Privacy Policy

Overview

XIP IPTV (Xtream IPTV Player) is a neutral media player. We collect only what is necessary to operate the app, activation, support, security, and service improvement. We do not sell personal data.

IPTV content and provider credentials

• The app does not provide, host, sell, distribute, or promote TV channels, movies, series, sports streams, playlists, or subscriptions.
• Users provide their own Xtream Codes API credentials, M3U playlist URL, or provider login from an authorized IPTV provider.
• The app only acts as a player/client for user-provided sources. We do not control the content, availability, legality, or quality of third-party IPTV providers.
• Users are responsible for using the app only with content and services they are legally allowed to access.

Account, sign-in, and activation

• The app does not require users to create an account with XIP IPTV (Xtream IPTV Player) to use the player.
• Users may enter third-party IPTV provider credentials or playlist URLs. These credentials are used only to connect to the provider selected by the user.
• If you purchase or request activation/support through our website, we may process your email address, device identifier, activation status, transaction reference, and support messages.
• Payment details are processed by external payment providers; we do not store full card or payment credentials.

Location data

• The app does not request GPS, precise location, or background location permission.
• The app does not provide services based on the user’s physical location.
• Like most online services, our servers or hosting providers may receive IP addresses in security, diagnostic, or anti-fraud logs.

Data we collect

• Activation and support data: email address if provided, device identifier generated/used for activation, activation status, subscription/expiration status, app version, platform, and support messages.
• App and device data: app version, platform, device model, crash information, performance diagnostics, and technical logs needed to maintain the service.
• User-provided IPTV data: provider URL, Xtream Codes username/password, or M3U playlist URL entered by the user. This may be stored locally on the device for convenience and may be sent only to the provider selected by the user when connecting.
• Push notification data: notification token and app/device information if push notifications are enabled.
• Website and payment data: transaction references, checkout status, and limited website logs when you use our website or purchase activation.

How we use data

• Activate your license and provide core app functionality.
• Save user preferences and connection profiles on the device.
• Connect to user-selected IPTV providers when the user enters credentials or a playlist URL.
• Provide support, troubleshoot issues, fix bugs, and improve performance.
• Detect, prevent, and respond to fraud, abuse, security incidents, or unauthorized activation.
• Comply with applicable legal obligations.

Legal bases (GDPR)

• Performance of a contract: to provide the app, activation, support, and requested functionality.
• Legitimate interests: security, fraud prevention, diagnostics, service improvement, and abuse prevention.
• Consent: where required for optional communications, analytics, or permissions.
• Legal obligation: compliance, record keeping, and lawful requests where applicable.

Sharing and disclosure

• We do not sell your personal data.
• Hosting, infrastructure, analytics, crash reporting, notification, and customer-support providers may process limited data on our behalf.
• Payment processors handle payment transactions and may provide transaction status or references to us.
• User-entered IPTV credentials or playlist URLs are used to connect to the IPTV provider chosen by the user; we do not provide that IPTV service.
• We may disclose information if required by law or necessary to protect users, our service, or our legal rights.

Retention

We keep personal data only as long as necessary for activation, support, security, legal, and operational purposes. Local profiles can be removed from the app by the user. Server-side activation or support records are deleted or anonymized when they are no longer needed, unless retention is required by law.

Security

We use technical and organizational safeguards to protect data, including secure transmission where applicable and restricted access to backend systems. No system is 100% secure, but we continuously improve our protections.

Your privacy rights / Data subject rights

• You may request access to the personal data associated with your app activation or support request.
• You may request correction, deletion, restriction, portability, or objection where applicable by law.
• You may withdraw consent where processing is based on consent.
• To exercise your rights, contact us using the email address below. Include your app device ID or activation email when relevant so we can locate your records.

Cookies and local storage

• Website: we may use strictly necessary cookies and limited analytics to operate and improve the website.
• Apps: we may use local storage for profiles, preferences, activation state, favorites, playback settings, and offline convenience features.
• You can manage website cookies in your browser and remove app data from your device settings or inside the app where available.

Children

The app is not directed to children under 13 or the minimum age required in your jurisdiction. If you believe a child has provided personal data to us, contact us to request deletion.

Platforms and app stores

• App stores such as Huawei AppGallery, Google Play, Apple App Store, or Microsoft Store may display privacy or data-safety summaries based on this policy.
• Store providers may process data independently under their own privacy policies when users download, update, review, or purchase apps through their platforms.
• We aim to minimize data collection consistently across supported platforms.

LG Smart TV (webOS)

• Activation records are retained on our server: your device ID, user email address and activation duration (license validity). We use these records to verify your entitlement and allow continued access to the app after the free trial expires. They are retained for as long as needed to provide and verify your activation and are not deleted by the TV-pairing cleanup.
• XIP IPTV (Xtream IPTV Player) on LG Smart TV is a player for your own authorized IPTV sources. Device ID, platform, app version and trial/license status are used for activation. An email address and payment reference may be processed for website activation. Provider profiles, preferences and viewing history may be stored locally on the TV. Your provider receives the connection and content requests needed for playback.
• Hosting: Hostinger, North America — United States, Arizona (USA, AZ). The hosting account’s configured backup location is United States, Boston. We do not maintain separate backups ourselves; this does not mean that hosting-provider backups are disabled. Any provider-managed backup copies are subject to the hosting account’s backup settings and retention.
• Optional phone-to-TV pairing temporarily stores the session/code, profile name, provider URL, username/password or playlist URL, and connection metadata (IP addresses, browser information and timestamps) to deliver the profile and prevent abuse. This is an exception to the general description of credentials being stored locally and sent to your selected provider.
• Pairing codes expire 10 minutes after session creation. Profile details and credentials are cleared from the active database when the TV retrieves them. Uncollected details are cleared when an expired session is processed or at the next successful cleanup, scheduled every 10 minutes. Remaining session metadata, including IP addresses and browser information, is deleted at the next successful cleanup once seven days have elapsed after session expiry. This database cleanup does not erase any copies already held in hosting backups.
• We do not maintain a separate application-log or support-message archive. This does not exclude the temporary pairing metadata described above or technical records independently managed by hosting, email or messaging providers. Activation and payment records are separate from pairing sessions and are not deleted by the pairing cleanup.
• You can remove saved profiles using the app’s profile controls and clear history/cache through the available settings. For access, correction or deletion of server-side personal data, contact [email protected] with your device ID or activation email; do not send IPTV passwords. Uninstalling the app does not itself delete server records. LG and your IPTV/payment providers process data under their own privacy policies.

Contact

For privacy questions or data subject rights requests, contact us by email or WhatsApp.