Privacy Policy

Last updated: March 2, 2026

This privacy policy describes the processing of personal data in IPTV Buddy products (Android/iOS App, Android TV App, Editor, IPTV Buddy API) and on this website.

1. Controller

Controller responsible for data processing:

Pascal Bossert | BOSSERT.IO

c/o MDC Management#6445

Welserstraße 3

87463 Dietmannsried, Deutschland

Email: privacy@iptvbuddy.app

2. Data processed by product

Android/iOS App (stored locally on your device): We store app settings, profiles, favorites, and session/account information. If you add your IPTV provider credentials in the app, they are also stored locally on your device.

Camera permission (Android/iOS App): Permission to use the camera is required so you can scan QR codes. This is necessary for access to the web editor and for pairing a TV device with your phone.

Mobile ↔ Android TV pairing (local home network only): When you pair the Android/iOS App with the Android TV App, the required data is transmitted exclusively within your local home network between your devices (for example favorites, profiles, and, if used by you, credentials). This pairing data is not transmitted to our servers.

Android TV App (stored locally on your TV device): We store profiles, favorites, history, watchlist, and recording-related information (for example planned or managed recordings) locally on the TV device. Your IPTV provider credentials are also stored locally there only.

Content retrieval: For playback, the app connects to services of your IPTV provider. This involves technically necessary connection data (in particular your IP address and request information).

Program information (EPG): We obtain program data exclusively via epgshare01.online. When retrieving program data, technically necessary connection data is transmitted to this source (in particular IP address and request information).

Public IP address lookup: The app can determine your public IP address via the ipify service (ipify.org). Your IP address is processed to the extent required for this function.

Editor (web): For use of the editor, we process the lists you edit and import/export files. In addition, a session identifier is stored in your browser to technically enable editor functions (for example session mapping/assignment).

IPTV Buddy API: When accessing our API, we process technical connection data (in particular IP address) to operate the service securely and to limit requests (for example protection against misuse). Technical session data is retained only briefly and is not permanently stored as pairing data.

Subscription checks, activation, and device binding: To verify and activate a valid subscription, we process purchase-related references (in particular purchase token), status and validation information, and a unique user ID generated by us. This serves to activate authorized devices, prevent fraud, and enforce usage limits. No accounts with login/password are maintained.

3. Purposes and legal bases

We process personal data to provide app and editor functions (for example playback, favorites/history/watchlist, recordings, import/export), display program information, verify subscriptions and activate features, and ensure secure operation of our systems.

Legal bases are in particular Art. 6(1)(b) GDPR (performance of the usage contract / provision of functions), Art. 6(1)(f) GDPR (legitimate interests, in particular operational security, protection against misuse, enforcement of usage limits, and service stability), and where applicable Art. 6(1)(c) GDPR (legal obligations).

4. Recipients and sources

Store and platform providers: For purchases and subscription management, we use Google Play and the Apple App Store. For verification/activation, we process in particular purchase-related references (for example purchase token) and validation information. Payment data is generally processed by the respective store.

IPTV providers and program data: For playback and program information, requests are sent to your IPTV provider services and to EPG sources (epgshare01.online). These recipients receive technically necessary connection data (in particular IP address and request information).

Public IP lookup service: If you use the corresponding function, your public IP address is queried via ipify (ipify.org). This involves processing technically necessary connection data (in particular your IP address).

Infrastructure/hosting: We may use infrastructure and hosting providers for backend components (for example operation of the IPTV Buddy API).

5. Retention and deletion

Local app data (for example profiles, favorites, history, watchlist, credentials, session data) generally remains stored on your device or TV device until you delete it in the app or uninstall the app.

Editor data: Lists edited by you and import/export files are processed as part of usage. Session identifiers are stored as technically required and are deleted or lose validity after session end or expiry.

Subscription and validation data: We store purchase-related references (for example purchase token), status/validation information, and user ID only as long as required for activation, contract performance, fraud prevention, and enforcement of usage limits, and where applicable to fulfill legal obligations.

IPTV Buddy API: Technical session data is retained only briefly and is not permanently stored as pairing data.

6. Security

We apply technical and organizational measures to protect data (for example access restrictions and protection of sensitive information).

We do not maintain user-specific usage logs for analytics or marketing purposes. Where technical data is required for abuse prevention (for example request limiting), processing is limited to what is necessary and only for a short period.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection.

You also have the right to lodge a complaint with a supervisory authority.