Privacy Policy — IPTV Player

IPTV Player is a general-purpose media player and playlist organizer. It plays back M3U/M3U8 playlists and Xtream Codes connections that you supply yourself. The App does not host, provide, sell, curate, or endorse any streaming content, and ships with no channels or playlists included.

2.1 Account information

You may use the App as a Guest (anonymous, local-only) or sign in with Google, Apple, or email/password. If you sign in, we receive the basic profile information your chosen provider shares (such as your email address and display name) via Firebase Authentication. Guest accounts are anonymous and store no personal profile information.

2.2 Playlists and settings

Playlist metadata (name, source URL or type, EPG URL, channel counts) and app settings are stored locally on your device. If you are signed in and a Premium subscriber, this metadata is also synced to our cloud database (Firebase Firestore) so it can be restored on another device. Actual channel/stream data is never uploaded — only the playlist's own source is synced, and channels are re-fetched directly from that source on each device.

2.3 Xtream Codes credentials

If you add a playlist via Xtream Codes, your server address, username, and password are stored only in your device's secure, encrypted storage (Android Keystore / iOS Keychain). These credentials are never uploaded to our servers, never included in cloud sync, and never included in local backup exports.

2.4 Favorites and community recommendations

When you favorite a channel while signed in, the App may record an anonymous, one-way cryptographic hash of that channel's identity and its provider, associated with your account, to compute an aggregate popularity count shown to other users of the same provider. Actual stream URLs, playlist credentials, and channel names are never uploaded as part of this feature — only irreversible hashes and a total count. Un-favoriting a channel removes your vote, and deleting your account removes all of your community votes.

2.5 Diagnostics and crash reports

We use Firebase Crashlytics to automatically collect crash reports and error diagnostics (such as stack traces and basic device information) to help us find and fix bugs. This data is not linked to your identity beyond an internal installation identifier.

2.6 Advertising

The free version of the App shows ads served by Google AdMob. AdMob may use advertising identifiers (such as your Android Advertising ID or Apple's IDFA) to serve ads, which may be personalized based on your consent choices. Where required (including the EEA, UK, and other applicable regions), we request your consent before showing personalized ads via Google's User Messaging Platform, and on iOS we request App Tracking Transparency authorization before accessing your IDFA. You can review or change your ad consent choices at any time from Settings. Premium subscribers do not see ads.

2.7 Purchases

Premium subscriptions are billed through Google Play or the Apple App Store. We never see or store your payment card details — purchases are handled entirely by Google's and Apple's own billing systems under their respective privacy policies.

2.8 Microphone (voice search)

If you use voice search, the App accesses your microphone and processes your speech into text using your device's platform speech recognition service. Audio is used only to fulfill your search request and is not stored by us.

• To operate core App features (playback, playlist management, search, favorites, EPG)
• To sync your playlists and settings across your own devices (Premium, signed-in users only)
• To authenticate your account and enable cloud backup/restore
• To display community channel popularity within the same provider
• To diagnose crashes and improve App stability
• To serve and measure advertising (free tier)
• To process and validate subscription purchases
• To respond to support requests

The App uses the following third-party services, each governed by its own privacy policy:

• Google Firebase (Authentication, Firestore, Crashlytics, Functions)
• Google AdMob
• Google Sign-In / Sign in with Apple
• Google Play Billing / Apple In-App Purchase
• Google Cast (if you use the Cast feature)

Any playlist, stream, or Xtream account you add to the App comes from a source of your own choosing. We have no visibility into, and no control over, the content those third-party sources provide. You are solely responsible for ensuring you have the legal right to access any content you add.

The App is not directed at children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us using the details below and we will delete it.

• Access/export: Use Settings > Backup & Restore to export your playlist and settings data at any time.
• Delete your account: Use Settings > Account > Delete Account to permanently delete your account and associated cloud data. Data stored only locally on your device is removed by uninstalling the App or clearing its storage. See our Account Deletion page for full details.
• Advertising choices: Manage your ad consent/personalization choices from Settings, or via your device's ad settings (Android: Settings > Privacy > Ads; iOS: Settings > Privacy > Tracking).
• Regional rights: Depending on where you live, you may have additional rights under laws such as the GDPR (EEA/UK) or state privacy laws (e.g. CCPA/CPRA in California), including the right to access, correct, or delete your personal information, and to opt out of certain data uses. Contact us to exercise these rights.

We retain account and synced data for as long as your account is active, or as needed to provide the App's features. You can request deletion at any time as described in Section 7. Local, on-device data persists until you clear it yourself.

Our third-party service providers (including Firebase/Google Cloud) may process and store data on servers located outside your country of residence. These providers maintain their own safeguards for international data transfers.

We use reasonable technical measures to protect your information, including encrypted on-device storage for sensitive credentials like Xtream Codes passwords. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

Questions about this Privacy Policy or your data can be sent to:

support@microworkjobs.com