Privacy Policy
Last updated: November 1, 2026
Tiviplay is a video player for iPhone, iPad and Apple TV. Tiviplay does not provide any channels, movies or series: the app only plays sources you add yourself (IPTV playlist, Jellyfin, Emby or Plex server, network folder). This page explains what data is used, why, and how to delete it.
- No ads, no tracking, no selling of data.
- Your account is only used to sync your profiles, playlists and progress across your devices.
- Your playlist passwords are encrypted before being stored in your account.
- You can delete your account and all your data from within the app at any time.
1. Data controller
[Publisher or company name, address]
Contact: contact@tiviplay.app
2. Data stored in your account
When you create a Tiviplay account, the following data is stored on Google Firebase servers located in the European Union:
| Data | Why |
|---|---|
| Account email and password (the password is handled by Firebase Authentication and is never readable by us) | Signing in on your devices |
| Profiles (name, color, current playlist) | Finding your profiles everywhere |
| Playlists: name, type, server address, username, "enabled" checkbox | Finding your playlists without typing them again |
| Playlist password or link, encrypted by our server before being stored | Same, without ever storing it in clear text |
| Watch progress and favorites, per profile | Resuming a video on another device |
| Trakt connection (encrypted tokens), if you enable it | Syncing your Trakt history |
| Account creation date, last sign-in, device type (iPhone or Apple TV) | Account operation and security |
Without an account, this data stays on your device only.
3. Data that stays on your device
Your playlists' catalog, cached images, recent channels, your settings, and the parental control code (only its encrypted fingerprint is kept, in the device keychain) never leave your device.
4. Crash reports and anonymous statistics
If the app crashes, a technical report (device model, system and app version, error trace) is sent to Firebase Crashlytics so we can fix the problem. It contains neither your email nor your playlists.
The app also sends a few anonymous statistics: device type, app version, kinds of sources used (for example "Xtream" or "Plex"), number of tabs opened and of successful or failed playbacks. These are simple counters added up on our server: they contain no identifier, no email, and no title, channel name or address. They are deleted after 13 months. You can turn them off in Settings > Share anonymous statistics. No advertising tools are used.
4a. Emails
We send you an email to confirm your address when you sign up, a welcome email, an email if you ask for a new password, and a confirmation email when your account is deleted. These emails are sent by Firebase Authentication and by Resend, our email provider. No newsletters or advertising.
5. Third-party services contacted by the app
To work, the app connects directly to the following services. Like any Internet connection, they receive your IP address:
- Your own sources (IPTV provider, Jellyfin, Emby or Plex server, network folder, Seerr server), with the credentials you entered, to play your videos. We have no relationship with these services.
- The Movie Database (TMDB): titles of the movies and series in your catalog, to show posters, summaries and trends.
- Plex.tv: only if you connect a Plex account.
- Trakt: only if you connect a Trakt account.
- TheSportsDB (through our server), ESPN and Jolpica: sports schedules and results, without any personal data.
- Wikipedia / Wikidata: actor biographies.
- Google Cast: only if you send a video to a Chromecast.
6. What we don't do
- We don't sell or share your data for advertising.
- We don't track your activity across other apps or websites (no tracking as defined by Apple).
- We don't look at the content of your playlists.
7. Retention and deletion
Your data is kept as long as your account exists. You can delete your account at any time from Settings > Account > Delete my account: your account, profiles, playlists, progress and favorites are then permanently erased from our servers. Crash reports are deleted automatically by Crashlytics after 90 days.
8. Your rights
Under the GDPR, you can access, correct or delete your data, ask for a copy, or object to its processing by writing to contact@tiviplay.app. You can also file a complaint with your data protection authority.
9. Children
Tiviplay is not specifically intended for children. Parental controls can hide adult categories and lock some categories with a code.
10. Changes
This policy may change. The update date is shown at the top of this page; for significant changes, you will be notified in the app.