Legal
Privacy Policy & Terms of Use
Last updated: July 21, 2026 · Applies to the ZephyrTV app (com.zephyrtv.app) and this website.
Privacy Policy
Who we are (the data controller)
This policy applies to the ZephyrTV app (package com.zephyrtv.app) and to this website. The controller of any personal data described here is the developer of ZephyrTV (“Zephyr”, “we”, “us”). For any privacy question, or to exercise the rights set out below, contact [email protected]. We reply to privacy requests within 30 days.
Data we collect
ZephyrTV does not require an account, does not ask for your name or email, and does not use advertising or behavioural-analytics SDKs. We do not build a profile of you and we do not track what you watch. The only information that leaves your device is anonymous crash and stability diagnostics, described under Crash reporting below.
Data that stays on your device
- Playlists and logins — your M3U/M3U8 URLs or Xtream Codes credentials are stored only on your device and used only to connect to the service you configured.
- Guide data, favorites and history — EPG data, channel groups, favorites, continue-watching progress, recordings and downloads are stored locally.
- Profiles and PINs — profile names, kids-mode settings and PINs never leave your device.
Crash reporting
To keep the app stable we use Google Firebase Crashlytics. When the app crashes or hits an error we can recover from, it sends Google a report containing the technical stack trace, a Crashlytics-generated random installation identifier, and basic device information — model, operating-system version, language, and whether the app was in the foreground. By design these reports never include your playlist URLs, Xtream Codes credentials, PINs, or what you were watching. The data is used only to diagnose and fix crashes, is processed by Google under Google's privacy policy, and is retained by Crashlytics for up to 90 days. Crash reporting is switched off in debug builds. We do not use Firebase Analytics or any advertising SDK.
Network connections the app makes
- To your playlist provider — to fetch channels, guide data and streams you configured. That provider sees your IP address and requests, under its own privacy policy.
- To Google Play — for install, updates and Premium billing, handled by Google under Google's privacy policy. We never see your payment details.
- To Google Firebase Crashlytics — to send the anonymous crash diagnostics described above.
- To cast targets you choose — when you cast a stream to a Chromecast / Google Cast or a DLNA/UPnP device on your local network, the app connects to that device to play the stream. Nothing is sent to us.
Permissions the app requests, and why
- Internet, network state, Wi-Fi state — to reach the playlist provider you configured and to detect whether you are online.
- Wi-Fi multicast — to discover DLNA/UPnP cast targets on your own local network. Discovery stays on your network.
- Camera — only to scan a pairing QR code. Images are processed on-device and never stored or transmitted.
- Notifications — to show playback, download and recording status. Notifications are generated on your device.
- Foreground service (media playback and data sync) — to keep playback, downloads and playlist refresh running while the app is in the background.
- Wake lock — to keep the screen or CPU awake during playback and downloads.
- Run at start-up — to restore scheduled recordings and refreshes after the device reboots.
- Storage (Android 9 and older) — to save downloads and recordings you request to your device.
Legal bases for processing (EEA and UK)
Where the UK GDPR or EU GDPR applies, we rely on the following bases:
- Legitimate interests (Art. 6(1)(f)) — for anonymous crash and stability diagnostics, so we can find and fix defects. Our interest in a working app is balanced against your privacy by not collecting identifying data and by excluding your playlists, credentials and viewing activity from reports.
- Performance of a contract (Art. 6(1)(b)) — for Premium purchases, which are processed by Google Play.
- Legal obligation (Art. 6(1)(c)) — where we must retain records, for example tax records for a purchase.
Sharing, retention and deletion
- We do not sell personal information and we do not share it for advertising. We run no advertising SDK.
- Crash diagnostics — shared only with Google as our processor; auto-expire from Crashlytics within 90 days.
- Purchase records — held by Google Play; we see only anonymised entitlement status, retained while your entitlement lasts and for as long as tax law requires.
- Everything else — playlists, credentials, guide data, favorites, history, profiles and PINs are stored only on your device for as long as you keep them. To delete them, clear the app's storage or uninstall the app.
International data transfers
Crash diagnostics are processed by Google, which may process them outside your country, including in the United States. Google carries out those transfers under the safeguards described in its own privacy policy and data-processing terms, including the EU Standard Contractual Clauses where applicable.
Security
All network requests the app makes use encrypted HTTPS connections, except where you yourself configure a plain-HTTP playlist or stream URL — many IPTV providers still serve over HTTP, so we cannot force encryption on a link you supply. Your playlist credentials are stored in the app's private storage, which the Android system isolates from other apps, and PINs are stored hashed rather than in plain text. The app has no server of ours to breach: we operate no user accounts and hold no database of user content.
Children
ZephyrTV is not directed at children and we do not knowingly collect personal data from children. Kids profiles are a parental-control feature that restricts what can be viewed on the device; they collect no data and send nothing to us. If you believe a child has provided us with personal data, contact us and we will delete it.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. Because we hold no account and no personal profile about you, there is normally nothing for us to look up, export or erase: the only data we receive is the anonymous crash diagnostics above, which are not linked to your identity and auto-expire within 90 days. To remove everything ZephyrTV keeps on your device, clear the app's storage or uninstall it. To make a request, contact [email protected].
If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data-protection supervisory authority. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not discriminate against you for exercising your rights.
Changes
If this policy changes, we will update this page and the date above. Material changes will be noted in the app's release notes.
Terms of Use
What ZephyrTV is
ZephyrTV is a media player. It plays IPTV playlists and media that you provide. The app does not include, sell, promote or endorse any channels, movies, series or other content, and we have no affiliation with any content provider.
Your content, your responsibility
- You are solely responsible for the playlists and services you load into the app and for having the legal right to access them in your country.
- Using ZephyrTV to access copyrighted content without authorisation is prohibited.
- We cannot help with problems in third-party playlists or services (missing channels, broken streams, billing with your provider).
Free & Premium
The core app is free, with no ads. Premium is an optional subscription purchased through Google Play that unlocks recording, multi-view, offline downloads, channel-group management and unlimited profiles. Billing, renewal, cancellation and refunds are handled by Google Play under its terms.
Acceptable use
You may not reverse-engineer, resell or redistribute the app, bypass Premium licensing, or use the app in any unlawful way.
Warranty & liability
ZephyrTV is provided "as is", without warranty of any kind. To the maximum extent permitted by law, we are not liable for damages arising from use of the app or from third-party content or services accessed through it.
Termination & changes
We may update the app and these terms; continued use after an update constitutes acceptance. If you do not agree, stop using the app and uninstall it.
Governing law
These terms are governed by the laws of your country of residence where mandatory consumer law applies, and otherwise by the laws of the operator's place of establishment.
Contact
Questions about privacy or these terms: [email protected] · Support: [email protected]