CXPlayer Manager Privacy Policy ​

Updated: September 24, 2026
Effective: September 24, 2026

Preamble ​

Welcome to CXPlayer! CXPlayer is an information publishing application provided by us. To explain how CXPlayer collects, uses, and stores your personal information and what rights you have, we will explain the relevant matters through this policy. CXPlayer is operated by Hefei Weijie Information Technology Co., Ltd. and its affiliated companies (hereinafter referred to as "we", "platform", or "CXPlayer"). We attach great importance to your privacy and personal information protection, and have formulated this "CXPlayer Privacy Policy" ("this Policy") in accordance with the Cybersecurity Law of the People's Republic of China, the Information Security Technology Personal Information Security Specification (GB/T), and related laws and regulations, as an integral part of the "CXPlayer User Agreement." We hope this Policy helps you understand the following:

1. How we collect and use your personal information
2. How we share, transfer, and publicly disclose your personal information
3. How we protect your personal information
4. How you manage your personal information
5. How we handle the personal information of minors
6. Applicable law and jurisdiction
7. How this policy is updated
8. How to contact us

We are well aware of the importance of personal information to you and will do our best to protect the security of your personal information. The personal information we mention in this privacy policy, including the collection, use, management, sharing and transfer of personal information, includes bolded and underlined sensitive personal information and other personal information. We are committed to maintaining your trust and adhering to the following principles: consistency of rights and responsibilities, purpose clarity, choice and consent, minimization, security assurance, subject participation, and openness and transparency. We promise to adopt corresponding security protection measures in accordance with mature industry standards to protect your personal information. Please read this policy carefully and confirm that you fully understand it before using our services. By clicking to agree, you are deemed to accept the contents of this policy and authorize us to collect, use, store and share your relevant information in accordance with this policy.

1. How We Collect and Use Your Personal Information ​

To help you quickly understand, we list the business scenarios, purposes, methods, and types of personal information as follows:

(1) User Registration/Login ​

1. Obtaining your phone number: To use CXPlayer, you need to register an account. During this process, you need to provide your mobile phone number and create an account name to fully use CXPlayer functions. If you refuse to provide your phone number, you cannot register.
   Purpose: User registration, login, and account verification.
   Data Scope: Mobile phone number.
   Collection Method: User input.
   Is Required: Required.

(2) Normal Use of Functions ​

1. External storage access: When you create and deliver programs, we need access to your device storage to select images/videos. Without this permission, the function will not work properly.
   Purpose: Read materials for program creation and delivery.
   Data Scope: Device storage access permission and selected image/video files.
   Collection Method: System permission request.
   Is Required: Required.

2. Uploading content: This application is an information publishing application. We store the images, videos, and text you upload so that programs you create can be distributed to display devices managed by you. Cloud media storage is provided solely to support media distribution and is not a cloud drive, backup, or permanent storage service. Your uploaded content is only visible and manageable by you and will not be shared with others. When you delete media, our servers will also delete it. To use storage resources reasonably, the system will also automatically delete media that was uploaded at least one year ago and is not currently used or referenced by any program. Deleted media may not be recoverable, so you should back up any media that must be retained for the long term.
   Purpose: Edit programs and distribute content to display devices.
   Data Scope: Images, videos, and text content.
   Collection Method: User upload/input.
   Is Required: Required.

3. Camera and microphone permissions: If you need to create programs using the local camera (Add Materials -> Built-in Widgets -> Camera), you must allow access to the local camera. This is not required. If you do not use this feature, you do not need to enable this permission.
   Purpose: Edit camera-based programs.
   Data Scope: Camera and microphone permissions.
   Collection Method: System permission request.
   Is Required: Not required.

4. App installation permission: To provide better services, we may update the app when adding new functions or solving issues. We will request app installation permission. If you refuse this permission, you will not be able to use the online update feature, but it will not affect other functions.
   Purpose: Online update and installation.
   Data Scope: App installation permission.
   Collection Method: System permission request.
   Is Required: Not required.

(3) Purchase of Products and Services ​

Purchase records: When you purchase products and services provided by CXPlayer, we generate an order that includes the product/service information, payment amount, and purchase time. We collect this necessary information to help complete the transaction, ensure transaction security, and allow order queries. Paid order information is stored for later reconciliation; unpaid order information is deleted after the payment timeout.
Purpose: Complete transactions, ensure security, and query orders.
Data Scope: Order information (product/service info, amount, purchase time).
Collection Method: System generated.
Is Required: Not required.

(4) Security Operation ​

To improve security, protect users and the public from harm, prevent phishing, fraud, network vulnerabilities, viruses, attacks, and intrusions, and detect violations of laws and agreements, we may use or integrate device and log information to assess risks, verify identity, detect and prevent security incidents, and take necessary recording, auditing, analysis and handling measures.

1. Device information: We receive and record device/user-related information (such as device model, device settings, SN, MAC address, unique device identifier, and other hardware/software features) and device location-related information (such as IP address) based on the permissions you grant.
   Purpose: Account security, identity verification, and anomaly detection.
   Data Scope: Device model, device settings, SN, MAC, unique device identifier, IP address, etc.
   Collection Method: System auto-collection.
   Is Required: Required.

2. Log information: When you use CXPlayer products or services, we automatically collect detailed usage information and keep it as network logs (e.g., time spent using a feature).
   Purpose: Keep network logs and analyze service usage.
   Data Scope: Usage records, crash logs, etc.
   Collection Method: System auto-collection.
   Is Required: Required.

Please note that device information and log information alone cannot identify a specific natural person. If such non-personal information is combined with other information to identify a specific person, or combined with personal information, it will be regarded as personal information during the combined use period.

(5) Functions Necessary to Improve Our Platform and/or Services ​

To provide a better experience, we continuously improve our services. We may collect usage and browsing data for analysis to understand service needs. We may also collect other information for reasonable needs of providing and improving services, including information you provide when contacting customer service, questionnaire responses, and information obtained when you interact with our affiliates or partners. Information collected from your devices may be associated to provide consistent services across devices.
Purpose: Experience optimization and service improvement.
Data Scope: Usage data, customer service communications, survey responses, etc.
Collection Method: System analytics and user-provided.
Is Required: Not required.

(6) Third-Party SDK List ​

The Android management app calls the Alipay SDK after you consent to this privacy policy and actively choose to pay with Alipay. The SDK directly collects the information listed below to complete payments, protect account and funds security, and fulfill legal obligations concerning anti-money laundering, counter-terrorist financing, and anti-telecom fraud. We assess the SDKs we integrate and update this disclosure when their data processing rules change.

Alipay SDK (Alipay Client SDK for Apps) ​

• Service provider: Alipay Payment Technology Co., Ltd. (支付宝支付科技有限公司).
• Usage scenario: You choose Alipay and tap Pay when purchasing a product or service.
• Collection method: The Alipay SDK collects information directly through system APIs in the payment scenario above.
• Necessity: Required only for Alipay payments. Choosing not to use Alipay does not affect device management, media management, or program publishing.
• SDK privacy notice: Alipay Client SDK for Apps Privacy Notice.

Specific personal information collected and its purposes:

This list follows the Alipay SDK's official privacy notice. Available information varies with the Android system version and permission settings; the SDK can access the corresponding information only as permitted by the system.

(7) Usage Rules ​

After collecting your personal information, we will strictly use it in accordance with the following rules:

1. We will strictly comply with laws and regulations and this privacy policy when using your personal information.
2. We will encrypt, de-identify, or anonymize your personal information by technical means in accordance with the law.
3. When you cancel your account, we will delete or anonymize your personal information.
4. When we need to use your personal information for other purposes not stated in this policy, we will seek your consent again.

(8) Exceptions to Authorized Consent ​

According to relevant laws and regulations, collecting your personal information in the following situations does not require your authorized consent:

1. Related to national security and defense security;
2. Related to public safety, public health, and major public interests;
3. Related to criminal investigation, prosecution, trial, and execution of judgments;
4. For the purpose of safeguarding the life, property and other major legitimate rights and interests of the personal information subject or other individuals, but it is difficult to obtain your consent;
5. The personal information collected is disclosed to the public by you yourself;
6. Collecting personal information from legally publicly disclosed information, such as legal news reports, government information disclosure and other channels;
7. Necessary for signing a contract according to your requirements;
8. Necessary for maintaining the safe and stable operation of the products or services provided, such as discovering and handling failures of products or services;
9. Necessary for legal news reports;
10. Academic research institutions conduct statistical or academic research based on public interests, and when providing academic research or description results to the outside world, they de-identify the personal information contained in the results;
11. Other circumstances stipulated by laws and regulations.

Please understand that the functions and services we provide are constantly updated and developed. If a function or service is not described above and collects your information, we will separately explain the content, scope, and purpose of the information collection through page prompts, interactive processes, announcements, etc., to obtain your consent. If we stop operating CXPlayer, we will promptly stop collecting your personal information, notify you of the cessation in the form of individual delivery or announcement, and delete or anonymize the personal information we hold.

(9) Automatic Startup and Launching Other Apps ​

1. Automatic startup: CXPlayer Manager does not provide a startup-at-boot feature and does not start the management app in response to boot-completed, system-time-change, or time-zone-change broadcasts.
2. Launching Alipay: After you consent to this privacy policy, choose Alipay, and tap Pay, the management app calls the Alipay SDK. If Alipay is installed, the SDK may open it to complete your payment and return the result. This occurs only for a payment you initiate. The management app does not automatically open Alipay when you have not initiated an Alipay payment. Choosing not to use Alipay does not affect other management functions.

2. How We Share, Transfer, and Publicly Disclose Your Personal Information ​

(1) Sharing ​

We will not share your personal information with companies, organizations, or individuals other than CXPlayer platform service providers, except in the following circumstances:

1. Sharing with explicit consent: With your explicit consent, we will share your personal information with other parties.
2. Sharing under legal circumstances: We may share your personal information in accordance with laws and regulations, the needs of litigation dispute resolution, or the requirements of administrative and judicial authorities.
3. When you use your CXPlayer mobile account to log in to other platforms operated by us and our affiliates, to facilitate your use, we will share all information collected in Article 1 of this policy with the aforementioned products or services (e.g., remaining membership time, usage frequency, etc.).
4. Sharing with affiliates: All information collected in Article 1 may be shared with affiliates of Hefei Weijie Information Technology Co., Ltd. Their use and processing is subject to this policy. If affiliates change the purpose of processing, they will seek your consent again. Our affiliates include: Hefei Weijie Information Technology Co., Ltd. and its branches and subsidiaries; we and our affiliates are collectively referred to as "CXPlayer."
5. Sharing with authorized partners: We may entrust the following types of authorized partners to provide relevant services or perform functions on our behalf. We will only share your information for the legitimate, justified, necessary, specific and clear purposes stated in this policy. Authorized partners can only access information necessary to perform their duties and may not use it for any other purpose.

Currently, our authorized partners include the following types and purposes:

• Specific functions. When software service providers, smart device providers, or system service providers jointly provide services with us (e.g., authentication services, SMS services), in order to achieve this function, we may collect your device information (such as hardware model, operating system version, IMEI, MAC) after de-identification and provide it to the aforementioned providers.
• Product analysis. To analyze service usage and improve user experience, we may share statistical data on product usage (crashes, crashes) with third parties. Such data is difficult to combine with other information to identify your personal identity.

(2) Transfer ​

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

1. With your explicit consent, we will transfer your personal information to other parties;
2. In the event of a merger, acquisition, or bankruptcy liquidation, if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to be bound by this privacy policy; otherwise we will require them to seek your authorized consent again.

(3) Public Disclosure ​

We will only publicly disclose your personal information in the following circumstances:

1. With your explicit consent;
2. Disclosure based on law: In the event of mandatory requirements by law, legal procedures, litigation, or government authorities, we may publicly disclose your personal information.

(4) Exceptions to Prior Consent for Sharing, Transfer and Public Disclosure ​

In the following circumstances, sharing, transferring, and publicly disclosing your personal information does not require your prior authorized consent:

1. Related to national security and defense security;
2. Related to public safety, public health, and major public interests;
3. Related to criminal investigation, prosecution, trial, and execution of judgments and other judicial or administrative law enforcement;
4. For the purpose of safeguarding the life, property and other major legitimate rights and interests of you or other individuals, but it is difficult to obtain the consent of the person;
5. Personal information that you voluntarily disclose to the public;
6. Collecting personal information from legally publicly disclosed information, such as legal news reports, government information disclosure and other channels.

3. How We Protect Your Personal Information ​

1. We use security measures that comply with industry standards to protect your personal information from unauthorized access, public disclosure, use, modification, damage, or loss. For example, we provide HTTPS secure browsing, use encryption technologies, deploy access control mechanisms, use trusted protection mechanisms to prevent malicious attacks, and provide security and privacy training.
2. We will avoid collecting irrelevant personal information and retain your personal information only for the period necessary to achieve the purposes stated in this policy or the statutory period, unless the retention period must be extended or is permitted by law.
3. We allow only employees and partners who need to know this information to access personal information, and set strict access control, approval processes, and monitoring mechanisms. We require all personnel who may access personal information to fulfill confidentiality obligations. If a third party fails to fulfill confidentiality obligations, we may pursue legal liability and terminate cooperation.
4. The Internet is not an absolutely secure environment. We strongly recommend that you do not send personal information via unencrypted methods such as email or instant messaging. Please use complex passwords to help secure your account.
5. In the event of a personal information security incident, we will inform you in accordance with laws and regulations of the basic situation and possible impact, disposal measures, suggestions for risk mitigation, and remedial measures. We will notify you via email, letter, phone, push notification, etc. When it is difficult to notify individually, we will issue a public notice. We will also report the handling of the incident to the relevant regulators as required.
6. Please note that this system is an information publishing application. Cloud media storage is provided solely to support media distribution and is not a cloud drive, backup, or permanent storage service for your important data. To use storage resources reasonably, the system will automatically delete media that was uploaded at least one year ago and is not currently used or referenced by any program. Media currently used or referenced by a program is not subject to this automatic cleanup rule. Deleted media may not be recoverable. Before the one-year period expires, you should promptly and completely back up any media that must be retained for the long term. You are responsible for any loss of data or media, or inability to recover it, caused by your failure to make a backup in time.

4. How You Manage Your Personal Information ​

We attach great importance to your management of personal information and protect your rights to access, correct, withdraw consent, and delete your personal information. Your rights include:

(1) Delete Your Personal Information ​

You may request deletion in the following situations:

1. Our processing of personal information violates laws and regulations;
2. We collect or use your personal information without your consent;
3. Our processing of personal information violates our agreement with you;
4. You cancel your CXPlayer account;
5. We terminate the service and operation.

If we decide to respond to your deletion request, we will also notify third parties who have obtained your personal information from us and require them to delete it in a timely manner, unless otherwise stipulated by laws or those third parties have obtained your authorization. When you delete information from our services, we may not immediately delete the corresponding information in backup systems, but will delete it when the backup is updated.

(2) Change the Scope of Your Authorized Consent ​

Each business function requires some basic personal information to be completed. In addition, if you wish to withdraw your consent to additional collection, use, and disclosure of personal information, you can contact us to withdraw your consent.

After you withdraw consent, we will no longer process the corresponding personal information. However, your decision to withdraw consent does not affect processing carried out based on your prior authorization.

If you do not want to receive commercial advertisements from us, you can reply to unsubscribe via SMS prompts or use other methods we provide.

(3) Account Cancellation ​

You can cancel your CXPlayer account at any time. You can apply to cancel in our product or contact us for assistance. After cancellation, we will stop providing products or services and delete your personal information as required, unless otherwise stipulated by laws and regulations.

(4) Responding to Your Requests ​

To ensure security, you may need to provide a written request or otherwise prove your identity. We may ask you to verify your identity before processing your request.

In principle, we do not charge fees for reasonable requests, but may charge a certain cost fee for repeated requests that exceed reasonable limits. We may refuse requests that are unreasonably repetitive, require excessive technical means (e.g., developing new systems or fundamentally changing current practices), pose risks to the legitimate rights and interests of others, or are impractical.

In the following situations, we will not be able to respond to your request according to laws and regulations:

1. Related to the personal information controller's performance of obligations stipulated by laws and regulations;
2. Directly related to national security and defense security;
3. Directly related to public safety, public health, and major public interests;
4. Directly related to criminal investigation, prosecution, trial, and execution of judgments;
5. The personal information controller has sufficient evidence to show that the personal information subject has subjective malice or abuse of rights;
6. For the purpose of safeguarding the life, property and other major legitimate rights and interests of the personal information subject or other individuals, but it is difficult to obtain the consent of the person;
7. Responding to the personal information subject's request will cause serious damage to the legitimate rights and interests of the personal information subject or other individuals or organizations;
8. Involving trade secrets.

5. How We Handle the Personal Information of Minors ​

1. Our products, websites and services are mainly for adults. Minors may not create their own user accounts without the consent of their parents or guardians. If you are a minor, we recommend that you read this privacy policy carefully with your parents or guardians, and use our services or provide us with information with their consent.
2. For the collection of personal information of minors with the consent of parents or guardians to use our products or services, we will only use, share, transfer or disclose this information with the express consent of parents or guardians or when necessary to protect minors.
3. If we find that we have collected personal information of minors without obtaining verifiable consent in advance, we will try to delete the relevant data as soon as possible.

6. How Your Personal Information is Transferred Globally ​

1. In principle, personal information we collect and generate in the People's Republic of China will be stored in the People's Republic of China.
2. Since we provide products or services through resources and servers worldwide, this means that after obtaining your consent, your personal information may be transferred to overseas jurisdictions in the country/region where you use the product or service, or be accessed from those jurisdictions.
3. Such jurisdictions may have different data protection laws, or even no relevant laws. In such cases, we will ensure that your personal information receives sufficient equivalent protection in the People's Republic of China. For example, we will request your consent for cross-border transfer of personal information, or implement security measures such as data de-identification before cross-border transfer.

8. Updates to This Policy ​

1. To provide better services, CXPlayer and related services may be updated from time to time. We will revise this policy accordingly. Such revisions are part of this policy and have the same effect as this policy. However, without your explicit consent, we will not reduce your rights under the current policy.
2. After this policy is updated, we will release the updated version in the CXPlayer mobile client and, before the updated terms take effect, notify you in an appropriate manner (such as notification or announcement) so that you can understand the latest version in time. If you continue to use our services, you agree to accept the updated policy. If the update involves collecting new sensitive personal information, we will again obtain your consent in a prominent manner.
3. For major changes, we will provide more prominent notice (including via email for certain services), explaining the specific changes, including but not limited to:

• Significant changes in service mode, such as processing purposes, types of personal information, or usage methods;
• Significant changes in ownership structure or organization, such as business adjustments, bankruptcy, or mergers and acquisitions;
• Changes in the main objects of personal information sharing, transfer, or public disclosure;
• Changes in your rights related to personal information processing and how to exercise them;
• Changes in the department responsible for personal information security, contact methods, or complaint channels;
• High risks identified by personal information security impact assessments. We will also archive old versions of this policy for your reference.

9. How to Contact Us ​

1. If you have any questions, opinions, or suggestions about this policy or about your use of our services, you can contact us:

• Company name: Hefei Weijie Information Technology Co., Ltd.
• Registered address: Room B403, No. 602 Huangshan Road, Hefei, Anhui, China
• Mailing address: Room B403, No. 602 Huangshan Road, Hefei, Anhui, China (Attn: Mr. Chen), Postal Code: 230031
• Contact: CXPlayer Privacy Protection Email: cxplayer666@hotmail.com

2. We will review your request as soon as possible and, after verifying your identity, respond within the time limit prescribed by laws and regulations (no later than 15 days).