Privacy Policy

Version 2026-10-27. Data controller: Maurits Marc van Gelder, trading as Zaplio IPTV Player, Almancil, Algarve. Contact: support@zaplio.app.

What we store

To run sync, the free trial and subscriptions, our server stores: a hashed account key; device IDs, device names and last-active times; your synced settings — playlist names, server addresses, usernames and passwords, M3U and guide links, favourites, watch history and resume points; while something is playing, the title and device name (removed within a minute after playback stops) so the stream limit works; when you accepted these terms; your plan, its dates and payment references. On Samsung TVs we store a one-way hash of the TV's hardware ID so each TV gets one free trial.

What we do not do

No advertising, no tracking or analytics SDKs, no selling or sharing of your data. Video never passes through our servers. On phones and in web browsers our server may fetch playlist and guide text on your behalf when the browser blocks direct access; it does not keep a copy.

Device details

So that you and our support can tell your devices apart, we store for each device linked to your account: the type and model (on Android also the device name you chose), the app language and version, and an approximate location (city and country) and internet provider derived from its IP address. We do not use GPS or your precise location. These details are deleted together with the device or the account.

Account email and activity log

If you log in on our website or pay for a plan, we store your email address to identify your account, send login codes, receipts, renewal reminders and important service messages. For security, fraud prevention and customer support we keep an activity log of account events: account creation, logins and logouts, devices added or removed, plan changes, payments, renewals and failed payments, with date, time and IP address. We keep this log for up to 2 years. Emails are sent through our email provider (Resend), which processes your address only to deliver them.

TV connection reports

When you send a video to a TV (AirPlay, LG, Samsung or other Smart TVs), the app may send us a short technical report of what the TV and your network answered, so we can fix connection problems. It contains device names, local network addresses and the channel or video name, but never your playlist username or password (they are removed on your device). Reports are kept for up to 90 days.

Payments

Payments on our website are handled by Stripe. We never see or store your card details. Stripe's own privacy policy applies to the payment. For automatic renewals Stripe keeps your payment method on file; you can remove it or cancel at any time in your account. If you subscribe in the App Store or Google Play, Apple or Google handle the payment under their own privacy policy; we receive only a signed purchase record (the plan, its dates, a transaction number and an anonymous account token) to unlock your account.

Why (legal basis)

To provide the service you asked for (contract), to prevent trial abuse and fraud (legitimate interest), and to keep purchase records as required by tax law (legal obligation).

Where

Data is stored with Cloudflare, our hosting provider, which may process it outside the EU under the European Commission's standard contractual clauses.

How long

Until you delete your account (Settings → Delete my account, or on zaplio.app/account), except purchase records, which we keep as long as tax law requires.

Your rights

You can ask for access to, correction, export or deletion of your data, and object to processing, by contacting support@zaplio.app. You may also complain to your data-protection authority — in Portugal, the CNPD (www.cnpd.pt).