Privacy Policy

Last updated: 14 April 2026

This Privacy Policy explains how Better IPTV ("Better IPTV", "we", "us") — an application operated by an independent developer based in Türkiye — collects, uses and protects information when you use the Better IPTV mobile, desktop, web and TV applications and related services (the "Service"). For the purposes of the EU/EEA and UK GDPR, we act as the data controller; the controller's full legal identity is available on request at [email protected].

1. What we collect

We intentionally keep data collection to a minimum. The categories below are everything the Service stores about you:

• Account data. A user identifier, a hashed password (if you sign up with email) and, where you sign in with Google, a federated identifier returned by Google. We do not store your Google password.
• Profiles. The display name you choose for each profile inside the app.
• Device information. A device identifier, a device name, platform (iOS, Android, tvOS, Tizen, webOS, Windows, macOS, web) and a last-seen timestamp — used for trusted-device management and enforcement of device limits.
• Playlist data. The M3U/M3U8 URLs, Xtream Codes credentials and associated names you add to the app. Playlist payloads on our servers are encrypted at rest using a per-account wrapped key; we do not interpret, index or inspect their contents.
• Watch state. Your favorites, watch history and resume positions per profile — used to sync your experience across your devices.
• Subscription metadata. Subscription status, product identifier, trial and expiry dates and a RevenueCat identifier. We do not receive or store your payment card or banking details — all payment processing happens inside Apple, Google or your store of record.
• Diagnostic & usage data. Crash reports, performance telemetry and pseudonymous event analytics collected via Firebase (see section 4).

We do not collect your precise location, your contacts, your photo library, your microphone or camera, or any data about the programs you watch beyond your own favorites and resume positions.

2. Legal bases (EU/UK users)

• Performance of a contract (Art. 6(1)(b) GDPR) — creating and authenticating your account, delivering the Service, syncing your library, processing subscriptions.
• Legitimate interests (Art. 6(1)(f)) — securing the Service, preventing fraud and abuse, aggregate product analytics and crash diagnostics. You may object to these at any time.
• Consent (Art. 6(1)(a)) — optional marketing communications and any non-essential tracking that requires consent under local law. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) — responding to lawful requests and retaining minimum records required by tax or consumer-protection law.

3. What the Service is — and what it is not

Better IPTV is a media player. We do not host, distribute, resell, curate, promote or index any audio-visual content. Channels, movies, series and streams are delivered by third-party playlist providers of your choice, over URLs that you supply. We do not have visibility into those streams. Any questions about the legality, licensing or availability of content accessible through a playlist must be addressed to the provider of that playlist, not to us.

4. Third-party processors

We share the minimum necessary data with the following processors, strictly to operate the Service. These processors act on our documented instructions and are bound by contractual confidentiality and security obligations.

• Google Firebase (Google Ireland Ltd / Google LLC) — Analytics, Crashlytics and Performance Monitoring. Processes pseudonymous event data, crash logs and performance metrics.
• Google Sign-In — federated authentication when you choose "Sign in with Google".
• RevenueCat, Inc. — subscription entitlement management.
• Apple Inc. and Google LLC (as stores) — payment processing, receipt validation and app distribution; governed by their own privacy policies.
• Our hosting and infrastructure provider — storage and delivery of the backend API.

5. International transfers

Some of the processors above are located outside Türkiye and the EU/EEA (including in the United States). Where we transfer personal data outside the EU/EEA or the UK, we rely on appropriate safeguards — typically the European Commission's Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework.

6. Retention

• Account, profile, playlist and watch-state data — kept for as long as your account is active, plus a short recovery window of up to 30 days after deletion.
• Subscription records — retained for the period required by applicable accounting and tax law (typically up to 10 years under Turkish law).
• Device records — purged shortly after you revoke the device or delete your account.
• Diagnostic data — retained by Firebase according to the retention settings offered by Google (we use the shortest reasonable setting).

7. Your rights

Depending on where you live, you may have rights to access, rectify, erase, restrict or port your personal data; to object to certain processing; and to withdraw consent. Specifically:

• EU/EEA & UK — rights under the GDPR / UK GDPR, including the right to lodge a complaint with your local supervisory authority.
• Türkiye — rights under Law No. 6698 on the Protection of Personal Data (KVKK), including the right to apply to the KVKK Board.
• California — rights under the CCPA/CPRA, including the right to know, delete and correct. We do not sell or "share" your personal information as those terms are defined under the CCPA.

To exercise any right, email [email protected]. We will respond within the time limits required by applicable law. You may also delete your account at any time from Settings → Account, which triggers erasure in line with section 6.

8. Security

We use industry-standard measures: encryption in transit (HTTPS/TLS), password hashing, per-account wrapped-key encryption of playlist payloads at rest, access controls and audit logging on the backend. No system is perfectly secure; if a breach ever affects your personal data, we will notify affected users and authorities where required by law.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. In the EU/EEA the applicable minimum age for consent to information-society services is between 13 and 16 depending on your country; we recommend parental involvement for any minor below that age. If you believe a child has provided personal data to us, contact [email protected] and we will delete it promptly.

10. Changes

We may update this policy from time to time. Material changes will be highlighted in-app or by email, and the "Last updated" date above will be revised accordingly.

11. Contact

Privacy questions or rights requests: [email protected].