Privacy Policy

This Privacy Policy explains how the LumaVue mobile application ("LumaVue", "the app", "we", "us") handles information when you use it on Android phones and tablets. LumaVue is an IPTV player that plays media from playlists you supply. We have built LumaVue to collect as little information as possible.

1. Information we collect

LumaVue does not collect any personally identifiable information. We do not require you to create an account, sign in, or provide your name, email address, phone number, or location to use the app.

We do not operate a backend server for LumaVue. All app data — including your playlists, channel groups, favourites, watch history, and settings — is stored locally on your device and is never transmitted to us.

The only data flows that occur are:

• Requests to your IPTV provider(s). When you load a playlist or play a stream, your device contacts the URLs in your playlist directly. We are not in the middle of, and do not see, those requests.
• Requests to Google AdMob. The AdMob SDK contacts Google to request and measure ads. See section 3 for what AdMob handles.

2. Your IPTV playlists and credentials

LumaVue lets you load IPTV playlists (for example, M3U URLs or Xtream Codes credentials) that you obtain from your own IPTV provider. We do not provide channels or content ourselves. Everything you enter stays on your device and is never sent to LumaVue or to any third party — it is only used to contact the IPTV server(s) you have configured.

Credentials

• The Xtream Codes username and password you enter at login are written to encrypted on-device storage using EncryptedSharedPreferences (Jetpack Security), with values protected by AES-256-GCM and a master key held in the Android Keystore.
• If you import an M3U URL whose query string carries credentials (for example, ?username=…&password=…), LumaVue strips those values out of the URL at import time and writes them to the same encrypted credentials store. Only a templated URL with placeholders — no real credential — is persisted in the database.
• Per-channel and per-movie stream URLs are stored as templates too. The real credentials are only substituted in memory at the instant playback starts, and never written back to the database.

The local database itself

Everything else — playlist metadata, channel and category lists, EPG/programme schedules, watch history, favourites, and your in-app preferences — lives in LumaVue's local Room database. That database file is encrypted at rest using SQLCipher (AES-256); the passphrase is generated on first launch, stored in EncryptedSharedPreferences backed by the Android Keystore, and never leaves your device. The database is also isolated from other apps by Android's per-app storage sandbox.

Removing your data

• Delete a playlist from inside the app to remove its credentials, channels, and EPG data.
• Clear all app data via your device's Settings > Apps > LumaVue > Storage.
• Uninstalling the app removes everything LumaVue has stored locally.

You are responsible for ensuring you have the right to access the content provided by your IPTV provider in your jurisdiction. LumaVue is a player and does not host or distribute any content.

3. Advertising (Google AdMob and the Advertising ID)

LumaVue uses Google AdMob to display ads inside the app. AdMob is a service provided by Google LLC. When AdMob is loaded:

• The AdMob SDK may access the Android Advertising ID (a resettable, non-personal device identifier provided by Google Play services) to request ads, measure ad performance, prevent fraud and abuse, and — when permitted in your region — show personalized ads.
• AdMob may also collect standard ad-serving signals such as approximate (coarse) location derived from your IP address, device type and operating system version, app version, language, time zone, and basic ad interaction events.
• This information is collected and processed by Google under Google's Privacy Policy and the "How Google uses information from sites or apps that use our services" notice. We do not receive your Advertising ID and do not link any AdMob data back to you.
• LumaVue declares the com.google.android.gms.permission.AD_ID permission in its Android manifest, as required by Google Play for apps that use the Advertising ID.

Your ad personalization controls

• You can reset your Advertising ID or opt out of ad personalization in your device settings: Settings > Google > Ads. Instructions: Control the ads you see on Android.
• You can also manage personalization across Google services at adssettings.google.com.
• If you are in the EEA, UK, or Switzerland, LumaVue will display a Google-certified consent message before personalized ads are shown, in accordance with Google's EU User Consent Policy.

Useful Google references

• Google Privacy Policy
• AdMob & AdSense Privacy and security
• Google Play Advertising ID policy
• How Google uses information from sites or apps that use our services

4. Children

LumaVue is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect any information from children. If you believe a child has provided information through the app, please contact us so we can address it.

5. Android permissions

LumaVue requests only the permissions it needs to function:

• Internet — to load your playlists and stream content from your IPTV provider, and to request ads from AdMob.
• Network state — to detect whether your device is online and adapt playback accordingly.
• Foreground service / media playback — to keep playback running smoothly, including picture-in-picture and mini-player.
• Post notifications (Android 13+) — to display media playback notifications when a stream is playing.
• Advertising ID (com.google.android.gms.permission.AD_ID) — required by Google Play for the AdMob SDK to access the Advertising ID as described above.

LumaVue does not request access to your contacts, photos, microphone, camera, precise location, SMS, or call logs.

6. Security

Because LumaVue does not transmit personal data to us, the surface area for breaches on our side is very small. On your device:

• IPTV credentials (Xtream username/password, plus any credentials extracted from provider-supplied M3U URLs at import) are stored in EncryptedSharedPreferences, backed by a master key in the Android Keystore (AES-256-GCM).
• The rest of the app's data — the Room database holding your playlists, channel and category lists, EPG, watch history, favourites and preferences — is encrypted at rest with SQLCipher (AES-256). The database passphrase is generated on first launch and stored in the same Keystore-backed encrypted preferences as your credentials.
• The database is also isolated from other apps by Android's per-app storage sandbox.
• The app uses standard HTTPS for any network requests it makes, where supported by the upstream server you have configured.
• You can remove all locally stored data at any time by uninstalling the app or by using the app's "Clear data" option in its settings.

No system is perfectly secure. You are responsible for keeping your device secure (screen lock, OS updates, etc.) and for the security of any credentials you obtain from your IPTV provider.

7. Your choices and rights

Because we do not collect personal data, there is generally nothing for us to access, correct, export, or delete on your behalf. You retain full control of all app data on your device:

• Remove individual playlists, favourites, or history items from inside the app.
• Clear all app data via your device's Settings > Apps > LumaVue > Storage.
• Uninstall the app to delete everything LumaVue has stored locally.
• For ad-related controls, see section 3.

If you have a question or request that you believe is covered by laws such as the GDPR or CCPA, you can still contact us using the details in section 9 and we will respond.

8. Changes to this policy

If we make material changes to this policy, we will update the "Effective date" at the top of this page and, where appropriate, surface a notice within the app or on lumavue.casa. Continued use of LumaVue after changes take effect means you accept the updated policy.

9. Contact us

Questions about this policy or LumaVue's privacy practices? Email us at lumavue.casa@gmail.com.