only when you choose to send it, or sends it by email after your confirmation. It may include crash or hang reports, logs, your description, selected attachments, app and OS versions, device model, language, release channel and a random installation identifier. Logs may contain media names, paths and service addresses. Review them before sending and avoid including passwords or other sensitive information. The server records the source IP, request time and outcome for limits, security and troubleshooting. A random installation identifier does not make the report completely anonymous.
Support staff may use the configured AI service to analyze reports and organize requirements. The current service is the Anthropic API. Relevant report summaries, log excerpts and descriptions may be sent after an attempt to mask common sensitive fields; masking cannot detect everything. Processing is also subject to Anthropic's privacy policy. Connecting a cloud drive does not by itself send its files to this analysis service.
Retention and deletion
Diagnostic files are normally retained for 30 days and may be removed sooner at your request, by administrators or due to storage limits. You can delete diagnostic attachments submitted while signed in to the website from Account → My messages. For reports uploaded from the app whose ownership cannot be confirmed through your website account, email [email protected] with the report number; reasonable proof of upload may be requested.
Necessary upload, security and action records are not all erased immediately: request logs are retained for up to 90 days and metadata for deleted diagnostics for up to one year. Requirement follow-up records are retained separately; specify if personal information in them should also be removed. Encrypted backups rotate out within one year; online deletion does not immediately rewrite existing backups.
Use the app's deletion or cleanup controls, or uninstall it, to remove local data. Manage cloud files and provider-held data with the corresponding provider. Website accounts, messages and attachments are separately covered by the Palveni website privacy policy.
Use, security and contact
We do not sell or rent personal data or use it for cross-app advertising tracking. Data is used for enabled features, support, security and troubleshooting and disclosed only to providers needed for those purposes or as required by law. Services may process data outside your country or region. Access controls, encrypted transport and restricted backups reduce risk but cannot guarantee absolute security.
Viozi is not directed to children. Guardians who believe a child submitted personal information can request deletion. Contact [email protected] to request access, correction or deletion of personal data we hold. Changes to this policy will appear here with an updated effective date.