Privacy Policy

Introduction

channl.tv ("we", "us", "our") operates the channl.tv service, a cross-platform BYOS (Bring Your Own Subscription) IPTV, VOD and catch-up streaming application. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website, desktop application, and mobile application (collectively, the "Service").

By using the Service, you agree to the collection and use of information as described in this policy.

Data We Collect

Account information

• Email address
• Display name (optional)
• Password (securely hashed with bcrypt; we never store plaintext passwords)

Device information

• Device name and platform (e.g. macOS, iOS, Windows)
• Device fingerprint (for session management and multi-device limits)
• IP address (logged temporarily for rate limiting and security)

IPTV source credentials

• Xtream Codes or M3U credentials you provide to connect your own subscriptions
• These are encrypted at rest using AES-256-GCM encryption and are never shared with third parties

Usage and sync data

• Watch history (channel names, stream IDs, timestamps)
• Resume positions (playback progress for movies and series)
• Favourites and user-created channel groups
• Application settings and preferences (e.g. time format, theme)
• EPG reminder preferences

Payment information

Payment processing is handled entirely by Stripe. We do not store credit card numbers, CVVs or full payment details. We receive only a Stripe customer ID, subscription status and billing events via webhook.

How We Use Your Data

• To provide and maintain the Service, including user authentication and cloud sync
• To manage your subscription and process payments via Stripe
• To sync your watch history, favourites, groups and settings across devices
• To enforce tier-based feature limits (Free, Standard, Premium)
• To send transactional emails (verification, password reset)
• To send push notifications for EPG reminders (if you opt in via Firebase Cloud Messaging)
• To detect and prevent abuse, fraud and unauthorised access

Data Storage

Cloud storage

Account data, sync data and encrypted source credentials are stored in a MySQL database hosted on Railway. All data is transmitted over HTTPS/TLS.

Local storage

The channl.tv desktop and mobile applications store data locally in a SQLite database on your device. This includes cached channels, EPG data, playback state and locally saved preferences. Local data remains on your device and is not transmitted unless cloud sync is enabled.

Soft deletes

When you delete data (favourites, groups, history), it is soft-deleted in the cloud to support incremental sync across your devices. Soft-deleted records are periodically purged.

Third-Party Services

• Stripe — Payment processing and subscription management. Subject to the Stripe Privacy Policy.
• Firebase Cloud Messaging (FCM) — Push notifications for EPG reminders. Subject to the Firebase Privacy Policy.
• Google Fonts — Font delivery on the website. Subject to the Google Privacy Policy.
• Railway — Cloud hosting infrastructure for our API server and database.

We do not sell your personal data to any third party. We do not use advertising trackers or analytics services that profile individual users.

Data Security

We implement industry-standard security measures to protect your data:

• All API communication is encrypted via HTTPS/TLS
• Passwords are hashed using bcrypt
• IPTV source credentials and sensitive API keys are encrypted with AES-256-GCM
• JWT access tokens expire after 15 minutes; refresh tokens after 30 days
• Rate limiting is enforced on all API endpoints
• Password changes and resets invalidate all active sessions

Data Retention

We retain your account data for as long as your account is active. If you delete your account, all associated personal data, sync data and encrypted credentials will be permanently deleted within 30 days. Anonymised, aggregated usage statistics may be retained for service improvement.

Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — You may request a copy of the personal data we hold about you.
• Right to rectification — You may request correction of inaccurate or incomplete data.
• Right to erasure — You may request deletion of your personal data ("right to be forgotten").
• Right to data portability — You may request your data in a structured, machine-readable format.
• Right to restrict processing — You may request that we limit how we use your data.
• Right to object — You may object to processing based on legitimate interests.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

Children's Privacy

The Service is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

channl.tv
Email: [email protected]