The legally binding version of this document is the French one. This English version is a courtesy translation.

Last updated: 2026-10-25

Privacy Policy — Tivera

Effective date: 2026-10-25 Publisher: Tralles Software LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA Contact: contact@tivera.tv — privacy: privacy@tivera.tv

The French version is the binding reference; the other languages are courtesy translations.

Introduction

Tralles Software LLC publishes Tivera, an IPTV player for Android (mobile and TV). Tivera works on a "bring your own content" basis: you import your own streams (M3U, Xtream Codes, EPG). We host no content and provide no channels.

This page explains what data is processed, why, and how to exercise your rights. By using the app, you agree to this processing.

The essential point in one sentence: your playlists and panel credentials stay encrypted on your device; we only receive the data described below, and never your credentials.

Lawful basis and data processed

We only process personal data where we have a lawful basis under the GDPR.

What stays on your device

Your M3U playlists, Xtream credentials, EPG URLs, recordings and parental code are stored encrypted locally. We have no access to them, and they never leave your device, even with a Tivera account.

Your favourites, watch history, profiles and preferences are also on your device. If you use sync across devices (Premium), some of them are sent to our server: see the Tivera account section below.

When you play a stream, your device contacts directly the server you configured: that server sees your IP address and your credentials. We are not a recipient of those exchanges and have no control over those servers.

Lawful basis: performance of the contract.

Catalogue enrichment

To show logos, genres, summaries and the TV guide, the app downloads a public database from our server. When a channel, film or series in your playlist is not in it, the app sends its name (and its year, if the name includes one) to our server, which returns the information it has. These requests contain neither your account, nor your device identifier, nor your panel credentials, and we do not keep the names received.

Lawful basis: performance of the contract.

Tivera account (optional, tied to Premium)

Data: email address, one-time code (no password), subscription status, registered devices.
Purpose: create your account, manage your subscription, sync your profiles, favourites and history across your devices.
Creation: your account is created as soon as you first request a sign-in code. If it is never confirmed with that code, it is deleted automatically after 24 hours.
To sync, we receive the names of your profiles, lists and sources, the server address of each source (without path or credentials), and the name and logo of the items in your history and your favourite lists. We also receive some of your display settings (theme, colour palette, sounds, data saver). Your plain favourites are identified only by opaque fingerprints. We never receive your panel credentials or the address of your streams.
With each profile, we also receive the chosen avatar (an image built into the app, never a photo), whether or not it is a child profile and its age level, and, if the profile is protected by a code, that code, encrypted on your device before it is sent.
To name a profile, especially a child's, prefer a nickname to a real first name: that name is part of what is synced.

Lawful basis: performance of the contract.

Security log: sensitive operations on your account (creating the account, revoking a device, QR code pairing, an export or deletion request, granting or withdrawing Premium) are recorded together with the action performed, your IP address, the technical identifier of your app and the domain of your email address — never the full address. This record is used to detect abuse and to evidence how your requests were handled.

Lawful basis: legitimate interests (security and fraud prevention).

Purchases (Premium)

When you subscribe to Premium (monthly or yearly), Google Play processes the payment. We never receive your payment card details. We receive your purchase token to have it verified by Google, then keep its fingerprint, the Google order ID, the plan you chose, its expiry date and, where applicable, its refund. We also keep the token itself, encrypted, solely to ask Google whether your subscription has been renewed: it is never written to our logs and it is deleted with your account.

Lawful basis: performance of the contract.

Free trial on Android TV

Without Premium, you can watch your content on a TV for 7 days from the first launch of the app on that TV.

Data: a technical identifier of your TV, reserved for the trial, the start date and the end date of your trial, the app version (number and release type).
Purpose: offer the trial only once per TV. The identifier is computed from an identifier that Android provides to our app: it does not change when you reinstall the app or clear its data, only when the TV is reset to factory settings.
It is sent when the app is launched on the TV, after age confirmation, even without an account. It contains neither your email address, nor your account, nor your sources. Your IP address is used only to limit the number of requests and is not kept.
This data is sent only to our own server (api.tivera.tv). It is used for nothing else (no diagnostics, no audience measurement, no advertising), is not linked to your account, and is neither sold nor shared.
In the EU, EEA and United Kingdom, nothing is sent: your trial is counted only on your TV.
Retention: 12 months after the end of your trial, then automatic deletion.

Lawful basis: legitimate interests (preventing the same TV from benefiting from the free trial more than once).

Technical diagnostics (can be turned on and off)

Data: crash reports, usage statistics (screens visited), performance log, device model, pseudonymous technical identifier.
The performance log also contains technical events about ads (for example their loading or their failures), including the age level applied to ads for the active profile. They never contain the content of an ad, your name or your email address.
Purpose: fix bugs and improve stability.
This data is sent only to our own server (api.tivera.tv). Nothing is sent to Google for these purposes.
Exception, reading the pairing QR code: the app includes ML Kit, a Google library that runs on your device. ML Kit sends Google technical information (device, app, performance, errors, device identifiers) for the diagnostics and usage statistics of that library. No camera image is transmitted, and the setting below has no effect on this.
Setting: Settings → Privacy & legal → Diagnostic data.

Lawful basis: your consent in the EU, EEA and United Kingdom (off by default); legitimate interests elsewhere, with the right to object at any time without any degradation of the service.

Advertising (free version only)

The free version displays Google AdMob advertising, which uses the Android advertising identifier (AAID) and your IP address. In the EU, EEA and United Kingdom, personalised advertising is only enabled with your consent, collected through the Google consent banner; otherwise the ads are non-personalised. Premium removes all advertising. No advertising is shown on Android TV.

Where this consent is requested, you can change or withdraw it at any time in the app: Settings → Privacy & legal → Ad choices.

To show these ads, Google may collect information about your activity over time, in Tivera and in other apps or websites.

Google also tells us the estimated revenue of each ad shown: see the "Audience and ad revenue measurement" section.

Lawful basis: consent (personalised advertising); legitimate interests (non-personalised advertising).

Audience and ad revenue measurement

This measurement is separate from technical diagnostics: it is presented to you separately at first launch and has its own setting.

Data: one summary per day of use: the date, your plan (free or Premium), the number of times you opened the app that day and, for each ad format (banner, native or full-screen), the number of ads shown and their total revenue as estimated by Google, with how precise that estimate is. The summary comes with your device's pseudonymous technical identifier, the device type (phone or TV) and the app version. It contains neither your name, nor your email address, nor your sources, channels or history, nor the content of the ads.
Purpose: know whether the app keeps the users of its free version and what the ads earn it.
From these summaries, our server keeps the first and last day of use of each installation, and derives anonymous weekly statistics from them (active installations, ads shown, revenue, departures, i.e. free installations unused for 14 days), which contain no identifier.
This data is sent only to our own server (api.tivera.tv). It is neither sold nor shared.
It is not linked to your account. If you have one, we look up the data of your registered devices to include it in the export of your data and to delete it with your account. Data from a device used without an account, or removed from your account, cannot be linked to anyone: we cannot look it up, and it is erased automatically at the end of its retention period.
Retention: 90 days for the daily summaries; 90 days after your last day of use for the summary of your installation; 25 months for the anonymous statistics.
Setting: Settings → Privacy & legal → Audience measurement.

Lawful basis: your consent in the EU, EEA and United Kingdom (off by default); legitimate interests elsewhere, with the right to object at any time without any degradation of the service.

Recipients

Google AdMob — free version only. Google's policy
Google Play Billing — Premium purchases. Google's policy
Google ML Kit — technical information from the library that reads the pairing QR code (see "Technical diagnostics"). Google's policy
Google Firebase Remote Config — test (beta) version only, distributed to testers outside Google Play: at startup, it checks that the test period is still open. Google then receives the app's Firebase installation ID, your IP address and technical information (Android and app versions, device language, country and time zone). Other versions do not make this call. Google's policy
Brevo — sending the email that contains your sign-in code: Brevo receives your email address and this code. Brevo's policy
Cloudflare — network delivery for our site and our API; stores no personal data.
The IPTV and EPG servers you configure — recipients you choose, outside our control.

We do not sell any data and do not share it for any other advertising purpose.

International transfers

Our server is hosted in Morocco. For users in the EU and EEA, these transfers rely on your consent (diagnostics and audience measurement) or on the performance of the contract you request (account and sync). Google transfers to the United States under standard contractual clauses and the EU–US Data Privacy Framework.

Retention

Local data: for as long as the app is installed.
Diagnostics: 90 days, then automatic deletion.
Audience measurement: see the "Audience and ad revenue measurement" section.
Security log: 90 days, then automatic deletion. When you delete your account, the information identifying you is erased from it and only the anonymous record of the operation is kept.
Sign-in code emails (Brevo): the sending log is deleted after 1 month; the content of the email, and so the code, is not kept.
Account, profiles, favourites, favourite lists, history, synced settings and sources: until you delete your account.
Deleted profile: its favourites, history and lists are erased from our server 90 days after its deletion reaches us. All that then remains of the profile and of each of its lists is a technical trace, with no name or content, which lets your other devices learn of the deletion; it is erased with your account.
Account never confirmed: deleted automatically after 24 hours.
Purchases (token fingerprint, encrypted token, order ID, plan, expiry date): until you delete your account.
Free trial on Android TV: 12 months after the end of the trial, then automatic deletion.
Names sent for enrichment: not kept.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time.

To exercise them: privacy@tivera.tv — we reply within 30 days. You may also lodge a complaint with the data protection authority in your country.

The export of your data does not contain the codes of your profiles: we only receive a version encrypted on your device, which we cannot read.

EU and EEA residents: we have not yet appointed a representative in the European Union (Article 27 of the GDPR). In the meantime, you exercise all your rights directly with us, at privacy@tivera.tv; the representative's contact details will be published here as soon as one is appointed.

California residents: we do not sell your data. In the free version, AdMob advertising may rely on the Android advertising ID: you can reset or delete it in Android settings, and Premium removes all advertising. Your rights of access, deletion and correction are exercised at the same address, within 45 days.

Deleting your account and your data

On the device: Settings → System & Help → Clear cache, or uninstall the app (this erases everything).
Diagnostics: turning the setting off immediately purges pending uploads. Data already sent carries only a pseudonymous technical identifier: on request to privacy@tivera.tv, we look up and delete the data of the devices registered on your account; data from a device used without an account, or removed from your account, cannot be linked to anyone and is erased automatically at the end of its retention period.
Audience measurement: turning the setting off immediately erases the summaries not yet sent. Data already sent by the devices registered on your account is deleted with your account, or on request to privacy@tivera.tv; data from a device used without an account, or removed from your account, cannot be linked to anyone and is erased automatically at the end of its retention period.
Free trial on Android TV: the record of your trial on our server is linked neither to your account nor to your identity. We therefore cannot look it up; it is erased automatically 12 months after the end of the trial.
Account: from the app, or on request to privacy@tivera.tv. Deletion cascades to your account, your profiles (including child profiles), your favourites, your history, your synced settings and sources, your registered devices and your invoices. Export your data beforehand if you wish to keep it.
Premium: cancel the subscription in Google Play before uninstalling.

Security

Your local data is encrypted on the device, and the most sensitive credentials are encrypted a second time using Android's hardware-backed keystore. Exchanges with our servers use HTTPS. Logs and diagnostic uploads pass through filters that strip URLs, credentials and tokens before anything is sent.

The app requests camera access solely to scan a device-pairing QR code: processing happens entirely on your device, and no image is stored or transmitted.

No transmission over the internet and no electronic storage is 100% secure: we cannot guarantee absolute security.

Minors

Tivera is intended for people aged 13 and over. We do not knowingly collect data about children under 13, and neither diagnostics, nor audience measurement, nor the free trial check on Android TV starts before age confirmation. If you are a parent or guardian and believe your child has given us data, write to privacy@tivera.tv and we will delete it.

A 4-digit parental code blocks access to adult content. No advertising is requested or shown on a child profile, or on any profile whose age level is 12 or under.

Cookies and external links

Tivera is a native application: it does not use cookies. The tivera.tv website uses no third-party cookies and no advertising or analytics scripts. Since it uses no advertising or analytics tracker, the website works the same way whether or not your browser sends a "Do Not Track" signal. In the app, advertising choices are described in the "Advertising" section.

The app and the site may contain links to services we do not operate. We recommend reading their own policies: we control neither their content nor their practices.

Changes

We may update this policy. Any material change is announced in the app, and the effective date above is updated.

Contact us

General: contact@tivera.tv
Privacy: privacy@tivera.tv
DMCA: dmca@tivera.tv — see the DMCA Policy
Tralles Software LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA