Tivora Player Privacy Policy

Last updated: October 18, 2026

Summary

Tivora Player is a private bring-your-own network stream playlist player. Apart from public testing samples in demo mode, users supply their own authorised sources. The app does not provide streaming subscriptions, provider directories, public content search, accounts, ads, analytics, tracking SDKs, or backend services.

Information You Provide

You can save multiple authorised sources on your device. Source profiles contain the display name, server URL, source type, username, and password. If a compatible pasted get.php URL is saved as an M3U source, its original playlist URL is also retained. Source profiles and credential-bearing playlist URLs use platform secure storage, such as iOS Keychain, Android-backed secure storage, and Windows Data Protection API (DPAPI); they are not saved in ordinary app preferences.

Local preferences store your app language, Channels/Guide home preference, and playback retry interval. Favourites, recently watched item IDs, film playback progress, the last selected category, and guide configuration are stored locally for each saved source. Guide configuration can use the source default, disable guide requests, or specify a validated non-secret custom XMLTV URL.

Downloaded catalogue rows and programme-guide data are cached only in memory. Constructed credential-bearing stream and default XMLTV URLs are not written to ordinary preferences or a persistent catalogue cache. The app has no cloud sync.

The Windows Microsoft Store package keeps its encrypted source profiles and local preferences in package-owned local app data. It does not automatically import or change data from an unpackaged Windows installation. App restarts and package updates retain the package's saved data.

Information We Collect

Tivora Player does not collect personal information from the app. The app does not send usage analytics, advertising identifiers, crash analytics, tracking data, account details, credentials, playlist contents, channel lists, stream URLs, or viewing activity to a Tivora backend.

Network Requests

Validation, catalogue loading, and playback connect directly from your device to your chosen source and its referenced media or artwork URLs. Compatible Xtream sources may include live streams and films. For a successfully parsed full get.php URL, the app attempts a live-only M3U fallback only when normal API validation reports the server API unavailable; other validation failures do not trigger this fallback.

Optional programme-guide requests go directly to the source's XMLTV endpoint or the custom guide URL you configure for that source. Source-default XMLTV URLs are derived in memory using that source's credentials. You can disable guide requests in the source's Guide data settings. Demo mode uses public sample streams without requiring saved credentials.

These endpoints are controlled by their respective operators, not by Tivora Player. Requests can disclose your IP address and, where required for access, the credentials you supplied. Connection encryption depends on the endpoint: HTTPS encrypts transport; a user-provided HTTP endpoint does not.

Network operators, server operators, or stream providers may process requests according to their own policies. Only add servers and streams that you own or are authorised to access.

Media Content

Demo mode links to public testing samples hosted by third parties. Tivora Player does not host or sell media, offer a commercial content catalogue, scrape sources, or bundle media files. You are responsible for ensuring you have rights to access any server or stream you add.

Data Deletion

Settings > Clear local data removes all saved sources, credentials and saved playlist URLs; local favourites, recents, film progress, guide configuration, and selected categories; and in-memory catalogue and guide caches. It resets the home-view and playback-retry preferences. Your selected app language is kept. You can also manage or delete individual saved sources in Sources. These actions do not delete records held by an external server or stream operator.

Ordinary uninstall of the Windows Microsoft Store package removes its package-owned data; reinstalling starts with no saved sources or preferences. Data belonging to a separate unpackaged installation is left untouched. On other platforms, deleting the app may also remove app data, subject to platform behavior.

Children

Tivora Player is not directed to children and does not knowingly collect personal information from children.

Changes

This policy may be updated as the app changes. The updated policy will be published at the privacy policy URL used in App Store Connect, Play Console, and Microsoft Store.

Contact

For support or privacy questions, use the Tivora Player support page at Tivora Player Support.

Tivora Player is a private player for user-provided authorised network streams, with public testing samples in demo mode. It has no provider directory or public discovery feature.