Sudareq Development

Privacy Policy for qpTV

Last Updated: February 22, 2026
Effective Date: February 22, 2026

Introduction

This Privacy Policy describes how Sudareq (“we”, “us”, or “our”) handles information in connection with the qpTV Android application (“the App”). We are committed to protecting your privacy and being transparent about our data practices.

qpTV is a media player application that allows you to watch live TV, movies, and series from your own IPTV playlists and streaming sources. The App is designed with a local-first architecture, meaning the vast majority of your data is stored only on your device and is never transmitted to our servers.

We do not operate any servers that store your personal data. We do not have user accounts, and we do not collect your name, email address, phone number, or any other personally identifiable information.

1. Information We Collect

1.1 Information Stored Locally on Your Device

The following data is stored only on your device and is never sent to us or any third party (unless you explicitly use the backup/export feature):

  • Profile Data: Profile names, colors, and preferences. The App supports up to 4 separate user profiles, each with completely isolated data.
  • Playlist and Channel Data: Channel names, stream URLs, logos, and group information from playlists you import (M3U files or Xtream Codes sources).
  • Xtream Codes Credentials: If you use an Xtream Codes source, the server URL, username, and password you provide are stored locally on your device to access your streaming provider.
  • Watch History and Playback Progress: Which channels and content you have watched, how long you watched, and where you left off for resume functionality.
  • Favorites and Custom Playlists: Content you mark as favorite or organize into custom playlists.
  • Followed Series: Series you follow, including new episode tracking.
  • EPG (Electronic Program Guide) Data: Program schedule information fetched from URLs you configure.
  • App Settings and Preferences: Your chosen theme, player engine (ExoPlayer or VLC), audio settings, subtitle preferences, buffer configuration, and other customization options.
  • PIN Codes: If you set up PIN protection for profiles or watch time limits, the PIN is stored as a one-way SHA-256 hash on your device. We cannot recover or read your PIN.
  • Watch Time Limit Settings: Daily viewing limits and accumulated watch time per profile, used for optional parental control purposes.
  • Program Reminders: Locally scheduled notifications for upcoming programs (mobile devices only).
  • Split View and Magic Queue Configurations: Your multi-screen viewing and scheduled playback setups.

1.2 Information Collected by Third-Party Services

Firebase Analytics (Google)

In release builds of the App, we use Firebase Analytics to understand how the App is used in aggregate. The following anonymous events are collected:

  • Channel play events: The channel name, group name, and content type (live TV, movie, or series) when you start watching content.
  • Playlist import events: The source type (M3U or Xtream) and the number of channels when you import a playlist.
  • Profile switch events: The number of profiles in the App when you switch between profiles.
  • Device type: Whether you are using a phone/tablet or an Android TV device.

Firebase Analytics also automatically collects standard technical information such as device model, operating system version, app version, language, and country (derived from device settings, not GPS location). This data is used in aggregate and is not linked to any personal identity.

Firebase Analytics is not active in debug/development builds of the App.

Firebase Crashlytics (Google)

We use Firebase Crashlytics to automatically collect crash reports when the App encounters an error. This helps us identify and fix bugs. Crash reports include:

  • Stack traces and error information
  • Device model and operating system version
  • App version and state at the time of the crash

Crash reports do not contain any of your personal data, viewing history, or playlist information.

RevenueCat (Subscription Management)

We use RevenueCat to manage in-app subscriptions and purchases through the Google Play Store. RevenueCat processes:

  • An anonymous user identifier (not linked to your personal identity)
  • Your subscription status and entitlements
  • Purchase history and transaction identifiers
  • Subscription expiration and renewal information

RevenueCat does not receive your name, email, or other personal information from our App. Payment processing is handled entirely by the Google Play Store; we never see or store your payment details (credit card numbers, billing address, etc.).

1.3 Information We Do NOT Collect

To be clear about what we do not collect:

  • Personal identifiers (email address, phone number, real name, physical address)
  • Precise or approximate location data (the App has no location permissions)
  • Device identifiers (IMEI, serial number, advertising ID)
  • Contacts, photos, calendar, or other media
  • Payment information (handled entirely by Google Play Store)
  • Web browsing history or cookies
  • Microphone or camera data
  • We do not display ads and do not use any advertising SDKs or ad tracking

2. How We Use Your Information

We use the collected information solely for the following purposes:

  • Provide Core Functionality: Enable IPTV streaming, channel browsing, content playback, watch history, and resume functionality.
  • Save Your Preferences: Remember your favorite channels, playlists, viewing history, profiles, and app settings.
  • Manage Subscriptions: Validate and manage your in-app subscription status through RevenueCat and the Google Play Store.
  • Improve App Stability: Analyze crash reports via Firebase Crashlytics to identify and fix bugs.
  • Understand App Usage: Use aggregate, anonymous analytics via Firebase Analytics to understand which features are used and improve the App.
  • Enable Parental Controls: Enforce PIN protection and watch time limits per profile.
  • Enable Chromecast: Cast content to Chromecast devices on your local network (mobile devices only).

3. Data Storage and Security

Local Storage

  • Device-Only Storage: All your IPTV credentials, playlists, favorites, watch history, profiles, and preferences are stored locally on your Android device using secure Android storage mechanisms (Room Database and DataStore).
  • No Cloud Storage: We do not operate servers that store your data. There is no cloud sync of your profiles, history, or preferences.
  • Encrypted PIN: Your parental control PINs are stored as SHA-256 hashes and cannot be reversed or read in plain text.

Network Security

  • All communication with Firebase and RevenueCat uses encrypted HTTPS connections.
  • IPTV credentials are stored locally and never transmitted to our servers.
  • We follow Android security best practices for data storage.

Android Backup

The app supports Android’s built-in backup functionality. If you have enabled Android backup on your device, your app data may be backed up to your Google account according to Google’s backup policies.

4. Backup and Data Export

The App includes a backup and restore feature that exports your data (profiles, playlists, favorites, watch history, preferences, and settings) as a JSON file to a location you choose on your device. This file is created and managed entirely by you. We do not have access to your backup files.

Important: Backup files may contain your Xtream Codes credentials if you use that feature. Please store your backup files securely.

5. Third-Party Services

qpTV integrates the following third-party services. Each has its own privacy policy governing how they handle data:

5.1 RevenueCat (Subscription Management)

  • Purpose: Manages in-app purchases and subscription validation
  • Data Collected: Anonymous user ID, subscription transactions, purchase receipts
  • Privacy Policy: https://www.revenuecat.com/privacy

5.2 Firebase Analytics (Google)

  • Purpose: Anonymous, aggregate usage analytics
  • Data Collected: App usage events (channel plays, playlist imports, profile switches), device type, device model, OS version, app version
  • Privacy Policy: https://firebase.google.com/support/privacy

5.3 Firebase Crashlytics (Google)

  • Purpose: Crash reporting and app stability monitoring
  • Data Collected: Anonymized crash logs, stack traces, device information (model, OS version), app version
  • Privacy Policy: https://firebase.google.com/support/privacy

5.4 Google Cast SDK

  • Purpose: Chromecast support for casting content to your TV (mobile devices only)
  • Data Collected: Stream URL and channel metadata sent to the Chromecast device on your local network
  • Privacy Policy: https://policies.google.com/privacy

5.5 Your IPTV Service Provider

  • Direct Connection: qpTV connects directly to the IPTV service provider you specify (via M3U URL or Xtream Codes).
  • Credentials: Your IPTV credentials are sent directly from the App to your chosen provider’s servers.
  • No Developer Access: We (the App developers) do not have access to, control, or store your IPTV credentials or viewing activity on our servers.
  • Provider Privacy: Your IPTV provider’s own privacy policy governs how they handle your data. We recommend reviewing it.

6. Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties, except as described below:

  • No Advertising Networks: We do not integrate advertising SDKs or share data with advertisers.
  • No Data Brokers: We do not sell your data to data brokers or analytics companies.
  • Limited Third-Party Sharing: Data is only shared with:
    • RevenueCat for subscription management (anonymous user ID only)
    • Firebase Analytics for aggregate usage analytics (anonymous events only)
    • Firebase Crashlytics for crash reporting (anonymized crash data only)
    • Your IPTV provider (credentials sent directly by the App, not stored by us)
    • Chromecast devices on your local network (stream URL and metadata, when you choose to cast)

We may disclose information if required by law or to protect our legal rights, but we will make reasonable efforts to notify you unless prohibited by law.

7. Your Rights and Choices

Access and Deletion

  • Local Data: All your data is stored locally on your device. You can delete it at any time by:
    • Deleting individual profiles within the App (removes all associated data for that profile)
    • Clearing app data in Android Settings > Apps > qpTV > Storage > Clear Data
    • Uninstalling the App

Data Export

  • Backup Feature: You can export all your app data (profiles, playlists, favorites, watch history, preferences) to a JSON file using the App’s built-in backup feature.
  • Data Portability: The exported file can be imported on another device or saved for your records.

Control Your Data

  • You have complete control over your IPTV credentials and playlists.
  • You can disable watch history tracking per profile in the App’s settings.
  • You can delete favorites, watch history, and custom playlists at any time within the App.
  • You can change or remove parental control PINs in the App settings.
  • You can manage or cancel your subscription at any time through the Google Play Store.

For Users in the European Economic Area (EEA)

Under the General Data Protection Regulation (GDPR), you have additional rights regarding data processed by our third-party services (Firebase, RevenueCat):

  • Right to Access: You may request information about what data has been collected.
  • Right to Erasure: You may request deletion of data held by third-party services.
  • Right to Restriction: You may request that processing of your data be restricted.
  • Right to Data Portability: You may request your data in a structured, machine-readable format (the App’s backup feature provides this for locally stored data).
  • Right to Object: You may object to the processing of your data.

To exercise any of these rights, please contact us at qptv@sudareq.com. We will respond within 30 days.

Legal Basis for Processing:

  • Firebase Analytics: Legitimate interest in understanding App usage and improving the App.
  • Firebase Crashlytics: Legitimate interest in maintaining App stability.
  • RevenueCat: Contract performance (managing your subscription).

8. Children’s Privacy

qpTV is a general-audience application. It is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13.

The App includes optional parental control features (PIN protection and daily watch time limits) as a convenience for families. These features operate entirely on your device and do not involve any collection or transmission of children’s data.

If you believe that a child under 13 has provided personal information through the App, please contact us at qptv@sudareq.com and we will promptly investigate and address the issue.

9. International Data Transfers

  • Local Processing: Your data is primarily stored and processed locally on your device.
  • Third-Party Services: Data collected by Firebase (Google) and RevenueCat may be processed on servers located outside your country of residence, including in the United States. These companies maintain appropriate safeguards for international data transfers, including Standard Contractual Clauses where applicable.
  • Your IPTV Provider: Data may be transferred to your IPTV provider’s servers, which may be located in different countries.

10. Data Retention

  • Local Data: Stored on your device until you delete a profile, clear the App’s data, or uninstall the App.
  • Firebase Analytics Data: Retained by Google according to their standard retention policies (default: 2 months for user-level data; aggregated reports retained indefinitely).
  • Firebase Crashlytics Data: Crash reports are retained by Google for 90 days.
  • RevenueCat Data: Subscription data is retained by RevenueCat as long as necessary to provide subscription services and as required by applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

  • Notification: We will update the “Last Updated” date at the top of this policy when changes are made.
  • Continued Use: Your continued use of qpTV after any changes constitutes your acceptance of the updated Privacy Policy.
  • Right to Discontinue: If you do not agree with the changes, you may stop using the App and delete your data.

12. App Permissions Explained

The App requests the following Android permissions, each for a specific and necessary purpose:

Permission Purpose
Internet Required to stream content, fetch playlists, load EPG data, and communicate with Firebase and RevenueCat
Access Network State Check if a network connection is available before attempting to stream
Wake Lock Keep the device awake during video playback so the screen does not turn off
Foreground Service (Media Playback) Continue audio/video playback when the App is in the background
Post Notifications Show program reminder notifications that you have scheduled (mobile only)
Schedule Exact Alarm Schedule program reminders at precise times (mobile only)

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Sudareq
Email: qptv@sudareq.com

We will respond to your inquiry within a reasonable timeframe.

Thank you for trusting qpTV with your streaming experience.