Streamly

Legal

Privacy Policy

Effective October 27, 2026

1. Scope

This Privacy Policy explains how Streamly: IPTV & Movies (“Streamly” or the “App”) handles information when you import a playlist, open a direct stream, connect an Xtream provider, save favorites, play media, or use the AI chat assistant. It also covers information generated by analytics and crash diagnostics in the current iOS build.

Streamly is a media player. We do not supply channels, playlists, movies, series, provider accounts, or subscriptions. Your content sources and their operators are independent from Streamly.

2. Information the App handles

Sources and provider details

The App handles the playlist URLs, local M3U/M3U8 or W3U files, direct stream URLs, and Xtream server address, username, and password that you choose to provide. These inputs are used to connect to your source, organize its catalog, and play compatible media.

Favorites and preferences

Favorites, imported source records, provider profiles, language, setup state, and similar preferences are stored on your device. Provider credentials may be stored using iOS Keychain, while some source URLs and catalog records can be stored in the App’s local data store. Local information generally remains until you remove the relevant item, erase the App’s data, or uninstall the App, subject to device backups and operating-system behavior.

AI chat

When you use the AI assistant, your message and selected recent conversation context are sent over the internet to the App’s AI backend so that it can return a response. Do not include passwords, access tokens, or sensitive personal information in a chat message. Leaving a chat clears the current local conversation state; it does not itself request deletion of information already transmitted to remote systems.

Diagnostics and usage information

The current build includes Firebase Analytics and Firebase Crashlytics. Depending on device settings and SDK configuration, these services may process app interactions, device or installation identifiers, technical device and operating-system information, IP address, crash traces, performance information, and diagnostic events. This information is used to understand feature use, diagnose faults, and improve stability. The App also asks for Apple’s App Tracking Transparency choice when required by iOS; your system choice can be changed in Settings.

Purchases

The audited build does not present an active purchase catalog, but it can listen for verified StoreKit transaction and entitlement updates. If applicable to your installation, Apple processes the purchase and payment information; Streamly does not receive your full payment-card details.

3. Where processing occurs

  • On your device: imported source records, favorites, provider profiles, selected catalog information, app preferences, and current chat state.
  • Your chosen services: provider and stream hosts receive the network requests needed to load catalogs, artwork, and media. They can receive your IP address, requested resource, device/network headers, and any credentials included in a request.
  • Streamly’s AI backend: receives AI messages and recent context when you choose to send them.
  • Service providers: Google may receive analytics and crash-diagnostic information; Apple handles platform services, StoreKit, system permission choices, and related device services.

Internet processing may occur in countries other than where you live. The exact locations and retention practices of a provider, stream host, or service you select are governed by that third party’s own terms and privacy notice.

4. Third-party services

Streamly connects only when a feature requires it or when an integrated SDK operates. The relevant recipients can include:

  • the playlist, Xtream, stream, artwork, or CDN host you choose;
  • the App’s AI backend and its infrastructure providers;
  • Google Firebase Analytics and Crashlytics for usage measurement and diagnostics;
  • Apple for iOS platform, connectivity, permission, and StoreKit functions.

We do not sell IPTV access or grant rights to third-party media. The audited build does not contain display-ad serving. That does not mean no data is processed: analytics, crash reporting, AI requests, and provider connections are separate activities.

5. Permissions and files

The App uses the iOS file picker only for files you choose. The inspected build does not request access to your camera, photo library, microphone, contacts, or precise location. It includes an App Tracking Transparency description for measurement-related permission. You can manage available permissions in iOS Settings.

6. Security

We use platform protections and reasonable safeguards appropriate to the information handled. Xtream credentials are stored using iOS Keychain in the inspected build, and the configured AI backend uses HTTPS. However, Streamly also accepts user-supplied HTTP sources. HTTP connections are not encrypted and can expose credentials, URLs, and requested media to parties able to observe the network. Use trusted services and HTTPS whenever available. No service can guarantee absolute security.

7. Retention and deletion

Local playlists, profiles, favorites, and preferences do not have a fixed expiry and remain until removed through available controls, App data is erased, or the App is uninstalled, subject to iOS backups and Keychain behavior. Removing a Streamly entry does not cancel an external provider account or delete the original playlist file.

Analytics, crash reports, AI request logs, server backups, provider logs, and CDN records may be retained according to the responsible service’s configuration, security needs, and legal obligations. Because the supplied build does not expose a universal server-side erase control, contact us to request help identifying information controlled by Streamly. We cannot delete records controlled solely by Apple, Google, or a provider you selected; requests to those parties must follow their processes.

8. Your choices and rights

  • Do not import a source, connect a provider, or send an AI message if you do not want that information processed for the feature.
  • Remove individual favorites, playlists, or provider profiles using the App’s controls.
  • Manage ATT and other available permissions in iOS Settings.
  • Uninstall the App to remove its ordinary local container, subject to iOS backup and Keychain behavior.
  • Email us to request access, correction, or deletion of information controlled by Streamly. We may need enough information to verify and locate the request.

9. Children’s privacy

Streamly is a general-audience media utility and is not directed to children. It does not provide or curate content, so the suitability of content from a selected provider is the responsibility of the user and that provider. If you believe a child has submitted personal information to a Streamly-controlled service, contact us so we can review the request.

10. Changes to this policy

We may update this policy when the App, its integrations, or legal requirements change. The current version will remain available on this page with a revised effective date. Material changes should be reviewed before affected processing begins.

11. Contact

For privacy questions or requests, email nguyenminhkhang9899@icloud.com. Include “Streamly Privacy” in the subject line and do not send provider passwords or access tokens.