IPTVMP Privacy Policy

Last updated: 2026-10-25

IPTVMP ("the app") is a personal, non-commercial IPTV player for Android phones and Android TV, developed by Ricardo Branco as a hobby project to explore Android technologies. This policy explains what data the app handles, where it goes, and what choices you have.

IPTVMP provides no channels, playlists or other content. It plays only the sources you add yourself. Use it only with services and streams you are authorised to access.

Who is responsible

The data controller is Ricardo Branco, Portugal, reachable at iptvmp@ricardobranco.dev.

Summary

• Your sources (provider URL, username, password, playlist URL), channel lists, programme guide, favourites, lists and preferences are stored only on your device. The database holding them is excluded from Android cloud backups and device-to-device transfers.
• The app talks to your IPTV provider, to iptv-org (channel names and logos), to the websites hosting channel logos, and to Google (Firebase Analytics, Firebase Crashlytics and, on phones, Google Cast).
• The developer hosts only a static website, a Cast receiver page and a fictional demo source on Cloudflare at iptvmp.ricardobranco.dev. The app does not send your sources or credentials there.
• No ads, no ad networks and no advertising identifiers.

What data the app handles

Stored on your device

• Provider URL, username and password, or M3U playlist URL, and optional EPG URL that you enter.
• Channel lists, programme guide (EPG), favourites, your own lists and recently watched channels.
• App preferences (theme, player settings, and so on).

Uninstalling the app deletes this data. App preferences may be included in your Android backup; your sources and credentials are not.

Sent to your IPTV provider

To load channels, the programme guide and streams, the app contacts the server you entered, using the credentials you entered. Many providers put the username and password inside their stream and API addresses, and some only offer unencrypted (http) connections, in which case these travel unencrypted. The provider sees your IP address, the app's User-Agent and your activity within their service. This data flow is between you and your provider.

Sent to iptv-org and to logo hosts

To show channel names, logos and categories, the app downloads public metadata from the iptv-org project (iptv-org.github.io, hosted by GitHub) and loads logo images from the websites that host them (for example upload.wikimedia.org). These requests contain no credentials or channel lists, but each host receives your IP address and the app's User-Agent, which identifies the app, its version and your Android version. Logos are trademarks of their respective owners.

Sent to Google: Firebase Analytics

• App usage events such as screen views and app opens.
• A randomly generated app-instance identifier. It is not linked to your name or email, but it is pseudonymous personal data under the GDPR.
• Device information (model, Android version, language, approximate country derived from your IP address).

The app does not log custom events containing your sources, channels or credentials. Google retains this data for up to 14 months. See Firebase privacy information.

Sent to Google: Firebase Crashlytics

• Crash reports with stack traces, device model, Android version, app version and a randomly generated installation identifier.
• The app is written so that error messages and logs do not include your provider addresses or credentials; reports are used only to diagnose bugs.

Sent to Google: Cast (phones only, only when you cast)

When you cast, the address of the stream being played is sent to your Cast device through Google Cast services, together with basic playback state. If your provider puts your username and password in its stream addresses, these are part of that address. The Cast device loads a receiver page from iptvmp.ricardobranco.dev and plays the stream directly from your provider.

What data is not collected

• No name, email address, phone number or account: the app has no sign-up.
• No precise location, contacts, photos, microphone or camera access.
• No advertising identifiers, ad networks or ad SDKs.
• No data is sold or shared for marketing.

Permissions

• Internet and network state: to reach your provider, iptv-org, logo hosts and Google services.
• Nearby Wi-Fi devices (phones, Android 13+): to discover Cast devices on your network. It is not used to derive your location.
• Foreground service and wake lock (phones): declared by the Google Cast SDK and Google libraries, used while a Cast session is active.
• Install referrer: added by Firebase Analytics to record how the app was installed (for example, from Google Play).

Legal basis and international transfers

Analytics and crash reports are processed on the basis of the developer's legitimate interest in keeping the app working and understanding how it is used. Google may process this data outside the European Union, including in the United States, under the EU-US Data Privacy Framework and Standard Contractual Clauses.

Your rights and choices

• Under the GDPR you have the right to access, rectify, erase and restrict processing of your data, to object to processing, and to data portability. Contact the address below to exercise them. Because the developer receives no data that identifies you directly, you may need to provide your Firebase installation identifier.
• You can complain to a data protection authority, in Portugal the Comissão Nacional de Proteção de Dados (CNPD).
• The app does not yet have in-app switches for analytics and crash reports; uninstalling the app stops all collection.
• Deleting a source in the app, or uninstalling it, removes your locally stored data. For data held by your IPTV provider, contact the provider.

Children

IPTVMP is intended for users aged 18 and over and does not knowingly process data from children.

Changes to this policy

This policy is updated when the app changes. The date at the top shows the latest revision; significant changes are mentioned in the app's release notes.

Contact

For privacy questions, email iptvmp@ricardobranco.dev.