隐私政策
最近更新：2026 年 10 月 29 日
Limelody（工程名 HiFiPlayer，Bundle ID com.hifistudio.hifiplayer）是一个离线优先的本地音乐播放器。它播放你自己导入或你自己音乐库里的文件。App 里没有账号注册，没有广告，没有第三方统计或推送 SDK，也不会把你的音频文件上传到任何服务器。
一、我们收集哪些信息
| 信息类型 | 什么时候产生 | 是否与你的身份关联 |
|---|---|---|
| 购买历史 | 你在 App 内购买「VIP 永久解锁」（一次性非消耗型内购）时，由 Apple 的 StoreKit 处理并返回凭据。 | 是。购买记录挂在你的 App Store 账号下，用于验证和恢复你的权益。 |
| 设备标识 | 仅在你使用「兑换密钥」或「好友邀请」时。我们上传的是设备标识经过单向哈希后截取的一段「设备句柄」，不上传原始设备标识，也无法从句柄反推出设备标识。 | 是。这些记录保存在你自己的 iCloud 账号下，用来做到「一个密钥只能在一台设备上核销」和邀请去重。 |
| 其他用户内容（仅曲名、歌手、专辑名这类文字标签） | 只有当你主动点击「自动匹配」时，App 才会把这些文字发送给 iTunes Search、lrclib 等公开检索接口，用来找回封面和歌词。你不点，就没有任何匹配请求发出。 | 否。请求里不含设备标识、账号标识或文件路径，也不会与你的身份建立关联。 |
我们不收集：位置信息、通讯录、照片或视频、音频文件本身、浏览历史、健康数据、诊断与崩溃日志、广告标识符（IDFA）。
二、这些信息怎么被使用
- App 功能：让你能恢复已购买的 VIP、让兑换码和邀请机制正常工作、让自动匹配找回封面与歌词。
- 防止欺诈：设备句柄只用来保证同一枚密钥不会被反复领取、同一台设备不会被重复计为邀请成果。
- 不用于追踪：我们不会把你在 App 内产生的数据与任何第三方数据 brokers 或广告平台的标识符拼接，也不会把数据出售或共享给第三方。因此 App 不会向你弹出「要求 App 不追踪你」的授权框。
三、数据存在哪里、能留多久
- 曲库索引、播放进度、歌词关联、EQ 设置、你手动改过的标签与封面，全部只存在你这台设备的 App 沙盒里。卸载 App 即随之删除。
- 兑换与邀请记录存在 Apple iCloud 的 CloudKit 公共数据库中，加密与传输由 Apple 的基础设施负责，全程 HTTPS。
- 购买凭据由 Apple 保管，我们只读取校验结果。
四、儿童与年龄分级
App 的年龄分级为 4+，不针对儿童设计，不索取出生日期，也不在云端建立个人档案。
五、政策变更
如果收集范围发生变化，我们会先更新本页并在顶部改更新日期，再随新的 App 版本生效。本页地址会一并写在 App Store 的产品页上。
支持 · 常见问题
支持哪些音频格式？
导入支持 mp3、flac、wav、aac、m4a、m4b、alac、ape、dsf、dff、ogg、opus。DSD（dsf/dff）与 APE 的实际可播性取决于系统解码能力。
为什么有的歌用不了均衡器或倍速？
均衡器和倍速走的是 App 自己的解码链路。受 DRM 保护的文件（例如从流媒体服务下载的受保护曲目）无法被第三方解码器打开，这类歌曲只能交给系统播放器，此时均衡器不生效。
为什么自动匹配到第 20 首就不能用了？
免费额度是累计 20 首。之后可以通过一次性购买解锁，也可以使用开发者发放的兑换密钥或好友邀请码开通，两种方式得到的权益是一样的。
兑换码提示「已被使用」怎么办？
一枚密钥只能绑定一台设备。如果你在同一台设备上重装系统或更换了设备，请直接联系我们，说明设备与密钥的来源，我们会核实后处理。
CarPlay 里没有歌？
车机读取的是你本机曲库的内容。请先确认歌曲已导入、且没有被「从列表移除」。另外，CarPlay 需要 Apple 对该 App 的能力授权，若界面完全空白请重启车机连接一次。
封面／歌词想手动改？
在歌曲的编辑页里可以手动选择匹配结果，也可以自己导入 .lrc 歌词文件（支持 .txt）。手动内容优先于自动匹配结果，也不会被下一次自动匹配覆盖，除非你在确认页里勾选了对应字段。
界面语言怎么切换？
支持简体中文与英语，可在「我的 → 设置」里切换，即时生效，包括 CarPlay 界面。
联系我们
问题反馈、Bug、兑换码申诉、以及任何与你的数据有关的请求（查阅、删除）：
为了尽快定位，来信请尽量附上：App 内「我的」页显示的版本号、你的设备型号与系统版本、以及问题出现的步骤。
你也可以直接在 App Store 的产品页留下评论，我们会阅读。
开发者：Yue Yang。
Privacy Policy
Last updated: 29 October 2026
Limelody (project name HiFiPlayer, bundle id com.hifistudio.hifiplayer) is an offline-first local music player. It plays files you import yourself and songs that already live in your own library. There is no sign-up, no advertising, no third-party analytics or push SDK, and your audio files are never uploaded to any server.
1. What we collect
| Data type | When it is created | Linked to you? |
|---|---|---|
| Purchase History | When you buy the “Unlock VIP Permanently” non-consumable in-app purchase. Apple’s StoreKit handles the payment and returns the receipt. | Yes. The receipt is tied to your App Store account and is used to verify and restore your entitlement. |
| Device ID | Only when you redeem a key or use the friend-invite feature. We send a short one-way hash “handle” derived from the device identifier — never the identifier itself, and the handle cannot be reversed. | Yes. Those records live under your own iCloud account so that one key can be claimed on one device only and invitations are not double counted. |
| Other User Content (title / artist / album text only) | Only when you explicitly tap Auto-match. The app then queries public lookup services such as iTunes Search and lrclib to recover artwork and lyrics. Nothing is sent unless you tap it. | No. Those requests carry no device identifier, no account identifier and no file paths, and are not linked to you. |
We do not collect: location, contacts, photos or videos, the audio files themselves, browsing history, health data, diagnostics or crash logs, and advertising identifiers (IDFA).
2. How it is used
- App functionality: restoring your VIP purchase, making redeem codes and invitations work, and letting auto-match find artwork and lyrics.
- Fraud prevention: the device handle exists only to stop one key from being claimed twice and one device from being counted as several invites.
- No tracking: we never join this data with third-party data brokers or advertising identifiers, and we do not sell or share it. That is why the app does not show an App Tracking Transparency prompt.
3. Where your data lives
- Your library index, playback positions, lyric links, EQ presets and any tags or artwork you edited by hand stay inside the app sandbox on this device. Deleting the app deletes them.
- Redeem and invite records are stored in Apple’s iCloud CloudKit public database. Transport and storage encryption are handled by Apple’s infrastructure over HTTPS.
- Purchase receipts are held by Apple; we only read the verification result.
4. Children and age rating
The app is rated 4+, is not designed for children, never asks for a birth date, and does not build personal profiles in the cloud.
5. Changes to this policy
If the scope of collection changes we update this page first, including the date above, and the change takes effect with a new app version. This URL is listed on the App Store product page.
Support · Frequently asked
Which audio formats are supported?
Import accepts mp3, flac, wav, aac, m4a, m4b, alac, ape, dsf, dff, ogg and opus. Whether DSD (dsf/dff) and APE actually play depends on what the system can decode.
Why is the equalizer unavailable for some songs?
The equalizer and speed control run on the app’s own decoding path. DRM-protected files — for example downloads from a streaming service — cannot be decoded by third-party code, so they fall back to the system player and the equalizer stays inactive for them.
Why does auto-match stop after 20 songs?
The free allowance is 20 songs in total. After that you can unlock it with the one-time purchase, or with a key from the developer or a friend-invite code. All routes grant the same entitlement.
My code says “already used”.
One key binds to one device. If you wiped or replaced that device, email us with the device and where the code came from and we will look into it.
CarPlay shows no songs.
The car head unit reads your on-device library, so first check that the songs were imported and were not removed from the list. If the screen is completely blank, reconnect CarPlay once.
Can I fix artwork or lyrics myself?
Yes. The song editor lets you pick a match by hand or import your own .lrc (or .txt) lyrics. Your own values win over auto-match and are not overwritten unless you tick the field in the confirmation sheet.
How do I change the language?
Simplified Chinese and English are supported. Switch it under Me → Settings; it applies immediately, including in CarPlay.
Contact
Bugs, feedback, redeem-code disputes and any request about your data (access or deletion):
Please include the version number shown on the Me screen, your device model and OS version, and the steps that reproduce the problem.
You can also leave a review on the App Store product page — we read them.
Developer: Yue Yang.