Privacy Policy
AAAstreamz ("the app") is a media player for TV devices. It plays streams from an IPTV provider that you choose and log in to. We don't provide, host or sell any channels or content, and you don't create an account with us. This policy explains what information the app uses, where it goes, and why.
The short version
- Your provider login (server, username, password or playlist link) is stored only on your device and sent only to your provider.
- We receive crash reports and, if you send one, a problem report. Neither includes your username or password.
- No ads, no advertising IDs, and we never sell or rent your information.
Information stored on your device
These stay on your TV box and are never sent to us: your provider login details, favorites, your channel folders, recently watched channels, playback positions, hidden channels and categories, your parental-control PIN, your settings, and any recordings you make. Uninstalling the app deletes all of it.
Information sent to your IPTV provider
To show channels, guides, movies and series and to play them, the app connects to the provider you logged in to. That provider receives your login details and your device's IP address, as with any IPTV player. How your provider handles that is covered by their privacy policy, not this one.
Information we receive
Crash reports
If the app crashes, it sends a crash report through Firebase Crashlytics (a Google service). A report includes the app version, device model, Android version, technical details of the crash, and a random installation identifier. We use it only to find and fix bugs.
"Report a problem"
Only when you choose Settings › About › Report a problem, the app sends us, through Firebase Crashlytics:
- Your note, if you write one
- The app version, your device model, and your app settings (decoder, buffer size and the like)
- Your provider's server address (not your username or password)
- A short log of what the app did recently, with your username and password removed
You get a report number so we can match your report if you contact us.
"Request a feature"
Only when you choose Settings › About › Request a feature, the app sends us your idea through Firebase Crashlytics, along with the app version, your device model, the layout you use and your account type (provider login or playlist link). It never includes your login details.
App configuration and updates
When the app starts, it checks Firebase Remote Config (Google) for settings such as whether a new version is available. Google receives the standard technical information needed for that request, such as an installation identifier and your IP address. Updates are downloaded from GitHub (github.com), which sees your IP address when the file is downloaded.
Finding your provider's server when DNS fails
If your device can't look up your provider's server address (for example because a VPN's blocker blocks it), the app asks a public DNS service instead: Cloudflare (1.1.1.1), then Google (8.8.8.8), over an encrypted connection. They receive the server name being looked up and your IP address. This only happens when the normal lookup fails.
Optional features that contact other services
- Speed test (only when you run it): the app downloads test data from your provider and from Cloudflare's public speed-test server (speed.cloudflare.com), which sees your IP address. The result is kept in the app's log and is included only if you send a problem report.
- AI search in Ask (off by default): if you turn it on and enter your own Anthropic API key, your search text and a list of programmes currently airing are sent to Anthropic (api.anthropic.com) under your key and your Anthropic account. We never see your key or your searches. The free built-in search doesn't send anything anywhere.
- Voice typing is handled by your device's keyboard (for example Gboard) under that keyboard's own privacy policy. The app only receives the finished text.
- Phone remote and logging in from your phone work only over your home Wi-Fi, between your phone and your TV box. Login details you type on the phone go straight to the TV and then only to your provider. Nothing goes over the internet or to us.
- Backup & restore (only when you use it): the backup file holds your playlists (including your provider logins), settings and favorites. It goes directly between your TV box and your phone over your home Wi-Fi and is saved on your phone. It never goes over the internet or to us, so keep the file private.
- Saving recordings to your own server (only if you set it up): finished recordings, with a small info file (show title, channel and times), are copied to the shared folder on your own PC or NAS, or the WebDAV server, that you choose (such as your own Ultra.cc service or Nextcloud), and played back from there. That login is kept only on your TV box, is sent only to that PC, NAS or server, and isn't included in backups. If you type it on your phone, it goes from the phone to the TV over your home Wi-Fi. Nothing about your recordings goes to us.
Who we share information with
Only the service providers named above (Google Firebase, GitHub, Cloudflare, Google public DNS when needed, and Anthropic if you turn on AI search), and only for the purposes described. We don't sell, rent or trade personal information, and we don't use it for advertising.
How long we keep it
Crash and problem reports are kept by Firebase Crashlytics for up to 90 days and then deleted automatically.
Children
The app isn't directed at children under 13, and we don't knowingly collect personal information from children. Parental controls are available in Settings to lock categories behind a PIN.
Your choices
- Don't use "Report a problem", "Request a feature", the speed test or AI search if you don't want that information sent.
- Uninstall the app to delete everything stored on your device.
- To ask about, or request deletion of, a report you sent, contact us with your report number.
Changes
If this policy changes, we'll update the date at the top of this page.
Contact
Questions? Email aaastreamz@gmail.com.