EncoX and Privacy

EncoX is designed to protect your information and to let you choose what you share.

What counts as personal data at EncoX?

At EncoX, we firmly believe in and respect fundamental privacy rights and believe that these fundamental rights should not differ depending on the country or region in which you live. Personal data means any information relating to you as an identified or identifiable person. This app does not require you to create an account: the profile is created on your device, and the media content you import is stored on this device too (if you choose to sign in, sign-in goes through Apple’s Sign in with Apple). To state it just as honestly: the records your device produces — the display name and avatar in your profile, your playback progress, the composition of your media library, the number of videos this device has successfully converted, and the sign-in diagnostics held on this device — may partly count as personal information under applicable law, and the scope of their processing is set out in the corresponding sections of this policy; the only channel to the outside is the technical-support email you write to us on your own initiative: we receive whatever you fill in and whatever you attach in that email, and we use it to answer that request.

Your Privacy Rights at EncoX

Under the applicable law of where you live, you may request access to, correction of, a copy of, the transfer of, a restriction on the processing of, or the deletion of the personal data that we actually process, and where consent is the basis for processing you may withdraw that consent as the law allows. You can also manage your profile and the media material held on your device inside the app, or manage your sign-in authorization in the Apple Account settings on your device. The effect of synchronization, backups and permission changes is governed by the specific sections of this policy and by applicable law; we will not discriminate against you in a way the law forbids because you have exercised your privacy rights.

You can exercise your privacy rights in the following ways:

Right of access: view your media library (TV shows and movies) in the Library tab, and your conversion tasks and their status in the Convert tab. Playback progress has no list of its own; it shows up only when the next playback resumes where you left off

Right of correction: rename movies, adjust series membership, or edit the profile directly in the app

In EncoX you can delete entries from your media library, stop conversion tasks or delete your EncoX profile; deleting the profile starts the clean-up of the profile and the related identifiers on this device, and the parts that have already been synced have to be handled by Apple under the conditions of the system. The display name and the avatar shared by the three apps — VocaX, SlateX and EncoX — enter the deletion process only when the last profile still in use is deleted and this can be confirmed; where it cannot be confirmed for the time being, they are retained, and the deletion is retried once the conditions allow it.

Right to data portability: export your converted files to any location you choose using system file sharing (Finder / iTunes) or the share sheet. Subtitles are not kept as separate files — they travel inside the converted file as embedded subtitle tracks.

Permission control: this app requests no camera, location, or local network permissions, and never asks the system for read access to your photo library or your video files; media and subtitles only ever come from a deliberate action on your part — chosen with the system’s Files and Photos pickers, handed over from another app through the system share sheet, or dragged straight onto the conversion page on iPad and Mac. This app’s own folder is visible and writable in Finder and in the system’s Files app, but videos you put there are not automatically added to this app’s records; you still need to select them yourself through any of the entry points above

EncoX’s media library records, conversion outputs and playback progress are kept mainly on the device you are using, and the original media stays in the location you chose, which may include folders held in iCloud Drive. You can manage the records in the app, export the outputs through the system’s sharing or file sharing features, or delete your profile. Uninstalling the app and deleting your profile reach different things: Keychain records, Apple transaction data, the device’s system backup and the profile already synced to iCloud may continue to exist under their own rules, and the exact limits are set out in this policy’s explanation of data retention and deletion.

Personal Data EncoX Collects

EncoX processes, on your device, the information needed for playback, conversion and media library management, and it handles your profile and certain entitlement records according to the Apple Account services you use. We also process the technical support information you send us on your own initiative; the categories concerned, and how they are retained and deleted, are described in the later sections of this policy.

Your Creative Work Is Not Used for Model Training

EncoX does not integrate any generative model or external AI service to process your content; on the device it uses only one system capability — when the subtitles in a video are image-based (the kind stored as pictures, such as Blu-ray, DVD or digital television broadcast subtitles), the app calls the text recognition built into Apple’s system to recognize the lettering on the screen and re-output it as a text subtitle. Apart from that, everything is deterministic media processing. We do not receive your video, audio and subtitle content and we do not keep it, and it is not used to train, fine-tune or improve any algorithmic model — the frames and the results of that recognition are likewise processed only on this device. Conversion is performed on your device; during conversion the app may create the necessary temporary or segmented intermediate files in this app’s own storage area, and those files are kept and cleaned up on this device, as described in the Local Storage Technologies section of this policy. To state this honestly: when you play video in the system player, iOS may use Apple’s own on-device models to generate or translate subtitles — that is handled by Apple under Apple’s terms, and EncoX neither takes part in that process nor receives any of its results (see the System and On-Device Capabilities section).

Safe Even Offline

EncoX is designed for offline use. As long as a file is already on this device, you can use every local feature of the app in airplane mode — playback, conversion, extracting subtitles and remuxing them, generating thumbnails — and that itself is proof that the data really is in your hands. Normally only the following few things need a network connection: purchases and restoring purchases are initiated by the app and completed by the App Store; the free-allowance integer, the opaque user identifier returned by Sign in with Apple, the marker recording that you have deliberately signed out, and a marker recording that this Apple Account of yours has already made a one-time membership purchase (whose value is a single character, which is kept in the Keychain under a fixed account name) — all of these are synced by Apple through iCloud Keychain between your own devices signed in to the same Apple ID; the profile you fill in inside the app is synced by Apple through CloudKit between your own devices once iCloud is enabled, and of this the display name and the avatar are also kept in one profile record shared among the three apps VocaX, SlateX and EncoX, which all of them can read under the same iCloud Account; the initial value of the display name can come from the name you consent to share on Apple’s authorization panel, and you can change it at any time. So that the question “when this app is signed out, are any of the other apps still using that profile record” can be judged accurately, the same container also drops one registration marker per app, whose value is a single character and which contains none of your identity in plain form, no attribution key, no timestamp and no device information; for “Sign in with Apple” the app initiates the authorization request and Apple performs the authentication. All of these communications go through Apple’s system services, and EncoX does not send your media content out on that account. There is one more thing of the same kind: if a file you selected is still in a location managed by Apple, such as your own iCloud Drive, and has never been downloaded to this device, the system connects first to bring it back to the device — that is Apple’s file synchronization at work, not EncoX processing your file.

Your Profile, Managed by You

EncoX does not require you to register an account. Signing in uses Sign in with Apple, the service Apple provides: we obtain the opaque user identifier returned by Sign in with Apple, and we keep it in your own Keychain (it syncs through iCloud Keychain between the devices signed in with the same Apple Account), so that we can recognise you when you open the app again and check in the system whether this authorization is still valid. Our only request to Apple is your name. Your email address, your identity token and your authorization code are still never requested, and we cannot obtain them either. The name you consent to share on Apple’s authorization panel comes back once, with the first authorization only; this app treats it solely as the initial value of that display name field — where the profile already has a name, your own takes precedence, and the name returned this time does not count. Once it takes effect it shares the fate of the display name you fill in yourself: it travels with the profile along the same synchronization channel, visible between the three apps under the same iCloud Account, and you can change it at any time, or reset it. Logs record only whether a name was received, never the name itself. When Apple returns no name, that field stays empty and the interface shows the default form of address in your device’s language. The profile you see in the app is made up of a display name, an avatar, the profile creation time and an attribution key, and it is first created on this device; when this device has iCloud enabled, this profile is kept in your own iCloud private database through Apple’s synchronization mechanism and synced between the devices signed in with the same Apple Account. That channel is provided and managed by Apple: we do not receive the contents of this profile and we cannot read them, and the encryption and storage security measures are provided by Apple under its own terms, which we do not undertake on its behalf. Your media library, conversion queue and playback progress are kept in this app’s storage area on this device; we do not keep these records and we cannot read their contents, and the device’s system backup may keep copies of them under Apple’s backup mechanism.

Media Files and Records

The videos and subtitles you select through EncoX stay in the locations you chose, which may include folders held in iCloud Drive. So that the selected files can be accessed on a continuing basis, we may keep a file reference that the system authorizes; the outputs produced by conversion, the playback records and the queue data are kept mainly in the app’s own storage area on the device. You can manage the records inside the app and export files with the system’s own features; the data processing connected with your Apple Account, with the device’s system backup and with sharing you start yourself each follows its own mechanism.

Zero-Tracking Commitment and Diagnostics

EncoX integrates no third-party behavioral tracking component, and it does not send your usage statistics, crash data or diagnostic data off your device; the app may keep diagnostic records on the device for troubleshooting, and we see them only when you take them out yourself and give them to us.

When you use “Get Support” in the app, the diagnostic records on this device are placed in an email draft as an attachment; it contains crash and lag reports, plus troubleshooting details such as the app version, the device model and the system version. Before you press Send it sits only in your own draft — you can see it, and you can delete it before sending; as long as you do not send, nothing leaves this device. The message you send arrives at our support mailbox carrying your own sender address, and how long it and its attachment are kept on our side is decided by the receiving mailbox’s settings. This attachment contains none of your media content and no converted outputs, and no account or device identifiers.

Who processes your data

For the personal information for which we determine the purposes and the means of processing in order to provide accounts, verify purchased entitlements, keep requests secure and provide customer support, the business entity responsible for the processing is AXIOM ONE LLC; you can exercise each of the rights listed in this section through support@encox.app. The full mailing address is given in the “Contact Us” section of the Terms of Service.

Your media records are managed mainly on the device. To support signing in, signing out, the free allowance and the one-time purchase entitlement, EncoX may keep the corresponding identifiers and states in the system Keychain; once the applicable iCloud Keychain synchronization is enabled, those records may pass between the devices signed in with the same Apple Account. Your profile may also enter your own iCloud private database once you enable iCloud. None of the credentials above contains any video, any subtitle or any media file name; the deletion and retention limits for each of them are set out in the “Data Retention” section.

There are also two kinds of continuation record in the Keychain, which exist only to finish what you yourself started: one records that “you asked on this device to clear the display name and the avatar from your profile, and that has not yet fully landed in your private iCloud database”; the other records that “in the account sign-out you started, the shared profile record that all three apps use has not yet been confirmed as deleted in iCloud”. They carry this app’s own record number and attribution key, together with a derived value of the account coordinates used to locate that record in the private database; they contain neither your name nor your email address, and they do not contain, and do not point to, any media content of yours; the next run will try them again, and whether they get finished in that run depends on whether your own private iCloud database can be reached at that moment; if you sign back in and keep using that account before that run, the pending deletion is voided and this app will not retry it.

There is one more item in this device’s Keychain, a flag record that stays only on this device and never appears on your other devices through any synchronization: it records only whether this device itself has already written a flag for that shared profile record, its value is a single character, it contains none of your identity text, and it does not point to any media content of yours; it is not the same thing as the registration marker that exists, one per app, in your own private iCloud database. Whether each of the items above is cleared when you sign out of your account or uninstall this app is decided by this App’s clearance chain and by the system’s Keychain management, and this policy makes no item-by-item commitment.

How EncoX Uses Personal Data

We process data on your device only to the extent necessary to provide local playback and conversion features:

To deliver the feature: reading container and track information from your media files, performing the conversion, extracting text subtitle tracks that already exist in the source file and remuxing them into the output, performing on-device recognition of the text visible in the picture for image-based subtitles (for example, Blu-ray PGS) and re-outputting the recognized content as a text subtitle track (best-effort recognition: the recognized text may not match the original track exactly, and if a track yields nothing or the write does not succeed, that whole track is skipped), and generating thumbnails from video frames.

On-device computation: on a supported device the available hardware encoding capability is used first, and where necessary the work is handled by software encoding on the device; conversion tasks use the computing resources of the device you are using.

User-initiated export: when you use the system share sheet or file sharing on your own initiative, the media you selected is sent to the destination you chose — who receives it is entirely your decision. Three further paths are outside this app’s control: the location where your source files originally live (for example, iCloud Drive) follows that location’s own synchronization rules; the device’s system backup may also include data in the app’s storage area; and your profile, once iCloud is enabled, is synced by Apple through CloudKit, and it lands in your own iCloud private database. Processing media does not require us to receive your content. (Syncing those Keychain items and the profile requires no action from you; see the System and On-Device Capabilities section.)

Hardware Encoding and On-Device Processing

EncoX uses the hardware encoding capability of the device you are using first; when the relevant conditions are not met, software encoding on the device may be used instead. Which methods are actually available, how fast they run and what the conversion produces all depend on the device, the system and the media format.

File Parsing and Format Handling

For the media formats EncoX supports, file parsing, format conversion and output generation are performed on the device; where the source file is accessible on the device and the features you need are available, the processing can be completed offline.

How EncoX Shares Personal Data

Your media, subtitles, playback records and conversion queue are processed mainly by EncoX locally on the device; exporting on your own initiative, the device’s system backup, or a path such as iCloud Drive where the source file already lives can mean that the files concerned are handled by the third-party service you selected. Your account, entitlement and profile data, in turn, may be synced between your devices under Apple’s Keychain, sign-in and iCloud mechanisms; the categories concerned and what they are used for are set out in the relevant sections of this policy.

Media Processing Uses No Third-Party Processing Services

For media recognition, conversion and processing, EncoX does not send media content to any third-party processing service; this processing is done offline and locally on the device. If you use iOS’s system-level sharing (Share Sheet) or file sharing on your own initiative to send a file to a third-party app, such as a cloud drive or another device, that transfer is triggered by your choice and is not under EncoX’s control.

Media Processing Stays on the Device

Your media and business data is read and written by EncoX running on this device — the source files stay in the original location you chose, and the outputs and records this app generates are in the app’s own storage area; that storage area may be copied by the device’s system backup under Apple’s mechanism, and we neither receive this content nor can we read it. Your profile (display name, avatar, profile creation time and attribution key) is synced by Apple into your own iCloud private database when you enable iCloud, and it likewise does not reach our hands — we do not receive a copy of it either. Further items in your Keychain (the free-allowance counter, the opaque user identifier returned by Sign in with Apple, a marker recording that you have deliberately signed out, and a marker recording that this Apple Account of yours has already made a one-time membership purchase) are synced by Apple through iCloud Keychain between your own devices. We receive none of these items or of the profile copy, and we cannot read their contents; none of them contains, or points to, any media content.

Unsolicited Sensitive Data

When you ask for technical support, please try not to send private videos, home footage or sensitive attachments that the request does not call for. If you do submit material of that kind on your own initiative, we use it only to the extent necessary to handle the request, to keep the Service secure, to deal with a dispute or to meet a legal obligation, and we take appropriate protective measures for each actual category of it; the rights in your personal data that applicable law gives you are unaffected.

System and On-Device Capabilities

Two things genuinely happen on your device, and iOS system mechanisms are involved in both of them — it is not only EncoX acting.

System-generated and system-translated subtitles

EncoX plays video using Apple’s system video player. On supported devices and system versions, Apple’s system may use on-device models during playback to generate English subtitles from supported English audio, or to generate subtitles in other languages supported by the system from existing English subtitles; the specific devices, languages, regions and availability are as published by Apple at the time. That capability is provided and processed by the system: EncoX does not perform speech recognition or subtitle translation, does not control whether that system capability is available or is exercised by the system, and does not receive the subtitle results it produces. You can manage the related choices through the subtitle controls the system video player provides; how that system capability handles data is governed by Apple’s documentation, terms and privacy policy in effect at the time.

The free-allowance counter

The app reads and updates, in the Apple Keychain on this device, the cumulative integer used to check the free allowance and the markers necessary to represent the one-time purchase entitlement. The corresponding items may be synced by Apple’s iCloud Keychain between devices signed in with the same Apple Account; when synchronization is not enabled or has not yet completed, the records on different devices may differ. Deleting the app does not guarantee that the related Keychain records are cleared, and turning synchronization off does not undo the copies already saved on your other devices. A conversion is counted once, and only when it completes successfully: attempts that fail or that you cancel are not counted; a file that can already play directly is not a conversion — the app neither generates a second file for it nor counts it; starting a retry is not counted on its own, but the attempt that completes successfully after a retry does count against the free allowance; deleting an output that has already been generated does not restore the allowance already used. This number does not contain, and does not point to, any video, subtitle, file name or media library information. We cannot look up your conversion count either.

How EncoX Protects Personal Data

EncoX believes that strong privacy protection has to rest on excellent security. We rely on the security mechanisms that iOS itself provides to protect your data, and we continuously improve our own safeguards in order to reduce the risk of media content being accessed without authorization, lost or leaked.

The security measures we take include:

The outputs and on-device records generated by EncoX are kept inside the app sandbox and encrypted by the iOS system data protection mechanism; source files stay in their original locations; several Keychain items are protected by the iOS Keychain mechanism; and the synced profile is kept in your own iCloud private database and protected by Apple’s iCloud mechanism

Media content is processed on the device; transfers that happen because you export from the app on your own initiative, because of the device’s system backup, or because of the file storage service you chose follow the settings and rules of the channel concerned.

A media file is provided by the file at the location you chose; when you start a conversion, this app reads and processes that file on this device, and the source file remains under the management of the location where it was already kept.

Using the media conversion feature of this app is not conditioned on providing your name, email address or phone number; when you choose Sign in with Apple or write to us by email on your own initiative, the related account identifier and the contents of your message are handled respectively under the corresponding sections of this policy.

Boundaries for providing data externally

Your media content is stored in the location you chose and processed locally on the device, and it is not actually held by us, so we cannot directly provide a copy of it. We handle related requests on the basis of the information we actually hold, applicable law and valid legal process. Several items in the Keychain need to be distinguished here (the free-allowance counter, the opaque user identifier returned by Sign in with Apple, a marker recording that you have deliberately signed out, and the membership purchase credential): they are kept and synced by Apple under Apple’s policies, and they contain and point to no media content.

Children and Personal Data

EncoX is intended for users who meet the minimum age requirement, generally thirteen years of age or older. We protect personal information concerning minors in accordance with applicable law; where the law requires special notice, parental consent or other protective measures, we act in line with the requirement concerned.

Use by Minors

The profile feature of EncoX works through Sign in with Apple; the profile is created on the device and, once you enable iCloud and the relevant conditions are met, Apple syncs it into your own iCloud private database. When a minor who meets the minimum age requirement uses this app, the provisions of this policy on the profile and on the processing of personal information apply in the same way; whether a user is a minor, and the special protection requirements that apply, are still judged by the user’s age and the applicable law of where they live. Apart from the opaque user identifier Apple provides (kept in your own Keychain and possibly already synced to your other devices), this app processes locally on your device the display name and avatar you fill in (the initial value of the display name can come from the name you consent to share on Apple’s authorization panel), together with the playback progress, media library records and conversion allowance needed to provide the features; this information is handled as set out in the corresponding sections of this policy, and this app does not create a separate account profile for a minor who uses it. Parents can manage how apps are installed and used on the device with iOS Screen Time and Content & Privacy Restrictions.

EncoX does not process usage records for the purpose of building an age profile. A parent or guardian can set appropriate usage limits through the account and device management features Apple provides; where the law requires age to be established, parental consent to be confirmed or other special protective measures, we act in accordance with applicable law.

No Targeted Advertising

EncoX contains no advertising content aimed at children or adults, and does not build user profiles for advertising purposes.

Transfer of Personal Data Between Countries

EncoX does not send media content off your device in order to process media: conversion, media recognition and the reading and writing of on-device records all happen on the device; the profile (display name, avatar, profile creation time and attribution key) is also read and written on the device, and only when you enable iCloud does Apple’s synchronization mechanism move it into your own iCloud private database and sync it between your devices, and we receive no copy of it at any point along the way. The source-file location you chose, the device’s system backup, and the sharing features you use on your own initiative follow Apple’s rules and the rules of the service concerned, respectively; whether these involve cross-border transfers, and how they are handled, is not decided by this app and is not within this app’s capability. There are mainly four categories of Apple system service involved in the synchronization of accounts, purchases, the profile and the allowance: ① when you purchase an Opus membership, the transaction is completed by Apple through the App Store, the related payment and purchase information is managed by Apple under its own privacy policy, and we do not receive your payment credentials; ② the free-allowance counter (a single integer) is stored in your own iCloud Keychain and synced by Apple between your own devices — we do not receive it and we cannot read it; ③ authentication for Sign in with Apple is performed by Apple, and EncoX stores the opaque user identifier Apple returns in your own Keychain, with a marker recording that you have deliberately signed out (whose only value is “1”) in the same Keychain domain — Apple syncs the two between your devices under the same rules; the name you consent to share on Apple’s authorization panel is not in this Keychain entry — it comes back once, with the first authorization only, serves solely as the initial value of that display name field in the profile, and afterwards travels with the profile along its own private-database channel; ④ cross-device synchronization of the profile is carried by your own iCloud private database, and that private database belongs only to your own Apple Account: we neither receive its contents nor can we read them. None of the above contains any media content; how Apple handles the related data when providing these services is governed by Apple’s terms and privacy policy.

EncoX’s own processing — media conversion, media recognition and the reading and writing of on-device records — is performed locally on your device; purchases, signing in, Keychain synchronization, the profile’s iCloud synchronization and retrieving files from iCloud Drive are handled by the corresponding Apple system services.

Data Retention

EncoX retains data only for as long as the purpose of its features requires, and this “storage” happens on your device and, as for the profile, in your own private iCloud database, so the retention period is determined mainly by your own deletion actions, by the state of the device and by the timing of Apple’s synchronization; those items in the Keychain are handled as described in the corresponding sections of this policy, and the free-allowance counter and the membership purchase credential are not cleared automatically by signing out or by uninstalling. The sign-in diagnostics file on this device is handled as described in the “Zero-Tracking Commitment and Diagnostics” section of this policy: older content is cleared on the device according to the actual capacity limit, and there is no promise of automatic expiry after a fixed number of days. Support emails and attachments you send on your own initiative are handled for the period needed to answer the request and as legal retention requires; the standard is in the “Unsolicited Sensitive Data” section. You can delete specific movies or episodes, and you can also cancel in-progress conversion tasks; deleting an episode also clears the entries and the outputs that this app has recorded under it.

The media copies that this app saves after you import them, together with the diagnostic log directory, are excluded from the device’s system backup by this app’s settings. Whether other app data is included in the device’s system backup, and how long older copies are kept, are affected by the settings of your device and by the backup rules that apply from Apple. Uninstalling the app, or deleting data inside the app, is not the same as immediately clearing the system backup copies you already had before that. The profile sign-in identifier, the sign-out marker, the free allowance and the one-time purchase credential are each retained, or enter the deletion process, as this section provides. When the deletion finishes propagating through iCloud depends on Apple’s services and on the state of your device.

Local Storage Technologies

EncoX uses on-device local storage technologies to implement its core features.

Strictly Necessary Storage

EncoX keeps playback progress, the task queue, conversion outputs, intermediate files from processing and thumbnails on the device. Some of those temporary files may be affected by the system clearing cache; the other files are governed by deletion inside the app, by uninstalling and by the storage rules of the device. The profile and the Keychain records are synced and retained under different conditions; see this policy’s explanation of data retention and deletion.

Video Thumbnails

The thumbnails this app generates for the media list are kept in the app data on this device and are not temporary system cache; deleting them follows the actual clean-up process for the media record concerned and for the app data. Conversion can produce temporary or segmented files, some of which may be cleared by the system, so that a task that has not finished is interrupted; your source files and the finished outputs are managed at the locations where they are kept. As long as the video that row points to can still be read, the app captures another thumbnail in the background to replace it; your local records keep only that image’s file name and aspect ratio, the image itself is not written into those records, and these files do not reach your other devices through the app’s synchronization mechanism.

Our Companywide Commitment to Your Privacy

We communicate our privacy and information security requirements to the people involved in operating the product and in supporting users, and we apply access controls and internal management measures that fit their roles.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time and publish the updated version and its date of update inside the app. For changes to data processing that could substantially affect your rights, the full revised text and its “date of update” are shown on this page together with the app update. Where applicable law requires consent to be obtained again, we will obtain your valid consent separately before carrying out the processing concerned — continuing to use this app is not a substitute for that consent.

Contact Us

If you have any questions about exercising your privacy rights, please contact us at support@encox.app. You also have the right to lodge a complaint with the relevant supervisory authority.

We will reply as soon as possible after receiving your request. Where applicable law sets a deadline for replying to your request, we will reply within that deadline; if your request is complex or you submit a large number of requests and we need more time, we will tell you the reason and the new deadline.

Last updated: October 30, 2026