19 May 2025 – Last Updated
Bright Code AB Org.-nr: 559078-9052
Address: Gaggegatan 18E, 302 42 Halmstad, Sweden
Tel: +46702273797
Email: info@safeiptvplayer.com
Support Website: safeiptvplayer.com
1. Introduction
At Bright Code AB, we are committed to respecting and protecting the privacy of our users. This Privacy Policy explains how we handle information within our IPTV Player App (“the App”). Our goal is to keep your data private, secure, and limited only to what is essential for the app’s functionality.
We collect only limited technical data (Device ID, IP address in API calls) necessary to operate the App. The App functions as a standalone media player and does not include any server-side content or analytics tracking.
The App uses RevenueCat to manage subscriptions purchased through Google Play and the Apple App Store.
By using the App, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use the App.
2. Information We Collect
We designed our app to collect only the minimal data necessary to provide its core functionality. We do not collect any personal information such as names, email addresses, GPS location, or device usage analytics.
The App may access and process the following types of information:
he App may access and process the following types of information:
• M3U Playlist Links: When users input a custom M3U playlist, the link is stored locally on the user’s device. We do not have access to or store this data on our servers.
• Xtream Codes Login Information: If a user chooses to connect via Xtream Codes, the App stores the provided server URL, username, and password locally on the device to enable streaming from that service. This data is not transmitted or shared with us.
• Device ID: We collect the unique device identifier (Device ID) solely for the purpose of verifying valid subscriptions with Google Play or the App Store. This is a standard method to ensure your app license is linked to a legitimate device.
• Purchase Receipt & Transaction Metadata: When you buy or renew a subscription the App passes an anonymised purchase receipt to RevenueCat’s servers for validation. The payload can include your Device ID and the encrypted receipt issued by Apple or Google. We do not see payment‑card details.
• IP address & user‑agent: When the App retrieves artwork from the IMDb API, your device’s IP address and user‑agent are transmitted to Amazon (IMDb) servers; this is inherent to making the HTTPS request and is not stored by Bright Code AB.
No additional data is collected, stored, or shared — either manually or automatically.
3. How We Use the Information
The limited information collected by the App is used solely for essential operational purposes. Specifically:
M3U Playlist Links and Xtream Codes Login Information are used exclusively to enable playback of IPTV content from sources the user provides. This data remains stored only on the user’s device and is not accessed, transmitted, or analyzed by us in any way.
Device ID is used only to:
• Verify that the app is installed on a valid device associated with a paid subscription from Google Play or the App Store.
• Prevent unauthorized use of the App.
Purchase receipts processed via RevenueCat are used only to confirm that your subscription is active and to unlock premium features in the App.
We do not use this information for advertising, analytics, profiling, or any form of tracking. We do not share or sell any data to third parties.
4. Storage and Security of Data
We prioritize user privacy and security by ensuring that all sensitive data is handled locally and never transmitted to external servers.
Local Storage Only: All user-provided data, including M3U links and Xtream Codes credentials, are stored only on the user’s device. We do not have access to this data, nor do we store it in any cloud or external system.
RevenueCat & IMDb: Transmission to these third parties is encrypted (TLS 1.2+). RevenueCat stores purchase receipts on EU‑based servers under Standard Contractual Clauses (see §5). IMDb requests are stateless; Bright Code AB does not log or store the IP address.
Device ID: The device ID is collected solely for subscription verification through the official app stores. It is handled through standard platform tools and is not stored by us outside of app store systems.
No Remote Access or Collection: The app does not contain tracking tools, remote access capabilities, or data collection mechanisms beyond what is explicitly stated.
Security by Design: As data is confined to the device, users are encouraged to use secure IPTV sources and take standard device-level precautions (e.g., using a device lock or app lock where applicable).
Users can clear all saved data simply by uninstalling the app, which will delete all associated locally stored information.
5. Third-Party Services and APIs
The App integrates with a single third-party service:
IMDb API: We use the IMDb API strictly to display publicly available metadata related to movies and TV shows — such as titles, descriptions, and cover images. This enhances the user interface by providing recognizable content information.
RevenueCat: We use RevenueCat, Inc. (USA) as a subscription‑management platform. RevenueCat receives encrypted purchase receipts and a pseudonymous Device Identifier to validate your subscription. Transfers rely on the European Commission’s Standard Contractual Clauses. RevenueCat’s privacy policy is available at https://www.revenuecat.com/privacy.
Important Notes:
• No user data is sent to IMDb or any other third-party services.
• The integration does not involve tracking, user authentication, or interaction with IMDb beyond the basic metadata request.
• Use of the IMDb API is governed by IMDb’s terms of use and privacy policy, which can be reviewed at https://www.imdb.com/privacy.
• Apple and Google act as separate controllers of your payment information. Bright Code AB never receives card or account details.
• Aside from this, the App does not use any analytics services (e.g., Google Analytics), advertising SDKs, or third-party tracking tools.
6. Children’s Privacy
Our IPTV Player App is not directed to children under the age of 16, and we do not knowingly collect or store any personal information from users in this age group.
Because the App does not require account creation, does not collect identifiable personal data, and does not include in-app communication or sharing features, we have minimized any potential privacy risks for younger users.
Parents or guardians who believe their child has used the App inappropriately or entered personal data may contact us for additional guidance at info@safeiptvplayer.com.
7. User Rights and Controls
Because the App does not collect or store any personal data on remote servers, users maintain full control over the limited information stored locally on their device.
You can manage or remove your data at any time using the following methods:
M3U Links and Xtream Codes Credentials: These are stored locally and can be modified or deleted directly within the App interface (if such a function is available), or by uninstalling the App from your device.
Device ID: This identifier is handled by the operating system and is only used for app store license verification. You cannot delete this, but it is not accessible or viewable by the app developer.
If at any point you wish to stop using the App and erase all associated data, you can simply uninstall the App, which will automatically remove all saved information.
Since we do not store any data on our end, there is no need to request data deletion — you are in full control.
Under EU law you have the right to request access, rectification, erasure, restriction or portability of your personal data and to object to its processing. Most of these rights can be exercised by deleting the App or the local data it stores.You also have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm, Sweden.
8. Data Retention
We do not retain any user data on external servers or cloud storage. All user-supplied data — such as M3U links and Xtream Codes credentials — is stored only on the user’s device and is retained for as long as the app remains installed.
Once the App is uninstalled, all locally stored data is permanently deleted from the device.
We do not have access to, nor do we back up, any user data. Therefore, if a user deletes the App, any configuration or login information must be re-entered upon reinstallation.
No personal or sensitive data is collected or stored beyond what is necessary for core app functionality, and no retention policies apply to user identities or analytics because such data is never collected.
Purchase receipts stored by RevenueCat are deleted 60 days after your subscription lapses, in accordance with RevenueCat’s retention policy.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or the functionality of the App.
When updates are made:
• We will revise the “Last Updated” date at the top of the policy.
• In cases of material changes that affect how your data is handled, we will notify you either through an in-app notice or via the app store listing.
• We recommend reviewing this Privacy Policy periodically to stay informed about how your information is protected.
• Your continued use of the App following any updates signifies your acceptance of the revised policy.
10. Contact Information
If you have any questions, concerns, or requests related to this Privacy Policy or your data, you may contact us at:
Bright Code AB
Email: info@safeiptvplayer.com
Support Website: safeiptvplayer.com
We are committed to responding to privacy-related inquiries promptly and transparently.
You may also raise disputes via the EU Online Dispute Resolution platform at https://ec.europa.eu/odr.** Under the Digital Services Act our single point of contact for authorities is privacy@brightcode.se.