Last updated: 31 August 2026
IPTelvza (“the app”, “we”) is an iOS application that plays IPTV streams you supply yourself. For any question about this policy: support@iptelvza.com.
Almost all of the app runs locally on your device. Some data is processed solely to make the app work (“App Functionality”), and never for advertising or tracking.
| Data | Why | Where |
|---|---|---|
| Email address | To create and secure your optional account (sign-in, multi-device sync, “Sign in with Apple”). | Our authentication provider (Supabase). |
| Account identifier | To attach your preferences to your account for syncing. | Supabase. |
| Usage data: favourites, watch history, searches, settings, reminders, custom categories | So you can find them again and sync them across your devices if you are signed in. | On the device, and — if signed in — in your account space. |
| Your IPTV source credentials (URL, username, password / Xtream key) | To connect to your provider and play the streams. | On the device only, in the iOS Keychain. Never synced, never sent to our servers. |
If you do not use an account, none of this data leaves your device (apart from the strictly necessary requests described in section 3).
| Service | Role | Data sent |
|---|---|---|
| Supabase | Authentication and account sync. | Email, identifier, your preferences (favourites, history, …). No data from your IPTV source. |
| The Movie Database (TMDB) | Artwork, synopses and metadata for movies and shows. | Title queries used to fetch artwork. This product uses the TMDB API but is not endorsed or certified by TMDB. |
| Trakt (optional) | If you connect it: watchlists and history. | Only if you deliberately link a Trakt account (OAuth). |
| Google Cast SDK | Casting to a television (Chromecast). AirPlay is handled by iOS and does not go through this SDK. | Device discovery on your local network — it only starts when you open a player, not when the app launches. When you start casting, the stream address is sent to the receiver: with most Xtream providers that address contains your username and password, because that is how the provider authenticates playback — without them the television could not play. That is the only data sent: no title, no artwork, no account identifier, and no usage data. You can turn casting off entirely (Chromecast and AirPlay) in Settings ▸ Playback ▸ “Allow casting”. |
| Your IPTV provider | To deliver the streams YOU configured. | Your credentials go straight from the phone to the server you entered. |
The recording and offline-download features only save streams from your own source, on your device. These files are never sent to us. You are responsible for respecting the rights attached to the content you play or record through your subscription.
Local data stays on your device until you delete it (in the app, or by uninstalling the app). If you have an account, you can delete it directly in Settings → Account → Delete account: this removes your authentication account and the associated preference data.
Depending on your jurisdiction (GDPR, CCPA, and others), you have rights of access, rectification, erasure and portability. Most can be exercised directly in the app; for anything else, write to support@iptelvza.com.
IPTelvza is not directed at children and does not knowingly collect children’s data. A parental “Kids” mode with a PIN and a category allow-list is provided for parents; adult content is hidden by default.
Your IPTV source credentials are stored in the iOS Keychain. Exchanges with our providers use HTTPS. Connections to your IPTV provider use whichever protocol (http/https) that provider requires; that choice is yours.
We may update this policy; the date at the top of the page shows the latest revision.