Privacy Policy
Effective Date: January 14, 2026
Important Notice
PickFlick is a media player application—we do not provide, host, or distribute any media content. Users supply their own IPTV sources (M3U playlists, Xtreme Codes credentials, etc.). We have no access to, knowledge of, or control over the content you access through your sources.
1. Scope of This Policy
This Privacy Policy applies to the PickFlick mobile app (iOS/tvOS), the PickFlick web companion app (lite.pickflick.xyz), and related services. This policy also governs how we handle data when you use these applications.
2. Information We Collect
2.1 Information You Provide
| Data Type | Where Stored | Our Access |
|---|---|---|
| Watchlist items (movies, TV shows) | Apple iCloud (iOS/tvOS) | No access (end-to-end encrypted) |
| Watch history & progress | Device + iCloud (iOS/tvOS), IndexedDB (Web) | No access |
| IPTV source credentials | Device only (iOS/tvOS), IndexedDB (Web) | No access whatsoever |
| Custom lists | Apple iCloud (iOS/tvOS) | No access |
2.2 Information Collected Automatically
- Crash reports (optional): If you opt in, Apple may share anonymized crash data with us to help fix bugs
- Analytics (optional): Aggregate app usage statistics through Apple's privacy-preserving analytics
- Web analytics: Page views, browser type, and approximate location via privacy-respecting analytics
2.3 What We Do NOT Collect
- ❌ Your IPTV source credentials (host, username, password)
- ❌ Content you watch or stream
- ❌ M3U playlist contents or EPG data
- ❌ Channel or program information from your sources
- ❌ Your viewing patterns or watch history
- ❌ Titles or metadata from your IPTV streams
3. How Your Data Flows
3.1 IPTV Source Connections
When you add an IPTV source (Xtreme Codes or M3U/XML), all API requests go directly from your device to your IPTV provider. PickFlick acts as a player interface only—we never see, store, or proxy your credentials or the content you access.
3.2 Third-Party Services We Use
| Service | Purpose | Data Shared |
|---|---|---|
| TMDB (The Movie Database) | Movie/TV show metadata and images | Search queries only |
| TheSportsDB | Sports event information | Event/team queries only |
| Apple CloudKit | Sync watchlists across devices | Your data (encrypted, Apple-managed) |
| Your IPTV Provider | Stream content via your subscription | Your credentials (device-to-provider only) |
4. Data Sharing
We do NOT sell your personal data. We only share data with:
- Apple: For CloudKit sync and optional analytics (subject to Apple's privacy policy)
- Legal requirements: When required by law or to protect our legal rights
5. Data Retention
- Device data: Stored until you delete the app or clear app data
- iCloud data: Stored until you delete it from your Apple account
- Web (IndexedDB): Stored until you clear browser data or use in-app delete options
6. Your Rights
All Users
- Delete your data: Remove the app to delete local data; manage iCloud data via Apple settings
- Opt out of analytics: Disable in iOS Settings> Privacy > Analytics & Improvements
- Export your data: Your watchlist data is exportable from within the app
US State Privacy Rights
California (CCPA/CPRA): You have the right to know what data we collect, request deletion, and opt out of any sale (we do not sell data).
Virginia, Colorado, Connecticut, Utah: You have similar rights to access, delete, and opt out under your state's privacy laws.
EU/UK/EEA Residents (GDPR)
You have rights to access, rectification, erasure, restriction, portability, and objection. Since we don't collect meaningful personal data, most of these rights are exercised through Apple's iCloud controls. Our lawful basis for any processing is legitimate interest (analytics) and performance of contract (providing the app).
7. Security
- IPTV credentials are stored locally using platform-native secure storage
- iCloud data is encrypted by Apple
- All network communications use HTTPS/TLS encryption
- We do not maintain servers that store your personal data
8. Children's Privacy
PickFlick is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated through the app or website. Your continued use after changes constitutes acceptance.
10. Contact Us
For privacy inquiries or to exercise your rights:
Email: privacy@pickflick.xyz
Last updated: January 14, 2026