Privacy Policy

1. Introduction

Tuneline ("we", "our", "us") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

Account Information

When you create an account, we collect your email address and a display name. If you sign in via Google, we receive your name and email from Google — we do not receive or store your Google password.

Purchase Information

Payments are processed by our third-party payment provider. We receive a transaction ID and subscription status but do not store your credit card number or payment details on our servers.

Diagnostic Data

To find bugs early and improve reliability, the App can send diagnostic events to our servers:

• Crash reports — when the App crashes or hits an unrecoverable error.
• Error logs — network failures, playlist parse failures, playback errors.
• App activity— events such as "playlist loaded", "sign-in succeeded", "settings opened", at the default "Full diagnostics" setting.

Each diagnostic event includes a timestamp, an event name, the App version, the platform (iOS / Android / macOS / Windows / Linux / TV), a per-install device ID, and — if you're signed in — your user ID. Sensitive values (playlist URLs, Xtream credentials, channel names, search queries, EPG program names) are scrubbed on-device before any event is sent. Host names are hashed with a per-install secret so the same source URL on two devices produces two different hashes — we cannot correlate users across installs from diagnostic data.

Diagnostic data is retained for 30 days and then dropped automatically. You can change what gets sent in Settings → Privacy → Diagnostics (Full / Crashes + errors only / Crashes only / Off), or wipe all diagnostic events tied to your account with the Delete my logs button on the same screen.

3. What We Do NOT Collect

• We do not collect, store, or monitor the content you watch or the playlists you add.
• We do not track your viewing history on our servers (watch history is stored locally on your device).
• We do not sell your data to third parties.

4. How We Use Your Information

• To create and manage your account
• To process purchases and manage your Pro license
• To sync your playlists and settings across devices (Pro users only, with your explicit consent)
• To send transactional emails (purchase confirmations, account security)
• To improve the App based on aggregated, anonymous usage data

5. Data Storage and Security

Your account data is stored on secure servers. We use industry-standard encryption (TLS) for data in transit and encrypt sensitive data at rest. We retain your account data for as long as your account is active or as needed to provide services.

Diagnostic data (see "Diagnostic Data" above) is stored in a separate database and is retained for 30 days before being dropped automatically. You can wipe it sooner at any time via Settings → Privacy → Delete my logs.

6. Third-Party Services

We use third-party services for authentication and payment processing:

• Google— when you choose "Sign in with Google" (in the app or on the web), Google authenticates you and provides your name and email address to us so we can create or locate your account. We do not receive your Google password. See Google's Privacy Policy.
• Payment providers — including Google Play and our web payment provider, process your purchase and share a transaction ID and entitlement status with us. We do not receive or store your card details.

These providers have their own privacy policies, and we encourage you to review them. We do not share your data with any other third parties.

7. Your Rights

• Access: You can request a copy of the data we hold about you.
• Deletion: You can request deletion of your account and all associated data. Diagnostic data tied to your account can be wiped immediately from Settings → Privacy → Delete my logs.
• Correction: You can update your account information at any time through the App or web dashboard.
• Portability: You can export your data from the App.

8. Cookies

The Tuneline website uses essential cookies for authentication and session management. We do not use advertising or tracking cookies.

9. Children's Privacy

Tuneline is not directed at children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 13, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification. Continued use of the App after changes constitutes acceptance.

11. Platform Permissions

Tuneline requests only the minimum permissions needed to stream media and manage your library. We never access your contacts, photos, microphone, camera, or location.

Android

• INTERNET — to fetch playlists, EPG data, and stream media from the sources you provide.
• ACCESS_NETWORK_STATE — to detect connectivity changes and auto-reconnect streams.
• Picture-in-Picture — a system feature (not a runtime permission) that lets playback continue in a floating window.

iOS

• Network access — to stream media and sync your library.
• Local storage — to save playlists, favorites, and watch history on-device.

macOS

• Network access — outbound for streams and APIs; a local loopback server is used by the media engine for internal playback routing (no external ports are opened).
• Keychain access — to securely store authentication credentials on-device.
• Local file system — to read M3U playlists you import and to persist your library locally.

Windows

• Internet client — the internetClient MSIX capability is used to fetch playlists, EPG data, and stream media from the sources you provide. No inbound server capability is declared.
• Local playback loopback — the media engine uses an internal loopback connection for playback routing. No external ports are opened and no inbound connections are accepted.
• Local file system — to read M3U playlists you import and to persist your library (playlists, favorites, watch history, settings) locally on your device.
• Microsoft Store distribution — the Windows build is distributed exclusively through the Microsoft Store as a signed MSIX package. We do not receive personal data from Microsoft as part of this distribution (only aggregate, anonymous install/crash metrics in Partner Center).

Linux

• Network access — outbound for streams and APIs; a local loopback server is used by the media engine for internal playback routing (no external ports are opened).
• Local file system — to read M3U playlists you import and to persist your library locally.

12. Contact

For privacy-related questions or data requests, contact us at support@tuneline.app.