Privacy Policy
The short version. Detection runs on your phone and your footage is not uploaded anywhere to make it work. We hold the minimum needed to run your account: an email address, a username, and an identifier for each device you register. We do not sell data, we do not build advertising profiles, and we do not read your video.
One exception has to be stated plainly, because it is not ours to switch off: the detection library we bundle is supplied by Google, and it reports usage and performance measurements to Google. Section 3 lists exactly what leaves the device, and what does not.
1. Who we are
AIPlayerX ("AIPlayerX", "we", "us") operates the AIPlayerX mobile apps, the web viewer, and the account and signalling services that connect them. For the purposes of the EU and UK General Data Protection Regulation, we are the controller of the personal data described in this policy.
You can reach us about anything in this policy at support@gooseex.com.
2. What we collect
Information you give us
| Data | Why |
|---|---|
| Email address | Sign-in, account recovery, and service notices such as a policy change that affects you. |
| Username | The name shown inside the app and to people you invite to watch. |
| Password | Stored only as a salted hash that cannot be turned back into the password. We never store or transmit the password itself. |
Information created when you use the app
| Data | Why |
|---|---|
| Device identifier | A random identifier our server issues when you register a device. It is not your advertising ID, your phone number, or a hardware serial number, and it cannot be used to track you across other apps. |
| Device label and platform | Hardware model and operating system family, so the device list is readable and we can route streams correctly. |
| Session records | Refresh tokens and sign-in timestamps, so a session can be renewed without asking for your password again, and revoked when you sign out or remove a device. |
| IP address | Processed by our servers to deliver the service, apply rate limits, and block abuse. It is not stored alongside your footage. |
What we do not collect
- Your advertising identifier, and we do not request tracking permission because we do not track you across other companies' apps or websites.
- Your location. The app asks for local network access to reach a device on your Wi-Fi, which is not a location permission.
- Your contacts, calendar, photos, or health data.
- Biometric identifiers or facial recognition templates.
3. The detection library reports to Google
Object detection in the mobile apps is done by a machine-learning library that we bundle but did not write. It is supplied by Google, and Google's terms for it provide that it sends measurements about its performance and use to Google. That channel is not ours: we do not operate it, we do not receive what it sends, and it is not linked to your account.
Google does not publish the exact format of those reports, so we inspected the version we ship. It sends:
| Data | Detail |
|---|---|
| App identity | The app's package name and version, and the version of the library itself. |
| What the library did | That a detection session started or ended, that detections ran, and any error code it raised. |
| Performance figures | How long detections took, and comparable timings. |
| Device profile | Manufacturer, model, internal hardware and product names, the operating-system build string, language, country, and mobile network operator code. |
| Network address | The IP address the report is sent from. Google states that collected addresses are kept only briefly. |
Those reports do not contain camera frames, video, audio, the objects detected in a frame, your email address, your username, the device identifier we issue, or your advertising identifier. Google states that the library's input data stays on the device.
Those reports carry no identifier that we could look up, so we cannot find and delete an individual's reports on request, and the library exposes no switch that would let us stop them. Removing the app stops them. The web viewer runs no detection at all, so it sends nothing of this kind.
4. Your video and audio
This is the part that matters most, so it is stated precisely.
- Object detection happens on the device. The detection model is shipped inside the app and runs locally. No frame is uploaded in order to detect an object, and no frame is sent to us for analysis.
- Video travels between your devices. When your network allows it, the stream goes directly from the sending device to the viewer. When a direct route is not possible, it is relayed through our server. In both cases the media is forwarded in real time and is not written to disk by us.
- Recorded clips stay on the device that recorded them. Clip history is stored in the app's own storage on your phone, under retention limits the app enforces, and is removed when you delete the clips or uninstall the app.
- We do not watch, review, or moderate your streams. No person at AIPlayerX accesses your video except where you explicitly send it to us for support, or where we are legally compelled to.
5. How we use information
- To create and secure your account, and to let you sign in on more than one device.
- To connect a sender and a viewer to each other, and to issue the short-lived credentials a relay needs.
- To apply subscription entitlements purchased through Google Play or the App Store.
- To keep the service available and defended: rate limiting, abuse prevention, and diagnosing failures.
- To answer you when you contact support.
We do not use your information for advertising, we do not sell it, and we do not share it with data brokers.
6. Legal bases (EEA and UK)
- Performance of a contract — running your account and delivering the service you asked for.
- Legitimate interests — securing the service, preventing abuse, and fixing faults, balanced against your rights.
- Legal obligation — retaining records where tax, accounting, or consumer law requires it.
- Consent — where we ask for it specifically, for example to send you product announcements. You can withdraw consent at any time.
7. Who we share with
- Google Play and Apple. Purchases and subscriptions are processed by the store you installed the app from. We receive a purchase confirmation and a subscription status, not your card details.
- Google, for the detection library. As described in section 3, the library reports its own usage and performance measurements to Google, which uses them to measure performance, debug and improve its APIs, and detect misuse. We neither send nor receive that data.
- Our hosting provider. Servers that run the account service, the signalling service, and the relay are operated for us under contract.
- Legal requirements. Where we are compelled by a valid legal process, and only to the extent required.
Nothing else. We do not use third-party advertising or crash-reporting SDKs, we do not embed analytics that profile you across apps, and we do not sell or rent data to anyone.
8. How long we keep it
- Account data is kept while your account exists. When you delete your account it is removed, along with the devices and sessions attached to it.
- Password reset codes expire after ten minutes and are invalidated as soon as they are used or replaced.
- Session tokens are rotated on each renewal and revoked when you sign out, reset your password, or delete a device.
- Recorded clips and detection events never leave your device and are subject to the retention limits the app applies locally.
- Billing records required by tax law may be retained after account deletion for the period the law prescribes. These are held by the app store, not by us.
9. Security
Traffic between the app and our services is encrypted in transit. Session tokens are not left readable on disc: on Android the stored copy is encrypted under a key held in the device's Keystore, which cannot be exported, and on iOS it is kept in the Keychain. The web viewer holds its refresh token in a cookie that page scripts cannot read. Passwords are hashed and cannot be recovered in plaintext. Access to production systems is limited to the people who need it to operate the service.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authority as the law requires.
10. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to complain to your local data protection authority.
Most of this you can do yourself in the app: the account screen lets you change your details, sign out of sessions, and delete your account entirely. For anything else, write to support@gooseex.com and we will respond within the period the law allows.
11. Deleting your account
You can delete your account from inside the app at any time, from the account screen. Deletion removes your account, your registered devices, and your active sessions. It does not cancel a subscription purchased through an app store — that is managed by the store, and cancelling it there is a separate step described in our Terms.
If you cannot reach the app, email support@gooseex.com from the address on the account and we will process the deletion for you. Our account deletion page sets out both routes, what is removed, and what survives deletion.
12. Children
AIPlayerX is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will remove it.
13. Where your data is processed
Our services run on servers in the European Union and in the Asia-Pacific region. Where data is transferred out of the EEA or the UK, we rely on the legal mechanisms that apply to that transfer, including standard contractual clauses where required.
14. Changes to this policy
If we change how we handle personal data, we will update this page and revise the date at the top. If the change is significant — for example a new category of data, or a new purpose — we will tell you in the app or by email before it takes effect.
15. Contact
Questions about this policy, or a request about your data: support@gooseex.com.
← Back to AIPlayerX