Effective date: 26 August 2026

Developer: Avorna Yazılım Ltd. Şti. ("we", "us")

Contact: info@avorna.com

OxTV is a media player for iPhone, iPad, Mac and Apple TV. It carries no channels of its own and does not know what is on yours: you give it an address, and it plays what is at that address.

The short version: there is no advertising, there is no analytics of any kind, there is no account to create with us, and we operate no servers. Nothing about you or about what you watch is ever sent to us, because there is nowhere for it to be sent.

1. What we collect

Nothing. We do not collect, receive, store or process any personal data. The app contains no advertising, no analytics or telemetry of any kind, no tracking, no user accounts of ours, and no third-party software development kits that do any of those things. We have no backend.

The app's App Store privacy manifest declares this as well: no data types collected, and no tracking.

2. What is stored on your device

• The sources you add — an Xtream panel address, a playlist address, or a playlist file

you import, with the name you gave it.

• Credentials — the username and password for a source. These are kept in the Apple

Keychain, encrypted by the operating system, and are never written into the app's database. Where a panel supplies a playlist address with the login inside it, the login is taken out of the address before the address is stored.

• A cache of what your source lists — its channels, films, series and episodes, including

the stream addresses it gave for them. Some panels put your username and password inside those stream addresses; where they do, that cache contains them. It is rebuilt from scratch every time a source is refreshed, it is never synced, and it is never exported.

• What you have watched — favourites, playlists, watch progress, recently watched.
• The master lock, if you set one: the parameters used to derive a key from your PIN, and

a copy of the app's encryption key that has itself been encrypted with your PIN. Your PIN is not stored anywhere, in any form.

Uninstalling the app removes all of it, including its Keychain items.

3. iCloud

OxTV syncs through your own iCloud, and this is not optional. There is no switch for it, because a household should not have to find one to make two devices agree.

• What syncs: the names and addresses of your sources, your playlists and what is in them,

channel groupings you have made by hand, your settings, and — if you use the master lock — its parameters and the encrypted copy of its key.

• What does not sync: credentials, the cache of what your sources list, and anything a

device needs only for itself.

• It goes to the private database of your own iCloud account, in a container only this app

can address. It is available to you and your devices and to nobody else; we cannot read it, cannot access it and cannot recover it. Apple's handling of it is governed by Apple's Privacy Policy.

• Every field is written using CloudKit's encrypted values, which means Apple's servers hold

it encrypted with a key that only your devices have.

• If your device is not signed in to iCloud, nothing syncs and everything else works exactly

as it does otherwise.

• You can remove what is stored there at any time through Settings → [your name] → iCloud →

Manage Account Storage.

4. The master lock

A playlist you lock is encrypted with a key derived from your PIN, and its contents are then deleted from the database — there is no hidden copy for a search or a shelf to find, only an encrypted block. That block is what syncs, still encrypted.

Your PIN is asked for once on each device; after that the device can offer Face ID or Touch ID instead, and the key it keeps for that purpose is stored in that device's Keychain and never leaves it. Changing the biometrics enrolled on a device invalidates it, and the PIN is then required again.

There is no recovery. We cannot reset your PIN and neither can Apple. If you forget it, what you locked cannot be opened by anybody, including us.

5. Where your device connects

OxTV connects directly from your device to the servers you configure, with no involvement from us. Those servers receive your credentials, your IP address and the details of what you asked for — which stream, which listing, when. We are not a party to that connection and have no visibility into it. Their privacy practices are their own; please read them before adding a source.

Many panels are reachable only over plain, unencrypted HTTP. OxTV allows this because the alternative is not being able to use those panels at all, and it warns you when the address you have entered is not `https`. Over plain HTTP, your username and password are readable by anyone able to observe the network between you and that server. This is a property of the server you chose, not of the app, but you should know it.

Two other kinds of connection are worth naming:

• Artwork. Posters, logos and stills are loaded from whatever addresses your source gives

for them. These are often third-party image hosts that have nothing to do with us or with your provider. Such a host sees your IP address and which image was requested.

• AirPlay. When you send video to an Apple TV or another receiver, your device serves the

video to it over your local network. Nothing leaves your network in doing so, and the app asks for local-network permission for exactly this reason.

Beyond these, your source, iCloud and Apple's App Store, the app does not connect anywhere. In particular, it never connects to us.

6. Purchases

Subscriptions and free trials are handled entirely by Apple. We never see your payment method, billing address or card details. The app checks whether a subscription is active using Apple's StoreKit, a check that happens between your device and Apple. Apple gives us aggregate, anonymous sales figures that cannot be connected to any individual. Apple's handling of purchase data is governed by Apple's Privacy Policy.

7. Crash reports

If you have turned on "Share with App Developers" in Settings → Privacy & Security → Analytics & Improvements, Apple may pass us anonymised crash reports. These contain no sources, no credentials and no viewing history. You can turn it off in the same place.

8. Children

OxTV is a general-purpose player and is not directed at children. It collects no data from anyone, children included. What can be watched depends entirely on the sources added to it, which is the responsibility of whoever adds them; the master lock exists to help keep parts of it apart.

9. Your rights

We hold no data about you, so there is nothing for us to disclose, correct, export or delete. Everything is under your own control:

• Remove a source, a playlist or the whole app's data from within the app.
• Remove what is in iCloud through your device's iCloud settings.
• Uninstall the app to remove everything local, Keychain items included.

People in the EU/EEA, the UK, Türkiye and other places with data-protection law (GDPR, KVKK and their equivalents) keep every right those laws give them. We simply hold no personal data for those rights to apply to.

10. Changes

We will update this policy when the app changes in a way that makes it wrong. The current version is always at https://oxtv.avorna.com/privacy and reachable from inside the app. A material change comes with a new effective date.

11. Contact

info@avorna.com