Application: Orvix IPTV (mobile, tablet and Smart TV)
Version: 1.0
Last updated: October 17, 2026
Data controller: DF Prod Lab
This is the English version of the French privacy policy. Both versions have the same content.
This Privacy Policy explains how the Orvix IPTV application processes data related to its use.
The Application is an IPTV media player that lets users import their own M3U/M3U8 playlists, configure their own Xtream Codes compatible sources and play the content available from those sources. The Application does not provide any channels, playlists or subscriptions.
In its basic version, the Application works without any mandatory user account and without any central server required for its operation.
Protecting personal data and the security of information stored on the device are design principles of the Application.
The data controller is:
For any question about personal data protection, you can contact the data controller at the address above.
No data protection officer (DPO) has been appointed.
In its basic version, the Application stores certain information directly on the user’s device.
This information may include:
This data is used to provide the features requested by the user.
The local database is not a centralized storage service. Data on one device is not automatically synchronized with another device.
When the user configures a source using Xtream Codes or an equivalent mechanism, the Application may process:
Secrets are kept in the platform’s secure storage whenever technically possible, in particular the Keychain on Apple devices and an equivalent secure mechanism on Android.
On Smart TVs (Samsung Tizen, LG webOS, Hisense VIDAA), the TV platforms offer no such secure storage to apps: sources and credentials are kept in the Application’s private storage on the TV and are only sent to the server configured by the user.
Passwords are not stored in plain text in the mobile database and never appear in technical logs.
When the user connects to an external IPTV server, the information needed for this connection is sent to that server. The operator of that server may process this information according to its own practices and legal obligations.
The user should therefore check the reliability of the provider to which they send their credentials.
To play a channel, import a remote catalog or retrieve a program guide, the Application sometimes needs to communicate with external servers.
These servers may receive technical data such as:
This processing is carried out to allow the connection, import and playback of the requested content.
External servers are operated by third parties that are not necessarily controlled by the publisher of the Application. Their privacy policy and data retention periods must be checked directly with these operators.
Subject to the features actually included, the Application does not require:
The Application must not collect such data without a functional need, appropriate information and a valid legal basis.
This section will be updated if a future version introduces accounts, synchronization, advertising or analytics services.
Any data processed is used only for specific purposes.
| Purpose | Possible legal basis, depending on the context |
|---|---|
| Store playlists and local preferences | Performance of the features requested |
| Authenticate an IPTV source | Performance of the connection request |
| Load a stream or an EPG | Performance of the requested feature |
| Diagnose a problem, if reports are enabled | Legal basis to be determined and prior information |
| Answer a support request | Pre-contractual measures, contract or other applicable basis |
| Comply with a legal obligation | Legal obligation |
The final legal basis must be determined by the data controller according to the processing actually carried out.
Where consent is required, the user must be able to withdraw it under the conditions provided by the applicable regulations.
In the basic version described by this policy, no advertising tool and no behavioral analytics tool is used.
If advertising SDKs, audience measurement tools, external diagnostic services, synchronization services or other third-party components are added, their operation will be assessed before publication.
This policy will then specify, as applicable:
The information declared in the store privacy sections (Apple, Google, Samsung, LG and others) must match the actual practices of the Application and its third-party components.
The publisher does not sell users’ personal data.
In the basic version, the information needed for connection or playback is sent to the servers that the user configured or asked the Application to access.
Data may also be disclosed when required by law or when necessary to defend legal claims, within the limits set by the regulations.
Any new sharing with a technical provider will be assessed and described transparently.
Data stored locally is kept on the device until it is deleted by the user, replaced, or erased as part of the normal operation of the Application.
Depending on the features actually available, the user can:
Removing a source also deletes the associated secrets where provided by the storage architecture.
Uninstalling generally deletes the Application’s private data, but some exported files or system-managed backups may remain.
On iOS, the Application’s local database may be included in the device’s iCloud or computer backup, depending on the user’s settings; credentials stored in the Keychain are not transferred to another device. On Android, automatic backup of the Application’s data is disabled.
Backup files voluntarily exported by the user from the Application never contain any password or playlist address: after restoring, the user enters their credentials again.
Any data kept by an IPTV provider or other third-party service must be deleted according to that provider’s rules and procedures.
The publisher implements technical and organizational measures proportionate to the risks and characteristics of the Application.
These measures include, where technically applicable:
No computer system can guarantee absolute security. The user remains responsible for the security of their device and the choice of their external providers.
Where the applicable regulations apply, in particular the General Data Protection Regulation (GDPR), data subjects may have the following rights:
To exercise these rights, write to: dfprodlab@gmail.com.
Your request should contain enough information to be processed, without sending an IPTV password or any other unnecessary secret.
The data controller answers within the time limits set by the applicable regulations. A proportionate identity check may be carried out if necessary to protect the data concerned.
For users located in France, the supervisory authority is the Commission nationale de l’informatique et des libertés (CNIL): https://www.cnil.fr/.
The Application may access third-party servers located in different countries, depending on the sources configured by the user.
These connections may involve the transfer of technical data to the countries where these servers are operated.
The publisher does not necessarily determine the location of these servers. The user is invited to consult the terms and privacy policy of their provider.
If the publisher later sets up a cloud service or uses providers that transfer personal data outside the European Economic Area, it will check and implement the safeguards required by the applicable regulations.
The Application is not specifically intended for children.
The user must comply with the rules applicable to the protection of minors and access to content.
If the Application is later designed or marketed as an app for children, additional privacy, permission and design requirements will be assessed before publication.
This policy may be changed to reflect changes in features, legal obligations or processing practices.
The date of the last update is shown at the top of the document.
In the event of a substantial change requiring specific information or consent, the appropriate measures will be taken before the new processing applies.
For any question about this Privacy Policy or data protection:
Data controller: DF Prod Lab
Contact by e-mail only.
E-mail: dfprodlab@gmail.com
Website: https://djibyth714.github.io/orvix-legal/
End of the Privacy Policy.