ACE Global Pro · ACE Aria Media Player

ACE Aria Media Player — Privacy Notice

Last updated: 7 November 2026
Privacy Notice version: ARIA-PRIVACY-2026-11-07

1. Who is responsible

ACE Global Pro Edtech Private Limited, CIN U85499KA2026PTC229657, registered at F1007 Mantri Alpyne, Dr Vishnuvardhana Road, Chikkalasandra, Bengaluru 560061, Karnataka, India ("ACE", "we", "us") provides ACE Aria Media Player ("Aria").

Privacy questions, requests and grievances: Nupoor Mohanty (Grievance Officer), grievance@aceglobalpro.com.

This notice separates information that stays on your Mac, information sent to ACE, and information your Mac sends directly to independent third parties.

2. Data that stays on your Mac

Aria stores the following locally:

• your library index, including file paths and available media tags;
• ratings, play counts, play history, bookmarks, resume positions, playlists, queues, radio and podcast entries, effects and preferences;
• files produced when you convert, trim or join media, or download a subtitle;
• Secure Vault data in the encrypted sparse bundle you choose;
• Secure Vault and secure-profile keys and passwords in the macOS Keychain;
• local media-server pairing tokens in the macOS Keychain;
• your trial start date in the macOS Keychain;
• your OpenSubtitles username in Aria's preferences and your OpenSubtitles session token in the Keychain, plus a record of which sign-in notice you agreed to and when;
• your ACE licence key, activation date and ACE-signed licence token in Aria's preferences;
• a record of which versions of the EULA, Product Schedule, Privacy Notice and Third-Party Notices you accepted or acknowledged, when, and in which version of Aria.

The licence key and ACE-signed licence token are kept in Aria's preferences (UserDefaults), not in the Keychain. Other users or processes with enough access to your macOS account may be able to read them.

Local information stays until you delete it, remove Aria's data, sign out, deactivate, delete a generated file, or erase the Mac. Deleting a Keychain item or vault password may make encrypted data permanently unrecoverable.

3. Your media files

Aria reads media in the folders you choose. It does not upload your media library to ACE.

Aria creates, copies, moves, replaces, archives or deletes files only through features and actions you select. Keep an independent backup before using conversion, trim, join, file-management or Secure Vault features.

4. ACE licence activation, refresh and deactivation

When you activate a paid licence, Aria sends to ACE:

• the licence key;
• a device hash: a SHA-256 value derived from the Mac's hardware identifier (IOPlatformUUID) and an Aria-specific fixed salt, or from a locally generated random identifier if that identifier cannot be read;
• a device label, which is the Mac's computer name (for example "Asha's MacBook Air");
• normal network information, including your IP address, date and time, and request metadata.

ACE uses this to validate the licence, enforce seat limits, show your activated devices, let you release a seat, prevent misuse, provide support, and keep licence and security records.

Aria refreshes its signed licence token before the token's thirty-day validity ends. A refresh sends the licence key and device hash; so does a deactivation. ACE returns a signed token, which Aria stores in its preferences.

If a token cannot be refreshed, Aria keeps working for the rest of the token's period plus a fourteen-day grace period before asking for activation again. The continuity commitment in the EULA applies to paid standalone licences.

The device hash is a persistent pseudonymous identifier, not anonymous data. The computer name may identify you or include your name.

5. Update checks and downloads

Aria uses Sparkle to check ACE's update feed automatically, ordinarily once every twenty-four hours, and whenever you choose Check for Updates. You can turn automatic checks off in Settings. Aria does not check for updates before you have accepted the EULA.

An update check may disclose to ACE's website host your IP address, the Aria name and version (in Sparkle's User-Agent), and the request time and ordinary connection metadata. Aria does not turn on Sparkle's optional system-profile reporting.

If you accept an update, Sparkle downloads it from the address in the feed and checks its signature before installing it. The download host receives ordinary connection information such as your IP address and request headers.

ACE's website and update feed are hosted by Netlify, which receives these requests and keeps its own operational logs.

6. OpenSubtitles

OpenSubtitles is optional. If you do not sign in or search for subtitles, Aria sends no OpenSubtitles account or search data.

When you choose to sign in, and after you tick the consent box shown with the sign-in fields, Aria sends directly to api.opensubtitles.com over HTTPS:

• Aria's application API key and an Aria User-Agent;
• the OpenSubtitles username and password you enter;
• your IP address and ordinary request metadata.

ACE does not receive your OpenSubtitles password on an ACE server. Aria does not store the password. OpenSubtitles returns a session token, which Aria stores in your macOS Keychain; your username is stored in Aria's preferences. When you are signed in, Aria may use the token to ask OpenSubtitles how many downloads you have left.

When you press Search, Aria sends:

• the search title, which you can edit and which Aria first derives from the video filename;
• the selected subtitle language;
• where it can be computed, an OpenSubtitles media hash derived from portions of the media file;
• the application API key and Aria User-Agent, and your session token if you are signed in;
• your IP address and ordinary request metadata.

The media file itself is not uploaded by a search.

When you choose a result, Aria sends its file identifier, receives a temporary download link, and downloads the subtitle. The subtitle is saved beside the media where that folder is writable, or otherwise in Aria's converted-files folder, and stays on your device unless you move or delete it.

OpenSubtitles is an independent service and processes this information under its own terms and privacy policy, available at opensubtitles.com.

Subtitles provided by OpenSubtitles.com.

7. FFmpeg and ffprobe

Only when you choose Install in Tools does Aria request the FFmpeg and ffprobe archives from the independent build host ffmpeg.martin-riedl.de. Aria installs them only if each archive matches the exact size and SHA-256 checksum Aria expects for that version.

The build host receives your IP address, the time, the requested file and architecture, and ordinary request headers. Aria stores the unpacked tools in its own support folder. The build host is independent of ACE and governed by its own terms and privacy practices.

8. Internet radio, HLS and podcasts

When you play an internet radio station, HLS stream, podcast or other network source, your Mac connects to the address you chose or imported. Its operator and infrastructure may receive your IP address, the request time, the address requested, the request headers sent by macOS's media frameworks, and other protocol information.

ACE does not receive that stream because Aria plays it. The operator's own privacy terms apply.

9. Local media server

Local serving is off by default. If you enable it, Aria listens for paired devices on your local network. Pairing tokens are stored in the macOS Keychain. Aria does not configure UPnP or router port forwarding.

Local-serving traffic may be plain HTTP. People and devices that can observe an untrusted local network may be able to observe it. Use the feature only on a trusted network or through a separately secured private network you control. Tailscale, if you use it, is a separate service governed by its own terms and privacy policy.

Secure Vault content and secure folders are excluded from local serving.

10. Secure Vault and device authentication

Secure Vault uses a macOS AES-256 encrypted sparse bundle on a disk you choose. Its locally generated password is stored in the macOS Keychain. Secure-profile metadata is encrypted with AES-GCM using a key kept in the Keychain.

Touch ID and device authentication are handled by Apple's LocalAuthentication framework. Aria receives a success or failure result and never receives fingerprint data.

ACE has no recovery copy or back door. If you lose the necessary password and Keychain access, ACE cannot decrypt the vault.

11. Links you open

Help, About, Settings, notices and support screens offer links to ACE, FFmpeg, OpenSubtitles, Tailscale, GitHub and other sites. A link opens in your browser; your browser and the destination decide what is sent.

12. Album artwork

Aria does not look up album artwork online and does not contact Apple's iTunes Search API. It shows only artwork embedded in your files. When this version first starts, it deletes any album covers that earlier versions downloaded.

13. Analytics, advertising and crash reporting

Aria contains no ACE analytics, advertising, behavioural-tracking or crash-reporting component.

ACE does receive the licence and update requests described above. Third-party services may keep their own operational or security logs.

14. Purposes

ACE processes licence and device information to provide and secure the purchased licence, enforce seats, maintain your permanent entitlement, deliver updates, respond to support and legal requests, prevent fraud, and meet accounting and security obligations.

OpenSubtitles sign-in and searches happen only when you start them, to provide the subtitle function you asked for. You may decline; the rest of Aria keeps working.

15. Retention

• Local Aria data stays until you delete it or remove Aria's local data.
• ACE keeps purchase, licence and activation records, including entries for Macs whose seats were released, for as long as reasonably necessary to provide and prove your perpetual licence and to meet legal, accounting, fraud-prevention and dispute obligations.
• Server and security logs are kept for as long as needed for security and operations, and for any longer period the law requires.
• Payment and invoice records are kept for the period required by tax, company, payment and accounting law.

16. Disclosures and service providers

ACE may disclose relevant information to:

• hosting, website, payment, e-mail, support, security and professional service providers acting for ACE;
• government, regulatory, law-enforcement or judicial bodies where required or lawfully authorised;
• a successor to the Aria business that takes on the applicable obligations.

ACE does not sell Aria licence or device data.

OpenSubtitles, the FFmpeg build host, radio and podcast operators, and sites you open are independent recipients when your Mac communicates with them directly.

17. Location and transfers

ACE's licence service runs on Google Cloud in Mumbai, India. Netlify, Razorpay, e-mail providers, OpenSubtitles, the FFmpeg build host, stream providers and their subprocessors may process data outside India.

18. Security

ACE uses HTTPS for licence and update connections, signed licence tokens, signed update archives, and access controls proportionate to the information.

No system is risk-free. Protect your macOS account, enable device security, keep backups, keep Aria and macOS updated, use a trusted network, and look after your licence and recovery information.

19. Your choices and requests

Depending on applicable law, you may ask ACE to provide, review or correct personal information ACE holds, raise a grievance, or withdraw consent for optional processing. Withdrawal may make the relevant optional feature unavailable and does not require deletion where retention is legally required or needed to establish a purchased entitlement.

You may:

• change the Mac's computer name before activation;
• deactivate a Mac;
• sign out of OpenSubtitles, which deletes the local username and session token;
• decline subtitle sign-in and search;
• turn off automatic update checks in Settings;
• turn off local serving and delete pairings;
• delete local library, history and preferences, bearing in mind the warnings about vault keys and encrypted data.

Send requests to support@aceglobalpro.com.

20. Children

Aria is not marketed to children. A person under eighteen must not purchase or activate a paid licence.

21. Changes

ACE will update the date and version when this notice changes. Materially new processing will not begin without the notice or consent required by law. The notice for each released version is kept on record.

22. Contact

ACE Global Pro Edtech Private Limited
F1007 Mantri Alpyne, Dr Vishnuvardhana Road, Chikkalasandra
Bengaluru 560061, Karnataka, India
CIN U85499KA2026PTC229657
Support: support@aceglobalpro.com
Grievance Officer: Nupoor Mohanty, grievance@aceglobalpro.com