Privacy Policy

Effective Date: June 1, 2026 Last Updated: June 24, 2026 Application: PrvITV ("the App") Publisher: domadore ("we", "us", "our") Contact: domadore.cuki@gmail.com

1. Summary

PrvITV is a generic media player application that connects to IPTV services you already subscribe to. We do not operate any streaming service, do not host any content, and do not transmit your data to our servers.

This Privacy Policy explains, in plain language, what PrvITV does and does not collect, and what your rights are under the General Data Protection Regulation (GDPR), the Croatian Personal Data Protection Act, and applicable consumer protection laws.

2. Information We Do NOT Collect

We want to be explicit about this because it is unusual for a modern app:

• No analytics. We do not use Google Analytics, Firebase Analytics, Mixpanel, Amplitude, or any equivalent tracking service.
• No advertising SDKs. The App contains no ads, no ad tracking, and no advertising identifiers (IDFA, AAID).
• No third-party tracking pixels, beacons, or scripts.
• No user accounts on our infrastructure. You do not register with us. We have no database of users.
• No telemetry. We do not measure feature usage, session duration, retention, or any other behavioural data.
• No location data.
• No contact list, calendar, microphone, camera, or storage access beyond what is strictly necessary for app function (internet connectivity).
• No personal or behavioural data is transmitted to any server controlled by the Publisher. (The optional subtitle feature downloads a small static configuration file from our domain — see Section 3.5. We do not use it to identify, profile, or track you.)

3. Information You Provide and How It Is Stored

The App stores the following information locally on your device only:

3.1 IPTV Provider Credentials

When you sign in to your IPTV provider through PrvITV (using Xtream Codes credentials or an M3U playlist URL), the following is stored on your device:

• Provider server URL
• Username
• Password (where applicable)
• M3U playlist source URL

Storage method: Android EncryptedSharedPreferences using AES-256-GCM encryption with keys held by the Android Keystore system. This means your credentials are encrypted at rest and tied to your device — they cannot be read by other apps, by us, or extracted in cleartext without unlocking your device.

3.2 User Preferences and Local State

The App stores on your device:

• Favorites (your starred channels, movies, series)
• "Continue watching" position markers and "last watched" history
• Selected language (Croatian / English / German)
• Provider-specific cache (channel lists, EPG, categories) for performance
• Per-channel transcode preferences (Windows version only)

3.3 Crash Logs

If the App crashes, a local crash report (stack trace, app version, Android version, device model, thread state) is written to your device's app-private storage at Android/data/com.prvitv.tv/files/crashes/.

These crash reports are never transmitted to us automatically. They exist solely for your troubleshooting. If you choose to send one to support voluntarily, that is your choice.

We may add an optional opt-in cloud crash reporting service in a future version. If we do, this Policy will be updated and you will be asked to opt in — it will not be enabled by default.

3.4 Communication With Your IPTV Provider

When you use the App, it makes network requests directly from your device to the server you configured (your IPTV provider). These requests use the IPTV provider's standard protocols (Xtream Codes API or M3U HTTP requests).

• We are not a party to this communication.
• We do not proxy, intercept, log, or analyze these requests.
• We do not see what channels you watch.
• Your IPTV provider may log your activity under its own privacy policy, which is independent from this Policy. You should read your provider's privacy policy separately.
• Other optional network connections (subtitle features) are described in Section 3.5.

3.5 Optional Subtitle Features (Third-Party Connections)

PrvITV includes optional subtitle features for movies and series. These contact servers other than your IPTV provider only when you actively use them. If you never open the subtitle menu, none of these connections are made.

• OpenSubtitles. When you open the subtitle menu, the App queries the public OpenSubtitles.com API to find matching subtitles. To do this it sends the title and/or content identifier (for example a TMDB id) of the item you are watching, your selected subtitle languages, and — as is inherent to any internet request — your device's IP address. It does not send your IPTV credentials, your name, or any account information. OpenSubtitles is an independent third party governed by its own privacy policy.
• Subtitle configuration. On first use, the App downloads a small static configuration file from our domain (prvitv.com) to obtain the subtitle service key. This is an ordinary file download; we do not log or process it to identify you.
• "Paste link" and "From file". You may optionally supply your own subtitle by pasting a direct link (the App downloads from the address you choose) or by selecting a file from your device through the system file picker. A pasted link causes a request to that third-party address; you are responsible for any link you provide.
• Local caching. Downloaded subtitles are stored only in the App's private cache on your device and are removed when you clear the app cache or uninstall.

3.6 Optional Metadata Enrichment (TMDB)

PrvITV can optionally show richer information for movies and series on M3U playlists — descriptions, posters, cast, and per-episode details. This feature is off unless you enable it by entering your own personal TMDB (The Movie Database) API key in Settings. We do not ship or provide a key of our own.

• When the feature is enabled, and only when you open a movie or series, the App sends the title (and, where available, the year) of that item to the TMDB API (api.themoviedb.org) to retrieve matching artwork and descriptions. As is inherent to any internet request, your device's IP address is visible to TMDB.
• It does not send your IPTV credentials, your name, or any account information.
• The TMDB API key you enter is your own; it is stored only locally on your device, and we never transmit, log, or collect it.
• TMDB is an independent third party governed by its own privacy policy.
• This product uses the TMDB API but is not endorsed or certified by TMDB.

3.7 Optional Program Guide (XMLTV EPG)

Some M3U playlists provide their TV program guide (EPG) separately, as an external XMLTV file. PrvITV can show that guide only if you enter an XMLTV URL yourself in Settings. This feature is off unless you configure it; we do not ship or provide an EPG source of our own.

• When configured, the App downloads the XMLTV file directly from the URL you entered to display "now / next" program information. This connection is between your device and the host you chose; as with any internet request, your device's IP address is visible to that host.
• It does not send your IPTV credentials, your name, or any account information to that host.
• The guide file is parsed on-device only to show program titles and times. We do not transmit, log, or collect its contents, and program text is shown as plain text only.

4. Permissions Used by the App

The App requests these Android permissions:

The App does not request access to: contacts, calendar, SMS, microphone, camera, precise or approximate location, external storage, accessibility services, or device admin.

5. Children's Privacy

PrvITV is not directed to children under the age of 16. We do not knowingly collect any data from children. Because we do not collect data from anyone, this is structurally guaranteed.

If you are a parent or guardian and believe your child has used the App in a way that concerns you, please contact us — although there is no data on our side to delete, we are happy to advise.

6. Data Retention and Deletion

All data described in Section 3 is stored only on your device. To delete it:

• Uninstall the App — this removes all stored credentials, preferences, favorites, and crash logs.
• Clear app data via Android Settings → Apps → PrvITV → Storage → Clear Data — same effect without uninstalling.
• Sign out within the App — this removes credentials but preserves favorites and language preference.

There is no server-side data to delete because nothing is stored on our side.

7. Your Rights Under GDPR and Croatian Law

Even though we do not hold any personal data about you, you have the following rights:

• Right of access (Art. 15 GDPR) — you can ask us what data we hold. Our answer will always be: none.
• Right to erasure ("right to be forgotten", Art. 17 GDPR) — you can delete all local data via app uninstall (Section 6) or request confirmation from us.
• Right to data portability (Art. 20 GDPR) — your favorites and preferences can be backed up via Android's built-in app backup mechanism if you have enabled it in your device settings.
• Right to object and right to restrict processing (Art. 21–22 GDPR) — there is no processing to object to.
• Right to lodge a complaint with the supervisory authority — in Croatia, the Croatian Personal Data Protection Agency (AZOP).

To exercise any of these rights or to ask a question, email domadore.cuki@gmail.com. We will respond within 30 days as required by GDPR.

8. Data Security

Because we do not transmit your data anywhere, the primary security control is on your device:

• Provider credentials are encrypted using AES-256-GCM via Android EncryptedSharedPreferences with keys protected by Android Keystore.
• The App is signed with a release key and distributed only through the Google Play Store to ensure binary integrity.
• Cleartext HTTP traffic is allowed because many IPTV providers do not support HTTPS — this is necessary for the App to function. We use a scoped network_security_config rather than a blanket cleartext flag.

You are responsible for:

• Keeping your device locked with a strong PIN, password, or biometric.
• Not sharing your credentials with others.
• Understanding that an M3U playlist URL contains your credentials in cleartext form; anyone who sees the URL has access to your IPTV account.

9. International Users

The App is published from the Republic of Croatia (European Union). If you use the App from outside the EU, your local privacy law may also apply. Because we do not collect or transmit personal data, your local data-protection regime is unlikely to impose additional obligations on us — but you remain bound by your local law in your use of the App.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect new features (such as optional cloud crash reporting). The "Last Updated" date at the top will reflect the most recent change.

If a change is material (for example, the addition of any data collection), we will:

• Update the Policy on this page
• Display an in-app notice on next launch
• Where required by law, request your renewed consent before any new data collection begins

You can review the change history by examining prior commits in our public repository (link provided in the App's About screen, when available).

11. Third-Party Services

The App uses the following third-party open-source libraries that operate on your device only and do not transmit data to their authors:

• AndroidX Media3 (ExoPlayer) — video playback
• AndroidX Compose — user interface
• Kotlin Coroutines and Serialization — data handling
• Ktor — HTTP client for requests to your IPTV provider
• Coil — image loading for channel logos and posters
• AndroidX Security Crypto — credential encryption

Full license attribution is available in the App's "About" screen.

Network services (used only when you opt in to optional features):

• OpenSubtitles.com — subtitle search and download, as described in Section 3.5. Your use of this feature is also subject to the OpenSubtitles Privacy Policy.
• The Movie Database (TMDB) — optional movie/series metadata enrichment, used only when you enter your own TMDB API key (Section 3.6). Your use of this feature is also subject to the TMDB Privacy Policy and Terms of Use.
• User-configured XMLTV EPG host — optional program guide, downloaded only when you enter an XMLTV URL yourself (Section 3.7). The host is one you choose; it is governed by its own policies, not ours.

Website (prvitv.com) — cookies and analytics

Everything above (sections 2–11) covers the app. The prvitv.com website itself uses minimal analytics to improve the site:

• Vercel Web Analytics — anonymous visit statistics (visits, pages, referrer). Uses no cookies and does not personally identify you.
• Microsoft Clarity — heatmaps and usage recordings (where visitors click and how far they scroll), solely to improve the site. Clarity uses cookies and loads ONLY with your explicit consent via the cookie notice. If you decline, Clarity is not loaded. You can withdraw consent by clearing cookies in your browser.

These tools apply to the website, not the app — the app still collects no data (see sections 2 and 3).

12. Contact

Questions about this Privacy Policy, requests to exercise your rights, or any privacy concerns:

Email: domadore.cuki@gmail.com Publisher: domadore Jurisdiction: Republic of Croatia

We aim to respond within 7 business days, and in any event no later than 30 days as required by GDPR Article 12.

This Privacy Policy is the English-language master version. Translations to other languages are provided for convenience. In case of any inconsistency, the English version controls.