ZappioPrivacy Policy
This policy explains what data the Zappio app (“the app”, “we”) collects, why, and how it is protected. Zappio is published by 9451-1839 Québec inc. (Markaitek). By using Zappio, you accept the practices described below.
1. What Zappio is
Zappio is an IPTV stream player. The app does not host, provide or sell any content: you connect your own source (Xtream Codes or M3U playlist), supplied by a third-party service. Zappio receives no commission and has no relationship with those providers.
2. Data we process
Zappio is built “local first”: most data stays on your device. Some of it leaves the device only if you create an account for syncing.
- Account (optional). If you sign in with Sign in with Apple or Google, we receive your email address and an account identifier. With Apple's private relay, we only ever see an anonymised address.
- Synced profile and usage data. Your profiles, favourites, playback positions and viewing history, so you find them again on your other devices.
- Your IPTV source credentials. The server address and your credentials (Xtream or M3U) are kept in order to reach your streams. They are encrypted before being stored.
- Registered devices (Premium subscribers). To enforce the 5-device limit we keep a technical device identifier and a readable name (for example “Thomas's iPhone”), linked to your subscription. The list is visible and you may remove a device at any time in Settings.
- App settings. Display preferences, language, parental control code (stored encrypted in the device keychain, never in plain text).
- Offline downloads. Files you save for offline viewing stay entirely on your device. They are never transmitted to us and disappear with the app.
- Profile preferences (with your consent). Chosen languages and genres, pinned genres and app settings. This data is linked to your profile only if you explicitly consent (Settings › “Improve Zappio”, off by default). If you decline, we receive only an anonymous snapshot of those same settings: it contains no account, no profile, no device identifier and no precise timestamp, and therefore cannot be tied back to you, not even by cross-referencing.
We do not collect location data. The free version shows advertising through Google AdMob. On Apple apps (iPhone, iPad, Apple TV), the ads are non-personalised: the app does not request the advertising identifier and does not track you across apps. On platforms where personalised ads may be offered, an advertising identifier may be used, and your consent is collected beforehand. We use no other third-party analytics SDK. A Premium subscription removes all advertising. We never sell your data.
3. Why we process it
- To authenticate you and secure your account.
- To sync your favourites and playback positions across your devices.
- To let you reach the streams of the source you configured.
- To enforce the 5-device limit that comes with the Premium subscription.
- To operate and improve the app's features.
- To restore your preferences on your other devices and to guide our improvements (usage statistics). Legal basis: your consent, collected separately from any marketing consent, declined by default and revocable at any time in Settings. On withdrawal, the preferences linked to your profile are deleted from our servers. Declining has no effect on how the app works.
4. Where the data is held
Account and sync data is stored on our own server (self-hosted Supabase) located in Canada. Access is protected by row-level security: an account can only reach its own data.
5. Sharing with third parties
We sell your data to no one. Except where the law requires it, data is passed only to the following services, and only to the extent described:
- Apple and Google — authentication, if you choose to sign in with them.
- Your IPTV provider — contacted directly by the app with the credentials you entered.
- Google AdMob — our advertising partner in the free version. Receives the advertising identifier if you allowed it.
- TVmaze — queried for public series metadata. No personal data is sent.
- TMDB — posters, backdrops, cast, country and original language. Only the searched title or its identifier is sent; no personal data. This product uses the TMDB API but is not endorsed or certified by TMDB.
- OMDb — IMDb, Rotten Tomatoes and Metacritic ratings. Only the work's identifier is sent; no personal data.
- YouTube (Google) — only when you start a trailer. Playback is framed by a page hosted on our own domain, but YouTube may nonetheless set its own cookies and receive your IP address, under Google's privacy policy.
- DeepSeek — automatic classification of your stream's category names into generic genres. Requests pass through a relay server we operate; only category names leave — never your credentials, your source address, your account or your IP address.
- Cloudflare — only if you start the connection speed test yourself from Settings.
We also operate, on our own server, a shared enrichment index: a title signature (normalised title and year) is sent there to retrieve the work's identifier, original language and country. Because providers' catalogues overlap heavily, this index is shared across users; it holds no account, profile or device data.
6. Crash reports
When the app stops abnormally, a report may be sent to our own server — never to a third party. It contains the app's version and build number, the platform, the device model, the system version and the technical trace of the incident.
Before sending, the profile identifier is replaced by an irreversible pseudonym, and any credential, token or password spotted in the report is redacted. These reports are used solely to fix defects.
7. Retention and deletion
Your local data, including your downloads, disappears if you delete the app. Your account data is kept for as long as the account exists. Profile preferences are kept until you withdraw consent or delete the account; anonymous statistics, being tied to no one, are not affected by an individual deletion request. You may sign out at any time and request permanent deletion of your account and data at support@markaitek.com; we act on it within a reasonable time.
8. Children
Zappio is not intended for children under 13. A “child profile” mode and PIN-based parental control are offered for family use, but account management is an adult's responsibility.
9. Your rights
Depending on your jurisdiction (GDPR, Canadian law), you may request access to, correction, portability or deletion of your data. Write to us to exercise these rights.
10. Changes
We may update this policy. The date at the top of the page indicates the last revision.