Privacy Policy

1. Who we are

Streamary is an app for watching your own IPTV playlist. The controller of the personal data Streamary processes is Pedro Henrique Viestel de Barros, an individual developer in the Czech Republic ("we"). We have not appointed a data protection officer (as a small, individual controller we are not required to); for anything about your data, write to privacidade@streamary.app.

2. Streamary is only a player

Streamary does not host, broadcast, sell or provide any movies, shows or channels. All content comes from the playlist you add, supplied by your IPTV provider. You are responsible for your playlist and your right to access its content. Video goes from your provider straight to your device and never passes through our servers.

3. Data that stays on your device

The following stays on your device and is never sent to us:

• your playlist's contents and the catalogue built from it;
• your List's username and password, kept in the system's secure storage (for example Android Keystore or Windows Credential Manager);
• your watch progress ("Continue Watching"), recent searches, downloads and settings.

You can erase this data by deleting the List in the app or uninstalling Streamary.

4. Data sent to our metadata service

To show posters, plots and other title details, Streamary uses a service we run:

• The List's address, once, when you add or change a List, over an encrypted connection (HTTPS). It is used only to compute an anonymous profile for the List (an identifier and an access key) with a keyed cryptographic hash. The service does not store or log the address, the username or the password, and they cannot be recovered from the profile.
• Descriptions of the titles in your playlist: cleaned title, original title, year, group, kind (movie, show or channel), channel identifier, and season and episode numbers. We never send video addresses, passwords or the full playlist, and requests carrying anything that looks like an address or a password are refused. Titles marked as adult are never sent. Matches and title details are kept in a shared cache, not linked to you, for up to 180 days.
• Your Watchlist, linked to the List's anonymous profile, so it appears on every device that uses the same List. It is kept until you remove the titles.

Our service's request logs keep the method, the kind of request, the result and the time taken; they do not keep IP addresses, identifiers or List addresses. Your IP address is used, without being stored, to limit abuse.

Movie and show data comes from The Movie Database (TMDB): our server sends TMDB only the title, year and language, nothing about you. This product uses the TMDB API but is not endorsed or certified by TMDB.

5. Diagnostics (only if you agree)

When you first open Streamary, it asks whether you want to send anonymous diagnostics. Nothing is sent unless you choose Send diagnostics, and you can change your choice at any time in About. If you agree, Streamary sends:

• errors and crashes (for example a playlist that failed to import, a title that failed to play, an unexpected exit), with the kind of stream and the stage where it failed;
• performance counts in broad ranges: how quickly the app and titles start, the memory used, the device's memory size, the size of your List, and imports and plays that worked or failed;
• the app version, the platform, the device model, the system version, the app's language, and a random session code that changes every time the app starts.

Diagnostics never include your List's address, usernames or passwords, titles, channel names, what you watch, your IP address, or any device or advertising identifier. They are kept for 30 days and only we can read them. The legal basis is your consent (LGPD art. 7, I; GDPR art. 6(1)(a)). Turning diagnostics off in About stops them at once and deletes what is waiting on your device to be sent.

6. Partner offers

Streamary uses no ad network and no advertising SDK. The free version may show one offer from a partner (for example a VPN service) while you browse, never during playback, always labelled Ad. Pro shows no offers.

Offers come from our own service. To pick offers for your country, the app sends the two-letter country of your device's settings, which is not stored. If you open an offer, you pass through a link on our service to the partner's site, and Streamary may earn a commission if you buy. We count views, clicks and link visits per offer, per day and per kind of device (computer, phone or tablet, TV); the counts keep no identifier: no advertising ID, no IP address, no account, nothing about what you watch. The partner's site has its own privacy policy, which applies once you open it.

7. Purchases

Pro purchases are processed by Google Play or the Microsoft Store; we never receive your card details. To unlock Pro on your other devices when you are signed in with Google, our service keeps a one-way hash of the purchase (not the purchase token or order number), the store, the product and the dates, linked to your account in section 8.

8. Google sign-in (optional)

You can sign in with Google to keep your Lists and where you stopped on all your devices, and to use Pro on all of them. When you do:

• Your Lists (names and addresses, which can include your provider's login) and your watch progress are saved in a hidden app folder of your own Google Drive that only Streamary can open. A compressed copy of your playlist may be saved there too, so a new device starts faster. None of this is stored on our servers, and no Google user data is shared with anyone else.
• Our service checks your sign-in with Google and keeps only your Google account number, a random account code and a hash of each device's access code, to link a Pro purchase to your account. It does not keep your name, email or Google tokens. The app shows your name and email from Google on your device only.

You can sign out at any time. Delete account in the app removes Streamary's data from your Drive and deletes your account on our service with its devices and purchase records. You can also revoke Streamary's access at myaccount.google.com/permissions. Streamary's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

9. Beta tester list

If you sign up on the website to test a Streamary version, we receive the email you give, the platform you choose, the page's language, your connection's approximate country (provided by Cloudflare) and the date. The sign-up arrives by email in our support mailbox (Gmail, by Google). We use this only to invite you to that platform's beta; to unlock the beta, we give your email to the matching store (Microsoft or Google). The legal basis is your consent (LGPD art. 7, I; GDPR art. 6(1)(a)). We keep the sign-up until that platform launches publicly or until you ask for removal at privacidade@streamary.app, whichever comes first.

10. Who processes data for us

We do not sell your personal data and do not share it for advertising. Data is processed only by:

• Hostinger (Hostinger International Ltd.), whose server in Brazil runs our service and its database;
• Cloudflare, which protects and delivers our website and service (and so processes visitors' IP addresses) and stores our database backups;
• Google (Google Play, Sign in with Google, Google Drive) and Microsoft (Microsoft Store), for sign-in, storage in your own Drive and purchases;
• TMDB, which receives titles from our server and supplies the images your device loads directly from TMDB's servers;
• authorities, when the law requires it.

11. Legal bases

We process data to provide the features you use (LGPD art. 7, V; GDPR art. 6(1)(b)), with your consent for diagnostics and the beta list (LGPD art. 7, I; GDPR art. 6(1)(a)), for our legitimate interest in security, abuse prevention and counting offers without identifiers (LGPD art. 7, IX; GDPR art. 6(1)(f)), and to meet legal obligations (LGPD art. 7, II; GDPR art. 6(1)(c)).

12. International transfers

Our service runs in Brazil, and Google, Microsoft, Cloudflare and TMDB may process data in other countries, including the United States. For users in the European Economic Area, these transfers rely on adequacy decisions where they exist (for example the EU–US Data Privacy Framework for certified companies) or on the standard contractual clauses these providers offer (GDPR Chapter V). For users in Brazil, they rely on the contractual safeguards of LGPD art. 33.

13. How long we keep data

• Watchlist: until you remove the titles. Account and purchase records: until you delete your account.
• Diagnostics: 30 days. Title matches and details: up to 180 days, not linked to you. Offer counts: daily totals with no identifiers.
• Backups of our database are kept for up to about two months, so deleted data can remain in them until they expire.

14. Your rights

You can ask us to confirm whether we process your data, and for access, correction, anonymisation or deletion, portability, information about sharing, and withdrawal of consent; you can also object to processing and ask us to restrict it. Write to privacidade@streamary.app; we reply within 15 days. Because most of what we hold is anonymous (a List's profile, diagnostics), we may need you to tell us which device or List a request is about. You can complain to the Czech data protection authority (ÚOOU), to your local supervisory authority in the EU, or to Brazil's data protection authority (ANPD).

15. Security

We use encrypted connections (HTTPS), keep passwords only in the device's secure storage, keep hashes instead of List addresses, purchase tokens and access codes, and never log playlist addresses, passwords or access keys.

16. Age

Streamary is intended for people aged 18 and over and does not knowingly collect data from children. If you believe a child has sent us data, write to us and we will delete it.

17. This website

The streamary.app website uses no cookies or tracking tools. The beta sign-up form is described in section 9. Your language choice is stored only in your browser. The site is hosted on Cloudflare, which processes visitors' IP addresses to deliver the pages and protect the site against attacks.

18. Changes to this policy

We may update this policy. We will announce important changes in the app or on the website before they take effect.

19. Contact

Privacy: privacidade@streamary.app · Support: suporte@streamary.app