Privacy policy

1. Who is responsible and how to contact us

For questions about how TiviTune handles information, or requests about information you have sent us, contact privacy@tivitune.com. For app help, contact support@tivitune.com.

TiviTune is a player for content you are authorized to access. It does not supply channels or subscriptions. There is no TiviTune account, cloud library, advertising SDK, product analytics service or automatic crash-report upload. Your content provider account is separate from TiviTune.

2. Data the apps use

The apps process source and guide addresses, provider usernames and passwords, optional per-source User-Agent settings, imported channel/movie/series information, programme listings, favorites, settings, searches and viewing progress so you can import, find and play your content.

Your library and preferences are kept on your device, not uploaded to an application server operated by us. Viewing history is initially enabled, stores up to 200 recent items and includes viewing times and supported resume positions. You can pause recording, remove items or clear history in Settings. Library search runs locally; it is not sent to us.

The platform may receive current-media information through its media controls. The apps do not request your contacts, camera, microphone or precise location, and do not use an advertising identifier.

3. Connections to your sources and image hosts

Importing, refreshing or playing content connects your device to the sources you configure. These providers receive your IP address, request information and any provider credentials needed for that request. Streams can also request related playlists, segments, keys and other media resources. Providers and their hosting services have their own privacy and retention policies.

Provider artwork is on by default for new libraries. Browsing visible items may request posters, logos or backdrops from the addresses your provider supplies. Image hosts can see your IP address and any information embedded in those addresses. You can switch artwork off in the app. This does not enable independent public-metadata searches.

Opening a title, or highlighting a movie long enough for its details preview, can request that title’s details from your provider. Guide requests can happen while browsing Live TV. On Android TV, eligible Xtream sources automatically fetch and refresh their own XMLTV guide while the app is open unless you choose another guide or none.

Automatic playlist updates are off initially. Enabling them allows periodic requests to your saved sources while the app is open; it does not create a TiviTune cloud scheduler. Android can continue an import you explicitly start through its foreground import service.

HTTPS protects supported connections in transit. User-selected ordinary HTTP sources and HTTP artwork are unencrypted and can expose addresses, credentials and content on the network. Choose HTTPS wherever your provider supports it. TiviTune is not a VPN and does not make requests anonymous.

4. How local information is protected

On Windows, sensitive library payloads use authenticated encryption with keys protected for your Windows user. This is not whole-disk encryption and does not prevent software running with your privileges from accessing data.

On Android TV, source credentials and sensitive records use authenticated encryption with Android Keystore-backed key protection. The library is held in app-private, no-backup storage. Normalized search words and some credential-free Xtream catalogue metadata—including titles, descriptions, ratings, artwork addresses and provider identifiers—are not individually encrypted. Android’s application sandbox protects these readable records from ordinary other apps; someone able to read the private database can learn catalogue information.

Android cloud-backup and device-transfer exclusions are configured for app-private library data. Device-manufacturer behavior can vary. No protection can guarantee safety on a compromised device. Deleting data is not a forensic secure-erasure guarantee for storage, temporary memory, journals or copies you made.

5. Optional Windows metadata, backups and diagnostics

Windows can optionally query TVmaze, Wikidata and Wikimedia Commons for selected-title information, or The Movie Database (TMDB) using a key or token you supply. These features are off until you enable or explicitly request them. Requests can disclose your IP address, the selected title/year or public identifier, selected language and, for TMDB, your API credential. The app does not attach your playlist credentials or viewing history to these metadata searches.

Saved TMDB title/season data expires after seven days, automatic matches after 30 days and complete no-match results after 24 hours. The cache is bounded to 2,000 entries or 32 MiB. You can clear the metadata cache or remove the credential in Settings. Removing a key is not the same as deleting every saved metadata choice.

Trailer and external playback actions require an explicit action or confirmation. The destination browser, website or player then applies its own policy. This website does not embed YouTube or other third-party players.

Windows can export a password-protected .tvcbackup file containing your library and personal state, not video files. Backup files stay wherever you choose to save or copy them; we do not receive them and cannot recover forgotten passwords. Windows keeps up to ten local import/refresh reports and can explicitly export a diagnostic text file. Nothing is sent to support automatically.

Android TV does not currently offer these external metadata services, encrypted backup/restore or a customer diagnostic-export feature. Development diagnostics use fixed codes and numeric facts rather than source URLs or credentials.

6. Android TV permissions

Internet and network-state access support importing, guide requests, artwork and playback. Foreground-service and data-sync permissions allow an import you start to continue with progress and cancellation controls. A task-bounded wake lock supports that import.

Notification permission is optional and requested through a separate user action. It is used for local import progress, not marketing notifications. In-app progress remains available if permission is declined. There is no microphone, camera, location or broad all-files permission in the current TV app.

7. Website and support information

This website has no advertising cookies, analytics scripts, third-party video embeds or remotely loaded fonts. A language you explicitly choose is saved as tivitune-language in browser local storage. An earlier tivicove-language preference can be migrated locally during the rebrand. A dismissed language suggestion is remembered only for the browser session. Clear site data to remove these preferences.

The hosting provider processes network and request information, such as IP address, requested page, browser information and request time, to deliver and secure the website. Operational logs may be retained for troubleshooting, abuse prevention and hosting obligations. We do not use them to build advertising profiles. Contact us for information about the deployed host’s applicable retention or a privacy request.

If you email us, we and our email service process your email address, message, attachments and correspondence to answer the request. Do not send provider passwords, full playlist URLs, API keys, backup passwords or screenshots containing private library information. We do not automatically receive your local library or viewing history.

8. Recipients and international processing

We do not sell or rent personal information. Your selected content and image hosts receive the requests needed to provide their services. Optional Windows metadata services, Microsoft Store, Google Play and websites you choose to open act under their own policies. Hosting and email services process information needed to operate the website and respond to you.

Information held by us may be disclosed when necessary to comply with law, protect rights or investigate abuse. Providers and infrastructure may process requests in countries other than yours. Device-local storage does not mean your chosen internet providers receive no data.

9. Retention, deletion and your choices

App library data remains on the device until you remove it, replace it through a supported action, clear app data or uninstall. History is bounded as described above. Removing a playlist removes its associated local data, but does not close your provider account or erase that provider’s logs. Android TV app data can be cleared through the TV’s system app settings; Windows provides app Reset through system settings.

Backups, exported reports, original playlist files and manually preserved recovery copies are separate files. Resetting or uninstalling does not necessarily delete them. Delete copies you no longer need from their saved locations and from any backup or cloud-storage service you chose.

We keep support correspondence only as long as needed to handle the request and for applicable legal, security or dispute-resolution purposes. You can request deletion of information you sent us. If a legal retention requirement prevents full deletion, we will explain the applicable limitation. We cannot remotely erase a library stored only on your device.

Depending on your location, you may have rights to access, correct, delete or obtain a copy of personal information we hold, restrict or object to processing, withdraw consent where applicable, or complain to your data-protection authority. Email the privacy contact to exercise a right. We may ask for proportionate information to verify the request, but never your provider password.

10. Children and content

TiviTune is not specifically directed at children. It includes no content catalogue of its own and does not verify the suitability of a source you add. Parents and guardians should supervise source selection and device use. If you believe a child sent us personal information, contact the privacy address so we can address it.

11. Policy changes

We will update this page when data practices change and revise the date shown above. Material new processing will require any notice, consent or in-app disclosure applicable to that change. This policy does not change the terms or policies of your content provider or app store.

Privacy contact

Step-by-step data deletion instructions · Contact support · Terms of use