1. Introduction

Rock Team Apps LLC (“Company”, “we”, “us”, or “our”), registered in Sheridan, Wyoming, USA, operates the mobile and TV application IPTV Player – The Ultimate TV app (the “App”). This Privacy Policy transparently describes how information is handled when you download, install, or use our Service.

2. Information Collection and Storage Architecture

A. Data Handled Strictly On Your Local Device (Not Shared with Us)

We respect your privacy through data decentralization. The following data is processed and saved entirely on your device (in local SQLite databases and local preferences storage) and is never uploaded to Rock Team Apps LLC servers:

• Playlist Configuration: M3U/M3U8 URLs, Xtream Codes server URLs, usernames, and passwords.
• Viewing History & Favorites: Recently played streams, playback positions (resume points), favorite channels, custom categories, and channel order.
• Security & PINs: In-app parental control PIN codes and hidden category settings.
• Downloaded Media: Any stream recorded or downloaded via the local download manager resides exclusively in your device storage.

B. Information Collected by Third-Party SDKs

To support app maintenance, crash diagnostics, feature unlocking, and optional advertising, the App uses vetted third-party service providers:

1. Subscriptions & In-App Purchases (StoreKit, Google Play Billing, RevenueCat):

• When you upgrade to the PRO/Ad-Free subscription, payments are securely processed by Apple (App Store) or Google (Google Play). We do not collect, view, or process your credit card numbers or financial account data.
• We integrate RevenueCat to manage cross-platform subscription receipts, entitlements, and renewal statuses using anonymous user identifiers. (RevenueCat Privacy Policy).

2. Advertising (Google AdMob & UMP SDK):

• The free version of the App serves advertisements powered by Google AdMob.
• AdMob may collect and process device advertising identifiers (Google Advertising ID / GAID on Android, Apple IDFA on iOS subject to App Tracking Transparency permission), IP address (for general geographic location), device model, and ad performance interactions.
• Consent Management: We integrate Google’s User Messaging Platform (UMP) SDK. Users in the EEA, UK, and Switzerland can review and adjust their consent preferences anytime in Settings → Privacy Choices. (Google Ads Policy).

3. Performance Analytics & Crash Diagnostics (Firebase):

• Google Analytics for Firebase: Collects aggregated, non-personally identifiable metrics (such as session counts, feature engagement, retention rates, and app version).
• Firebase Crashlytics: Collects anonymized crash stack traces, device hardware states, and operating system versions at the exact moment of a software failure to assist our engineering team in patching bugs. (Firebase Privacy Notice).

4. Public Metadata Integration (The Movie Database / TMDB):

• The App interacts with The Movie Database (TMDB) API solely to display publicly accessible media metadata (such as popular titles, overviews, ratings, and poster artwork).
• No user credentials, personal playlists, playback activity, or device identifiers are ever shared with or transmitted to TMDB.

3. Device Permissions and Usage

Permission	Platform	Purpose & Scope
Internet & Network State	Android & iOS	Required to stream multimedia content from user-provided URLs and verify network connectivity.
Camera	Android & iOS	Used strictly for scanning QR codes (to import M3U or Xtream playlist credentials easily) and optional profile icon capture. No camera frames are stored remotely.
Local Network / Multicast DNS	iOS (Bonjour / Cast)	Discovers Chromecast-enabled devices and smart TVs on your local Wi-Fi for playback casting.
Bluetooth	iOS	Utilized solely by the Google Cast framework for initial nearby Cast device pairing.
Storage / Photo Library	Android & iOS	Allows loading local M3U playlist files, setting custom logos, and saving downloaded media recordings.
Foreground Service & Notifications	Android	Maintains audio streaming when the screen is locked and displays status notifications for active media downloads.
Advertising ID (AD_ID / ATT)	Android & iOS	Delivers non-intrusive ads and measures ad effectiveness when tracking consent is granted.

4. GDPR & UK Data Protection Compliance

If you reside in the European Economic Area (EEA) or UK, your data is processed under the following lawful bases:

• Contractual Necessity: Receipt validation via RevenueCat to deliver your purchased PRO subscription.
• Legitimate Interests: Bug analysis and diagnostic logs via Firebase Crashlytics to keep the app secure and stable.
• Consent: Targeted advertising via AdMob and analytics via Firebase Analytics. You can withdraw consent at any time via Settings → Privacy Choices.

Your Rights: You have the right to access, rectify, erase, or restrict processing of your personal data, and the right to lodge a complaint with your local Data Protection Authority.

5. California Privacy Rights (CCPA / CPRA)

We do not sell personal data for monetary consideration. If you are a California resident, you have the right to request disclosure of personal information collected, request deletion, and opt out of the “sharing” of personal data for cross-context behavioral advertising. You can exercise your opt-out rights directly within the App via Settings → Privacy Choices.

6. Data Retention and Deletion

All user playlists, history, and favorites can be deleted instantaneously by clearing the App cache or uninstalling the App from your device. Aggregated, pseudonymized diagnostics in Firebase are automatically purged in accordance with Firebase standard retention periods (up to 14 months). For data deletion requests, contact contact@rockteamapps.com.

7. Children’s Privacy

The App is not directed to children under 13 years of age (or under 16 in the EEA). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately for deletion.

8. Security

All network communications between the App and third-party APIs (Google, Firebase, RevenueCat) utilize industry-standard Transport Layer Security (TLS/HTTPS). Local databases are stored in OS-protected app sandboxes.

9. Changes to this Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be posted on this page with an updated “Last Updated” date. Continued use of the App signifies your acceptance of any revisions.

10. Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact our data protection desk: