Last updated: 2026-09-17
Privacy Policy — Tivera
Effective date: 2026-09-17 Publisher: Tralles Software LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA Contact:
contact@tivera.tv— privacy:privacy@tivera.tvThe French version is the binding reference; the other languages are courtesy translations.
Introduction
Tralles Software LLC publishes Tivera, an IPTV player for Android (mobile and TV). Tivera works on a "bring your own content" basis: you import your own streams (M3U, Xtream Codes, EPG). We host no content and provide no channels.
This page explains what data is processed, why, and how to exercise your rights. By using the app, you agree to this processing.
The essential point in one sentence: your playlists and panel credentials stay encrypted on your device; we only receive the data described below, and never your credentials.
Lawful basis and data processed
We only process personal data where we have a lawful basis under the GDPR.
What stays on your device
Your M3U playlists, Xtream credentials, EPG URLs, favourites, watch history, recordings, parental code and preferences are stored encrypted locally. We have no access to them.
When you play a stream, your device contacts directly the server you configured: that server sees your IP address and your credentials. We are not a recipient of those exchanges and have no control over those servers.
Lawful basis: performance of the contract.
Catalogue enrichment
To show logos, genres, summaries and the TV guide, the app downloads a public database from our server. When a channel, film or series in your playlist is not in it, the app sends its name (and its year, if the name includes one) to our server, which returns the information it has. These requests contain neither your account, nor your device identifier, nor your panel credentials, and we do not keep the names received.
Lawful basis: performance of the contract.
Tivera account (optional, tied to Premium)
- Data: email address, one-time code (no password), subscription status, registered devices.
- Purpose: create your account, manage your subscription, sync your profiles, favourites and history across your devices.
- To sync, we receive the names of your profiles, lists and sources, the server address of each source (without path or credentials), and the name and logo of the items in your history and your favourite lists. Your plain favourites are identified only by opaque fingerprints. We never receive your panel credentials or the address of your streams.
Lawful basis: performance of the contract.
Security log: sensitive operations on your account (revoking a device, QR code pairing, an export or deletion request, granting or withdrawing Premium) are recorded together with the action performed, your IP address, the technical identifier of your app and the domain of your email address — never the full address. This record is used to detect abuse and to evidence how your requests were handled.
Lawful basis: legitimate interests (security and fraud prevention).
Purchases (Premium)
When you subscribe to Premium (monthly 3.99 USD or yearly 24.99 USD), Google Play processes the payment. We never receive your payment card details. We receive your purchase token to have it verified by Google, then keep only its fingerprint, the Google order ID, the plan you chose, its expiry date and, where applicable, its refund.
Lawful basis: performance of the contract.
Technical diagnostics (can be turned on and off)
- Data: crash reports, usage statistics (screens visited), performance log, device model, pseudonymous technical identifier.
- Purpose: fix bugs and improve stability.
- This data is sent only to our own server (
api.tivera.tv). Firebase Crashlytics and Firebase Analytics have been removed: nothing is sent to Google for these purposes any more. - Setting: Settings → Privacy → Diagnostic data.
Lawful basis: your consent in the EU, EEA and United Kingdom (off by default); legitimate interests elsewhere, with the right to object at any time without any degradation of the service.
Advertising (free version only)
The free version displays Google AdMob advertising, which uses the Android advertising identifier (AAID) and your IP address. In the EU, EEA and United Kingdom, personalised advertising is only enabled with your consent, collected through the Google consent banner; otherwise the ads are non-personalised. Premium removes all advertising. No advertising is shown on Android TV.
Lawful basis: consent (personalised advertising); legitimate interests (non-personalised advertising).
Recipients
- Google AdMob — free version only. Google's policy
- Google Play Billing — Premium purchases. Google's policy
- Cloudflare — network delivery for our site and our API; stores no personal data.
- The IPTV and EPG servers you configure — recipients you choose, outside our control.
We do not sell any data and do not share it for any other advertising purpose.
International transfers
Our server is hosted in Morocco. For users in the EU and EEA, these transfers rely on your consent (diagnostics) or on the performance of the contract you request (account and sync). Google transfers to the United States under standard contractual clauses and the EU–US Data Privacy Framework.
Retention
- Local data: for as long as the app is installed.
- Diagnostics: 90 days, then automatic deletion.
- Security log: 90 days, then automatic deletion. When you delete your account, the information identifying you is erased from it and only the anonymous record of the operation is kept.
- Account, profiles, favourites, history: until you delete your account.
- Purchases (token fingerprint, order ID, plan, expiry date): until you delete your account.
- Names sent for enrichment: not kept.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time.
To exercise them: privacy@tivera.tv — we reply within 30 days. You may also lodge a complaint with the data protection authority in your country.
California residents: we do not sell your data. Sharing with AdMob can be refused through the consent banner. Your rights of access, deletion and correction are exercised at the same address, within 45 days.
Deleting your account and your data
- On the device: Settings → Clear cache, or uninstall the app (this erases everything).
- Diagnostics: turning the setting off immediately purges pending uploads; for data already sent, write to
privacy@tivera.tv. - Account: from the app, or on request to
privacy@tivera.tv. Deletion cascades to your account, your profiles (including child profiles), your favourites, your history, your synced settings and sources, your registered devices and your invoices. Export your data beforehand if you wish to keep it. - Premium: cancel the subscription in Google Play before uninstalling.
Security
Your local data is encrypted on the device, and the most sensitive credentials are encrypted a second time using Android's hardware-backed keystore. Exchanges with our servers use HTTPS. Logs and diagnostic uploads pass through filters that strip URLs, credentials and tokens before anything is sent.
The app requests camera access solely to scan a device-pairing QR code: processing happens entirely on your device, and no image is stored or transmitted.
No transmission over the internet and no electronic storage is 100% secure: we cannot guarantee absolute security.
Minors
Tivera is intended for people aged 13 and over. We do not knowingly collect data about children under 13, and diagnostics do not start before age confirmation. If you are a parent or guardian and believe your child has given us data, write to privacy@tivera.tv and we will delete it.
A 4-digit parental code blocks access to adult content. On a child profile, advertising is limited to general-audience content, is never personalised, and no advertising identifier is transmitted.
Cookies and external links
Tivera is a native application: it does not use cookies. The tivera.tv website uses no third-party cookies and no advertising or analytics scripts.
The app and the site may contain links to services we do not operate. We recommend reading their own policies: we control neither their content nor their practices.
Changes
We may update this policy. Any material change is announced in the app, and the effective date above is updated.
Contact us
- General:
contact@tivera.tv - Privacy:
privacy@tivera.tv - DMCA:
dmca@tivera.tv— see the DMCA Policy - Tralles Software LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA