This policy is published in English and French. Until it is translated into your language, the English version applies.
Privacy Policy
Last updated: October 7, 2026
Tivelio is a media player. It ships with no content: you add your own source (an Xtream Codes server or an M3U playlist). This policy explains what personal data the Tivelio apps and the tivelio.com website process, why, for how long, and how to exercise your rights.
Who is responsible
The controller is FLASHLABS DEV S.R.L., Strada Scarlatescu 27-29, Ground Floor, Room 3, Sector 1, Bucharest, Romania. Contact: support@tivelio.com.
Data that stays on your device
Your sources (server addresses, usernames, passwords, playlists), your catalogue, your favourites, your viewing history, your settings and the app’s diagnostic log are stored on your device only. We never receive them.
Two exceptions, both started by you:
- Pairing between your devices. When you copy your setup from one device to another, the configuration is encrypted on the sending device and decrypted on the receiving one (end-to-end encryption). Our server only relays the encrypted message and cannot read it. The pairing code expires after a few minutes.
- Your media sources. The app connects directly to the servers you add, to load the catalogue, the guide and the streams. Those servers are run by third parties we do not control; their own privacy practices apply. Some of them only support unencrypted (HTTP) connections.
Data we process
Tivelio Pro licence
When you use or buy Tivelio Pro, our licence server stores:
- a random device identifier generated by the app, the public key of your device (used to verify that requests really come from it), the device name and platform (for example “Pixel 8, Android”), and the dates it was added and last seen;
- your licence: its key, status, type (subscription or lifetime), expiry date, the store it was bought from, and the purchase references sent by that store;
- your email address, when you buy on our website or give it to recover your licence;
- the language of the app, to reply in it.
Purpose: provide the licence you bought, let you use it on your devices, prevent fraud, and answer your requests. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in preventing fraud (Art. 6(1)(f)).
Purchases
Purchases inside the app are handled by the store you use (Apple App Store, Google Play, Amazon Appstore). We use RevenueCat to receive and verify these purchases: RevenueCat receives a pseudonymous identifier of your device (derived from a device identifier and hashed, never your name) and your purchase history in our app. Purchases on our website are handled by Stripe, which collects your payment details and email; we never see your card number. Legal basis: performance of the contract, and our legal obligations for accounting and tax records (Art. 6(1)(c)).
Advertising (free version)
The free version of the app may show ads served by Google AdMob. AdMob can collect your device’s advertising identifier, your IP address, information about your device and how you interact with ads, to show, measure and limit ads. In the European Economic Area, the United Kingdom and Switzerland, we ask for your consent before any personalised advertising, through Google’s consent tool; you can change your choice at any time in the app settings. Without consent, only non-personalised ads are shown. You can also reset or disable your advertising identifier in your device settings. Tivelio Pro has no ads. Google’s privacy policy applies: https://policies.google.com/privacy. Legal basis: your consent (Art. 6(1)(a)) for personalised ads; our legitimate interest for non-personalised ads.
Information about films and series
To complete film and series pages (cast photos, links), the app sends public title identifiers to Wikidata / Wikimedia. They receive your IP address as for any web request, but no data about you.
Website and cookies
tivelio.com uses:
- a language cookie (
tivelio_locale, one year) remembering the language you chose: strictly necessary, no consent needed; - a receipt cookie (
receipt_session, 15 minutes) set after a payment, so the confirmation page can show your licence: strictly necessary; - analytics and advertising cookies, only with your consent, given or refused through the cookie banner and changeable at any time from the link at the bottom of each page.
Our hosting provider (Cloudflare) processes connection data (IP address, browser) to deliver the site and protect it against attacks.
Who receives data
Only the providers needed to run the service, each bound by a data processing agreement: Cloudflare (hosting, licence server), RevenueCat (in-app purchases), Stripe (website payments), Resend (licence emails), Google (AdMob, Google Play), Apple and Amazon (their stores). We do not sell your data.
Some of these providers are located in the United States. Transfers rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework or on its standard contractual clauses.
How long we keep data
- Device identifier, device key, name and platform: as long as the device is attached to a licence, then deleted.
- Licence, purchase references and email: for the life of the licence, then for the period required by accounting and tax law.
- Pairing codes: a few minutes. Purchase sessions started from a device: 30 minutes.
- Website connection logs: a few days.
Your rights
You can request access to your data, its correction, its deletion, its portability, and object to or restrict its processing. Where processing relies on your consent, you can withdraw it at any time. Write to support@tivelio.com from the email address linked to your licence, or include your licence key.
You may also complain to the Romanian data protection authority (ANSPDCP, www.dataprotection.ro) or to the authority of your country.
Children
Tivelio is not directed to children under 16 and we do not knowingly collect their data. Ads are never targeted at children.
Security
Our own services only accept encrypted connections (HTTPS). Requests from your devices to our licence server are signed with a key that never leaves your device.
Changes
We will publish any change on this page and update the date above. Significant changes will be announced in the app.