Privacy Policy
Last updated: October 12, 2026
This Privacy Policy explains how Lumio IPTV Player ("the app", "we", "us") handles information when you use the app on Android TV, Google TV and Fire TV devices. In short: we do not sell or share your data, and we cannot read your playlist details.
1. Information we collect
We do not operate user accounts. The app contains no advertising, no analytics and no third-party tracking SDKs. To let you add playlists from your phone or computer, the app uses our device link website (the /device page of this site), which stores only:
- A random device ID and a hashed device key generated when the app is first opened. They are not linked to your name, email, Amazon account or hardware identifiers.
- The public encryption key of your TV.
- For each playlist you add: its name, its type (M3U or Xtream Codes) and an end-to-end encrypted copy of its details (links, server, username, password). These details are encrypted in your browser with your TV's public key; only your TV holds the private key, so we cannot read them.
- The time your device last connected, used to delete inactive devices.
Like any web service, our hosting provider (Cloudflare) processes IP addresses to deliver the service and to limit abuse. We do not keep logs of them. Devices that have not connected for 12 months are deleted automatically, together with their playlists. Deleting a playlist on your TV or on the website removes it from our service immediately.
2. Information stored on your device
To work, the app also saves the following data locally on your device:
- The decrypted details of your playlists, your device ID and key, and the private key used to decrypt them.
- A cached copy of the channel, movie and series catalog loaded from those playlists.
- Your favorites, recently watched items and playback positions ("continue watching").
- Your settings, such as language, layout and the parental control PIN.
You can delete this data at any time by removing a playlist, using "Clear history" in Settings, clearing the app's data in your device settings, or uninstalling the app.
3. Connections to third-party servers
Lumio IPTV Player is a media player. When you add a playlist, the app connects directly from your device to the servers you entered (your playlist or IPTV provider, EPG sources, and the servers hosting streams, logos and posters) to download and play content. Those servers may see your IP address and other technical information sent by any internet connection. They are operated by third parties, not by us, and their own privacy policies apply. We have no control over and are not responsible for them.
4. Content
The app does not include, provide or sell any channels, playlists or content. You are responsible for using only playlists and content you are authorized to access.
5. Permissions
- Internet and network state: to load your playlists, EPG and streams.
- Wake lock: to keep the screen on during playback.
- Notifications: to show an occasional local reminder to rate the app. It is generated on your device; no push service is used.
6. Links to app stores
If you choose to rate the app, it opens the Google Play Store or the Amazon Appstore, which are governed by their own privacy policies.
7. Children's privacy
The app is not directed to children under 13 and we do not knowingly collect information from children. Parents can use the built-in parental control to lock categories with a PIN.
8. Security
Playlist details travel and are stored end-to-end encrypted (RSA-OAEP 2048 + AES-256-GCM) and all connections to our service use HTTPS. Data on your device is protected by the Android app sandbox. Playlist credentials are sent only to the server you entered when the app loads that playlist. Repeated wrong device keys temporarily lock the device on the website.
9. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a new "Last updated" date.
10. Contact
If you have questions about this Privacy Policy, contact us at support@vixapps.com.
