Privacy Policy

Last updated: April 2, 2026

What we collect

StreamVault collects the minimum data needed to operate the service:

• Account data: Email address and display name (if you create an account). Guest users have no account data.
• Sync data: Favorites, watch history, playlist metadata, and app settings are synced to our servers if you enable cloud sync. This data is tied to your account and encrypted in transit.
• Crash reports: Anonymous crash reports via Sentry to help us fix bugs. No personal data is included.
• Purchase data: License keys and subscription status. Payment processing is handled by Lemon Squeezy (for desktop) and Apple/Google (for mobile). We never see your payment card details.

What we do NOT collect

• We do not collect, store, or transmit your IPTV provider credentials (Xtream usernames/passwords). These are stored locally on your device using encrypted storage.
• We do not log which channels you watch or what content you stream.
• We do not sell, rent, or share your data with third parties for advertising.
• We do not use tracking pixels, fingerprinting, or cross-site tracking.

Data storage

Account and sync data is stored on Supabase (hosted on AWS). All data is encrypted at rest and in transit (TLS 1.2+). Data is stored in the EU region.

Your rights

You can:

• Export your data at any time from Settings > Account.
• Delete your account and all associated data from Settings > Account > Delete Account.
• Use StreamVault as a guest without any account or data collection.

Third-party services

• Supabase — Authentication and cloud sync (privacy policy)
• Sentry — Crash reporting (privacy policy)
• Lemon Squeezy — Payment processing (privacy policy)
• RevenueCat — Mobile subscription management (privacy policy)

Children

StreamVault is not directed at children under 13. We do not knowingly collect data from children.

Changes

We may update this policy. Material changes will be communicated via the app or email.

Contact

Questions? Email privacy@mystreamvault.com