Samsung Smart TV Privacy Policy

1. Scope of this policy

This policy applies to the Samsung Smart TV (Tizen) edition of XIP IPTV Player. The app allows users to connect to an IPTV provider or playlist that they independently select and are authorized to use.

Samsung may separately process information when users download, install, update, review, or otherwise use Samsung's store and device services. Samsung's processing is governed by Samsung's own privacy notices.

2. Information processed by the Samsung TV app

• Activation information: a device identifier used for activation, platform, app version, activation status, trial or subscription status, and relevant server timestamps.
• User-provided IPTV connection information: profile name, provider/server URL, Xtream Codes username and password, or M3U playlist URL entered by the user.
• Phone pairing information: session identifier, six-character pairing code, login mode, session status and timestamps and, when submitted from the phone, profile name, provider/server URL, username and password or M3U URL, the TV request IP address, the phone IP address, and the phone browser user-agent.
• Local app preferences: language, favorites, recently viewed items, resume positions, subtitle and audio preferences, aspect-ratio settings, parental settings, EPG offset, and other player preferences.
• Local cache information: catalog, metadata, EPG, and other temporary data used to improve navigation and performance.
• Support information: email address, device identifier, transaction reference, and messages when a user contacts us or requests activation support.
• Technical and security logs: IP address, request time, app/platform information, server response information, and error details that may be recorded by our servers or hosting providers for security, diagnostics, and abuse prevention.

3. Where connection data is stored and sent

• IPTV profiles, preferences, favorites, viewing history, resume positions, and cached metadata may be stored locally on the Samsung TV using browser storage or IndexedDB.
• When the user chooses Phone Login, the phone sends the submitted profile and IPTV connection information to our pairing server. The Samsung TV retrieves it through the matching one-time pairing session.
• After credentials are entered on the TV or transferred through Phone Login, the TV app sends the provider URL and credentials to the IPTV provider selected by the user to authenticate and retrieve the requested catalog, EPG, or media stream.
• We do not operate the user's IPTV provider and do not control that provider's privacy, security, availability, content, or legal compliance.
• Users should only enter credentials for services they are legally authorized to access.

4. Information the app does not request

• The app does not require a user account with XIP IPTV Player to use the media player.
• The app does not request GPS, precise location, or background location access.
• The app does not request access to contacts, the camera, or the microphone.
• The app does not sell personal information and does not use personal information for targeted advertising.

5. How information is used

• To verify trial, license, or subscription activation.
• To connect to the IPTV provider or playlist selected by the user.
• To provide a short-lived, one-time transfer of profile and IPTV connection information from the user’s phone to the Samsung TV.
• To store profiles and playback preferences on the TV.
• To provide favorites, recently viewed items, resume playback, EPG, and performance caching.
• To respond to support requests and troubleshoot technical problems.
• To secure the activation service, prevent fraud or abuse, and comply with applicable legal obligations.

6. Sharing and disclosure

• User-selected IPTV provider: connection information is transmitted to the provider chosen by the user when the user requests a connection.
• Service providers: hosting, infrastructure, payment, security, and support providers may process limited information on our behalf when necessary to provide those services.
• Legal and safety reasons: information may be disclosed when required by law or reasonably necessary to protect users, the service, or legal rights.
• No sale: we do not sell or rent personal information.

7. Retention and deletion

• Local profiles and related settings remain on the TV until the user deletes the profile, clears the app's data, resets the TV's app storage, or uninstalls the app.
• A Phone Login pairing session expires 10 minutes after it is created.
• Submitted profile and IPTV credentials are cleared from the active pairing database immediately after the TV retrieves them once. If the TV does not retrieve them, they are cleared when the 10-minute session expires.
• Non-credential pairing metadata, such as the session identifier, pairing code, status, timestamps, IP addresses, and browser user-agent, is retained for no more than 7 days after session expiry for rate limiting, security, abuse prevention, and troubleshooting, and the session row is then deleted.
• Activation and support records are retained only as long as reasonably necessary for licensing, support, security, fraud prevention, accounting, or legal obligations.
• Users can request deletion of eligible server-side activation or support information by contacting us and providing the relevant device identifier or activation email.

8. Security

The official Phone Login page and pairing API use HTTPS. Pairing codes and session identifiers should be treated as confidential until they expire.

We use reasonable technical and organizational measures to protect information, including secure transmission where supported and restricted access to backend systems. No storage or transmission method can be guaranteed to be completely secure.

Users are responsible for protecting their IPTV credentials and for selecting a trustworthy provider. Credentials should not be shared with unauthorized persons.

9. Children's privacy

The app is not directed to children under 13 or the minimum age required by the applicable jurisdiction. If you believe a child has provided personal information to us, contact us to request deletion.

10. Privacy rights

Depending on applicable law, users may request access, correction, deletion, restriction, portability, or objection regarding personal information associated with an activation or support request. Consent may be withdrawn where processing is based on consent.

Include the Samsung TV app device identifier or activation email when relevant so we can locate the correct record. Do not send IPTV passwords by email.

11. Changes to this policy

We may update this policy when the Samsung TV app, our data practices, or legal requirements change. The current version and its revision date will remain available at this URL.

12. Contact

For privacy questions or data-rights requests, contact: