Legal

Privacy Policy

Last updated 31 July 2026. Applies to Tivsy for iPhone and iPad.

What Tivsy stores, and where

All of the following is held locally on your device and is included in your own encrypted device backups if you make them. None of it is sent to us, because there is nowhere to send it to.

• Source addresses. The playlist URL, panel host or media-server address you enter, stored in a local database.
• Credentials. Usernames and passwords for your sources are held in the iOS keychain, the part of the system designed for secrets. They are never written to the database, to a log, or into any file in plain text.
• Your library. The channel, film and series listings your provider returns, cached locally so the app opens instantly and works on a poor connection.
• Your choices. Favourites, watch positions, per-channel preferences such as audio track and aspect, the interface language, and the parental PIN — which is also in the keychain.

What Tivsy does not do

• No analytics or usage tracking of any kind. There is no third-party SDK collecting events, sessions or screen views.
• No advertising identifier collection and no cross-app tracking. Tivsy does not ask for App Tracking Transparency permission because it has nothing to track you with.
• No crash reporting service. Crashes are reported to us only if you choose to share them through Apple's own system in iOS Settings, and Apple's reports carry no personal content.
• No account, no sign-in, no email address required, no profile.
• No sale or sharing of data, because none is collected.

Network connections

Tivsy connects to exactly three kinds of place, and only ever because you asked it to:

• Your sources. The servers whose addresses you entered — to fetch your listings, your programme guide and the video itself. What those servers log is governed by their operator's policy, not ours.
• Artwork hosts. Poster and logo images referenced by your own provider's data, fetched directly from wherever your provider points.
• Apple. For in-app purchases and subscription status, handled entirely by StoreKit. Apple tells Tivsy whether an entitlement is active and nothing else; we never see your payment details or your Apple Account.

Many providers serve plain HTTP rather than HTTPS. Tivsy permits that, because otherwise the app would not work with the majority of real subscriptions — but it means traffic between your device and your provider may be unencrypted. That is a property of the server you chose, not of Tivsy, and it is worth knowing.

Advertising

The free version of Tivsy shows advertising on browsing screens. Advertising never appears over playback, never interrupts a stream, and is removed entirely by the Premium purchase. Advertising is served by Google AdMob, and Tivsy requests non-personalised ads only. To fill a request AdMob may process technical data such as the device's IP address, an advertising identifier and coarse locale; Tivsy never passes it your identity, your sources, your library or anything about what you watch. Google's handling of that data is described in its own policy for partner sites.

Children

Tivsy is not directed at children and collects nothing from anyone, of any age. It includes a parental PIN that hides adult categories, off by default in the safe direction: those categories start hidden and take a deliberate action to reveal.

Deleting your data

Removing a playlist in Settings deletes its listings and its keychain entry. Deleting the app removes everything: the database, the cached artwork and every keychain item it created. There is no server-side copy to request the deletion of.

Changes

If this policy changes in a way that affects what Tivsy stores or sends, the date at the top changes with it and the new version appears here before the app version that needs it ships.

Contact

Questions about this policy: privacy@tivsy.app.