Privacy Policy

The short version

• StreamVault IPTV Player is a player for TV playlists you add yourself. We don't provide, host or sell any TV content.
• We don't sell your data, show ads, or use advertising or analytics trackers.
• Your provider logins are encrypted, and you can download or delete your data at any time from the app.

Information we collect

• Account: your name and email address. If you use a password, we store only a secure hash of it. If you sign in with Google or Apple, we receive an identifier and the email address they share. If you use a passkey, we store only its public key.
• Playlists you add: playlist names, the playlist address (M3U link or Xtream Codes server) and the login for it. These logins are encrypted on our servers and never sent back to your devices. We also store the channel list loaded from each playlist.
• Your library: favourites, watch history (the channels you opened and when) and recordings you request.
• Parental controls: a secure hash of your parental PIN and your lock/hide rules.
• Devices: the name, type and platform of devices you use, their IP address at registration and when they were last active, to enforce your plan's device limit.
• Purchases: the store (App Store or Google Play), product, dates and a transaction identifier. We never receive your card or bank details.
• Technical logs: IP address, requested page (without query details), time and errors, used to keep the service secure and working.

Some data stays only on your device and is never sent to us: downloaded movies and recordings, app lock and screen-time settings, and Face ID / fingerprint data (handled entirely by your device's operating system).

How we use it

• To provide the service: sign you in, load your channels, play streams, sync your library across devices and record channels you ask us to record.
• To process your subscription and apply your plan's limits.
• To keep the service secure: prevent abuse, fraud and unauthorised access.
• To answer your support requests.

When you play a channel, our server connects to your provider on your behalf and passes the stream to your device. We don't analyse what you watch beyond the watch history shown to you in the app.

Legal bases (EEA / UK)

We process your data to perform our contract with you (providing the service and your subscription), for our legitimate interests in keeping the service secure, and to meet legal obligations (for example, tax records of purchases).

Who we share it with

• Service providers that host and run our servers and database, under contracts that require them to protect your data and use it only on our instructions.
• Apple and Google, when you sign in with them or buy through their stores.
• Your TV provider: our server contacts the playlist and stream addresses you add, so your provider sees our server's address.
• Authorities, only when required by law.

We do not sell or rent your personal data.

How long we keep it

• Account data, playlists and your library: until you delete them or your account.
• Server copies of recordings: until downloaded to your device, and no longer than 48 hours.
• TV sign-in codes: 10 minutes.
• Technical logs: up to 30 days.
• Purchase records: as long as tax and accounting law requires.

When you delete your account, your data is removed from our live systems immediately, and from backups within 30 days.

Your rights and choices

• Download your data: Settings → Account & data → Download my data.
• Delete your account: Settings → Account & data → Delete account, or on the web at https://streamvault.clickanddeliverllc.com/delete-account.
• Correct or delete individual playlists, favourites and history in the app.
• Depending on where you live, you may also have the right to object to or restrict processing, and to complain to your data-protection authority.

Deleting your account doesn't cancel an App Store or Google Play subscription; cancel it in your store account settings.

Children

StreamVault IPTV Player is not directed at children under 13 (or the minimum age in your country). Account holders must be adults; parental controls let them protect what children can watch on their devices.

Security

Connections to our servers are encrypted (HTTPS). Provider logins are encrypted at rest, passwords and PINs are stored only as secure hashes, sign-in attempts are rate-limited, and purchases are verified with Apple and Google on our server.

International transfers

Our servers may be located outside your country. Where required, we use safeguards such as the European Commission's Standard Contractual Clauses.

Changes

We'll post any changes here and update the effective date. For significant changes we'll notify you in the app.

Contact

Click and Deliver LLC, 5900 Balcones Dr Ste 5214, Austin, TX 78731-4257, United States. Email: clickcollect99@gmail.com.