Privacy policy

• Your playlists, playlist links, provider logins, channel lists and what you watch stay on your iPhone. We never receive them.
• An account is optional. Without one, we receive no name or email address from you.
• With an account, we keep only what we need to sign you in, list your devices and recognise your subscription.
• No tracking, no advertising profiles, and we never sell your data.
• You can delete your account in the app at any time.

ARENALIVE keeps these only on your device:

• the playlists and links you add
• Xtream server addresses, usernames and passwords, with passwords and sign-in tokens kept in the iPhone Keychain
• the channel lists imported from your playlists
• your favorites, recent channels and recent searches
• your app settings

Whether your car is parked or moving is read on your iPhone only, to decide whether video can play. None of this is sent to us. Deleting the app removes it from your iPhone.

When you add a playlist or play a channel, the app connects directly to your provider's servers to download the playlist, channel logos and streams. We're not part of that connection. Your provider can see what any server sees, such as your IP address and the channels you request, and its own privacy policy applies.

If you sign in, our server keeps:

• Your email address: from email sign-in, or from Sign in with Apple when Apple shares a verified one. This may be a private relay address created by Apple.
• Your name: only if Apple shares it the first time you use Sign in with Apple.
• An account ID that we create.
• Your devices: the device name iOS gives the app, the platform, a random installation ID created by the app, and when the device was last seen.
• Sign-in sessions: tokens that keep you signed in, stored only in hashed form.
• Sign-in codes: stored only in hashed form. Each code expires after 10 minutes.
• For Sign in with Apple: a token from Apple, stored encrypted, so we can revoke your Apple sign-in when you delete your account.

We use this data to sign you in, keep your account secure, list your devices and give you access on each of them.

Apple processes every payment. We never see your card or other payment details.

To know whether you have access, we receive subscription records signed by Apple: from the app after a purchase or restore, and from Apple's App Store Server Notifications. We keep the plan, its status (such as trial, active, payment issue, expired or refunded), whether it renews automatically, its purchase and expiry dates, Apple's transaction number and the App Store environment. We also keep Apple's notifications as a record of what changed.

If you're signed in when you subscribe, the purchase carries your account ID so we can link it to your account. If you aren't, Apple's notifications reach us with a transaction number only, without your name or email address.

If we give your account free access time, we keep its end date and a short internal note on why it was given.

• playlists, playlist links, provider usernames or passwords
• channel lists or viewing history
• your location, contacts, photos or other files
• advertising identifiers

The app doesn't track you across other companies' apps or websites, and it contains no third-party analytics or advertising tools. If you choose to share analytics with app developers in your iPhone settings, Apple may share crash reports and usage statistics with us under Apple's own privacy terms.

We use personal data only to run ARENALIVE: to sign you in, give you the access you've paid for, show and manage your devices, prevent abuse, and reply when you contact us. We don't use it for advertising, we don't build profiles about you, and we don't sell or rent it.

Where the law asks for a legal basis, we rely on providing the service you asked for, and on our legitimate interest in keeping the service and your account secure.

We email you only to send the sign-in codes you ask for. We don't send marketing emails. If you write to our support email, we use your message and address to reply.

• Apple, for Sign in with Apple, in-app purchases, App Store Server Notifications, and revoking your Apple sign-in when you delete your account.
• Our email delivery provider, which receives your email address and the code so it can deliver sign-in emails.
• The servers that host our service, which store account data on our behalf.
• Authorities, when the law requires it.

We don't share personal data with advertisers or data brokers.

Account data is stored in our own database on our own server, not with a third-party app backend. It may be processed in a country other than yours.

Connections to our service use HTTPS. Sign-in codes and session tokens are stored only as hashes, and the Apple token is encrypted. Our server logs record no email addresses, codes or tokens. Your IP address is used briefly to limit repeated sign-in attempts and isn't stored in our database. On your iPhone, sign-in tokens and provider passwords are kept in the Keychain.

No system is perfectly secure, but we work hard to protect your data and we keep as little as we can.

• Account details, devices and subscription records: for as long as you have an account.
• Sign-in sessions: they end when you sign out or remove the device, and expire on their own if they go unused.
• Sign-in codes: valid for 10 minutes. Codes for your address are removed when you delete your account.
• Apple notifications we can't link to any account: kept as a record of App Store purchases, without a name or email address.

When you delete your account, we delete its data straight away. If we keep backups, deleted data may remain in them for a limited time until they're replaced.

In the app, open Settings, then Account, tap Delete account and synced data, and confirm. We immediately delete your account, devices, sessions, subscription records, any free time and Apple's notifications about your purchases. We also ask Apple to revoke your Sign in with Apple token.

Deleting your account doesn't cancel your Apple subscription. Cancel it in your Apple ID settings. Your playlists and favorites stay on your iPhone until you remove them or delete the app.

Can't use the app? Write to our support email (in the site footer) from the address on your account, and we'll delete the account for you.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or limit how we use it, and to withdraw consent you've given.

You can delete your account in the app at any time. For any other request, write to our support email (in the site footer). We may ask you to confirm that the request comes from you. You can also complain to the data protection authority where you live.

ARENALIVE isn't directed at children, and we don't knowingly collect personal data from them. If you believe a child has created an account, contact us and we'll delete it.

We'll update this policy when the app, our service or the law changes, and we'll change the date at the top. If a change is significant, we'll let you know on this site and, where it makes sense, in the app before it applies.

Questions about your privacy or this policy? Write to our support email (in the site footer). The company that operates ARENALIVE is responsible for your personal data under this policy.