Security

Security notes

A short account of how GPlay handles media, access, the network, and recovery in the current release.

Updated November 6, 2025

Scope

  • This page describes the security boundary of the current stable release. It does not describe experiments that are unreleased or undisclosed.
  • Media stays on the device. The core path does not run through a public cloud by default.
  • The app does not upload the original media files to a public cloud by default. They stay in a place you control on the device, or in system storage you authorize.

Access on the device

  • The local entry accepts a PIN and Face ID or Touch ID. Using them together lowers the chance that someone else opens the app.
  • Before a protected area opens, the device completes the unlock and authorization already set up on it.
  • Sensitive actions wait for you to start them. If access looks wrong, the app tells you inside the app.

Sandbox and permissions

  • The system sandbox is the first separation. App permissions then limit who can read the content, so unrelated system components do not receive it implicitly.
  • Sensitive settings and the media index stay as narrow as they can, so an unauthorized process has fewer chances to read them.
  • Processing stays inside the app. Data is not sent to another app or another folder for long-term storage unless that is required.

Network

  • Wi-Fi import on the local network is available, so the file does not have to cross the public internet.
  • Aside from contact you initiate and the purchase checks described in the privacy policy, network use stays small. Media is not sent outward by default.
  • Import and restore ask you in a way you can see before they write. They do not silently write to an unknown destination.

Backup and removal

  • To keep data across a new device or a reinstall, use the system backup and restore. The boundary is the system’s, not an extra cloud inside GPlay.
  • Before you uninstall, back up or export what you need to keep. The system may remove it with the app.
  • This page describes the current implementation. It is not an outside certification, and it is not a legal opinion.

Contact

  • If something looks wrong, or you suspect a security problem, write to 89694969@qq.com first.
  • The date on this page is the date these notes were last updated. When the practice changes, this page changes with it.
  • Read this as a summary. It explains the boundary and your part in it. It does not replace legal advice.