IPTV Player: Stream Live TV — Privacy Policy

Effective Date: September 14, 2026

IPTV Player: Stream Live TV ("the App") is developed by Mobile Card Games & Travel Apps LLC. This Privacy Policy covers both the iOS version of the App on the Apple App Store and the Android version on Google Play. It explains what data the App collects, how it is used, and how your privacy is protected.

1. Data We Collect

The App works without an account — you never give us your name, email, or any contact information, and the App sends no analytics, no ads, and no tracking data to anyone. We do not provide any TV channels or streams; you connect the App to a playlist or service you already have. What little data exists stays on your device:

• Your playlists: the M3U playlist URLs, playlist files you import, Xtream Codes server addresses, and usernames you enter are stored locally on your device. Xtream passwords are kept in the device's encrypted credential store — the Keychain on iOS, and on Android encrypted with a key held in the Android Keystore that never leaves your device. They are never written to ordinary files or sent to us.
• Your viewing preferences: favorites, recently watched channels, settings, and a cached copy of your provider's TV guide are stored locally.
• Parental lock PIN: if you enable the parental lock, the PIN is stored on your device as a one-way hash; we cannot read it.
• Purchase information: in-app purchases are processed by Apple on iOS and by Google Play on Android; we never see your payment details.

On Android, the advertising-identifier permission is explicitly removed from the App, so it cannot read your advertising ID at all. We operate no servers, and the App sends nothing to any backend of ours.

2. Streaming and Your IPTV Provider

When you play a channel, load a TV guide (EPG), or view channel logos, the App connects directly from your device to the playlist or Xtream service you configured. Your requests, including your IP address and your Xtream username and password, go to that provider's servers — not to us, and not through any relay we operate. What your IPTV provider does with connection data is governed by that provider's own privacy policy. We operate no servers, cannot see what you watch, and hold no copy of your playlists or viewing activity.

The App also includes a few sample channels so you can try it before adding a playlist. Playing one connects your device to the public demo server that hosts that stream, in the same direct way.

Video is decoded on your device by open-source players — the VLC engine (VLCKit) on iOS, and ExoPlayer (Google's Media3 library) or the VLC engine (libVLC) on Android. None of them collects data.

3. Local Network Access

If your playlist points at a device on your home network (such as a tuner, server, or NAS), the App connects to it just like any other stream. On iOS, the system asks for Local Network permission first; this permission is used only to play those streams, nothing is collected, and you can deny it and still use internet-based playlists normally. Android requires no separate permission for this, and the Android App requests no runtime permissions at all.

4. Third-Party Data Sharing

The App shares nothing about you with third parties beyond what these services require to function:

• Apple (iOS only; privacy policy): processes in-app purchases via StoreKit and syncs a small amount of app data through your iCloud account (see below).
• Google (Android only; privacy policy): processes in-app purchases through Google Play. If you have Android's automatic backup turned on, Google also keeps the App's backup in your Google account (see below).
• RevenueCat (privacy policy): validates purchases. It receives purchase/transaction tokens from Apple or Google Play and a random anonymous app-user ID — never your name, email, playlists, or viewing activity.
• Your IPTV provider: receives your connection requests directly, as described above. We choose no providers for you and share nothing with them.

If you choose to contact support from inside the App, the pre-filled email includes the App version, your device model, and your operating-system version to help us troubleshoot. You can edit it before sending, and it goes only to our support inbox.

We do not sell your data. There are no advertising or analytics SDKs in the App on either platform.

5. Data Storage and Retention

• On your device: playlists, favorites, recents, settings, the TV guide cache, and the parental-lock PIN hash are stored in the App's private storage; Xtream passwords live in the iOS Keychain or, on Android, in Keystore-encrypted storage.
• In your iCloud account (iOS): your favorites and a small purchase-state flag sync across your Apple devices via iCloud key-value storage tied to your Apple ID, so your favorites and purchases follow you between devices; we cannot access it.
• Android backup: the Android App does not sync favorites between devices. If you have Android's automatic backup turned on, the App's local data may be included in the encrypted backup Google keeps in your Google account; we cannot access it. The key that encrypts your Xtream passwords never leaves the device, so passwords cannot be read from a backup and must be entered again on a new device.
• We operate no servers of our own and hold no copy of your data.
• Deletion: you can delete any playlist in the App at any time (its stored password is removed with it), and uninstalling the App removes all locally stored data.

6. Data Security

Xtream passwords are protected by the iOS Keychain on iPhone and iPad, and by Android Keystore encryption with a key that never leaves your device on Android. Connections to your IPTV provider use whatever address you configured; many providers only offer plain HTTP, so we recommend HTTPS URLs where your provider offers them. Communication with Apple, Google Play, and RevenueCat takes place over encrypted HTTPS. Since the App collects no name, email, or account credentials of its own, there is no such data to secure or breach on our side.

7. Your Rights

You can:

• Delete individual playlists (and their stored credentials) in the App at any time.
• On iOS, deny or revoke Local Network permission in iOS Settings; internet playlists keep working. The Android App requests no permissions you need to manage.
• On Android, turn off automatic app backup in your device's Google backup settings if you do not want the App's data included.
• Remove all locally stored data by uninstalling the App.

Depending on where you live, privacy laws such as the European Union's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) give you rights over your personal data, including the rights to know, access, correct, and delete it. Because we do not hold your data on servers we operate, there is typically nothing for us to access or delete on request — deleting the App deletes your data. Where the App does process data in transit, or a third-party service described above collects data, you may contact us at the email below to exercise your rights, and we will respond as required by applicable law.

8. Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect data from children under 13. In some regions, including the European Union, a higher minimum age applies to consent for data processing; the same statement applies there — we do not knowingly collect data from anyone under the applicable age.

9. Data Breach Notification

In the unlikely event of a data breach affecting user data on any system we operate, we will notify affected users as required by applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Effective Date" at the top of this page.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

v5cqpsj4e3u4@opayq.com