HiPTV Privacy Policy

Effective date: 2026-10-31

Publisher: HiPTV (Hamza Elshammaa, Egypt)

Contact: privacy@hiptv-tv.com

Published at: https://hiptv-tv.com/privacy

1. What HiPTV is

HiPTV is a media player only. It provides no channels, films or series. Users add their own provider using an Xtream Codes login or an M3U playlist link or file.

2. Data stored on your TV

• Provider credentials and user library: Your provider server address, username, password or M3U link, the downloaded catalog, favourites, watch history and app settings are stored only on your TV, in app-private storage.
• No cloud backup or transfer: This app-private data is excluded from Android backup and device-to-device transfer.
• Where credentials and stream requests go: Your login details and stream requests are sent only to your own provider.
• App lock PIN: If you enable the app lock, your PIN is stored only on the device as a salted SHA-256 hash.

3. Metadata service (meta.hiptv-tv.com)

• What is sent: To display posters and title details where your provider has none, the app sends catalog title names, release years and provider-supplied TMDB IDs to the HiPTV metadata service at https://meta.hiptv-tv.com, together with a random install ID generated on the device and an app key.
• What is never sent: Your provider login, stream URLs and viewing history are never sent to the metadata service.
• Install ID: The install ID is a random identifier generated on the device. It is not linked to your identity and can be reset at any time by clearing the app's data or reinstalling the app.
• Cloudflare and IP addresses: The metadata service is reached over HTTPS through Cloudflare, which processes your TV's IP address to deliver the request. The service also uses the IP address for rate-limiting.
• Metadata and images: Metadata comes from TheTVDB and Wikidata via the HiPTV metadata service. Posters and backdrop images are loaded directly from those providers' image servers or your IPTV provider's image servers, which see your TV's IP address when delivering images.

4. Device service (api.hiptv-tv.com)

• What is sent: When HiPTV first starts on a TV it registers that TV with the HiPTV device service, and then checks in about twice a day (at startup or when the app returns after 12 hours). Registration sends a device code, the platform (Android TV or Fire TV), the TV's model name, the app version and a public key created on the TV. Each check sends the device code, the app version and the time, signed with that key.
• Device code: a short code (for example A3:7F:2C:91:0B:E4) made by hashing the TV's Android ID, or a random ID when the Android ID is unavailable. The Android ID itself is never sent. The code is shown in Settings → About so that support can identify a TV.
• Why: the service tells the app whether the TV may play content (today every TV may, for free) and whether this version still needs an update. HiPTV will use the same code later to link a TV to a HiPTV account.
• What is never sent: your provider address, login, playlist, channels, viewing history or IP address are never sent to or stored by the device service. Cloudflare, which runs the service, processes the TV's IP address to deliver the request.
• Private key: the matching private key stays in the TV's secure key storage (Android Keystore) and cannot be copied off the TV.

5. TV guide (XMLTV) and trailers

• TV guide (XMLTV): Optional Electronic Program Guide (XMLTV) downloads connect directly to the guide URLs that you or your provider supply.
• Trailers: Pressing the trailer button opens the YouTube app on your TV. YouTube's own privacy policy applies when you use YouTube.

6. What HiPTV does not collect or use

• No user accounts or registration
• No advertising or ad SDKs
• No analytics or telemetry
• No crash-reporting SDK
• No selling or sharing of user data with third parties
• No location access
• No microphone access

This covers the HiPTV app. The hiptv-tv.com website uses Cloudflare Web Analytics to count page visits. It sets no cookies and does not identify you or follow you across other sites.

7. Children's privacy

HiPTV is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

8. Data retention and deletion

• On your device: Uninstalling HiPTV or selecting Clear data in Android TV system settings immediately removes all sources, credentials, catalog data, favourites, watch history, PIN hashes, settings and the local install ID from your TV.
• On the metadata service: If you want request records associated with your device's install ID deleted from the metadata service, email privacy@hiptv-tv.com with your request.
• On the device service: the device record (device code, platform, model, app version, public key, first and last check time, number of checks) is kept while the TV uses HiPTV. To have it deleted, email privacy@hiptv-tv.com with the device code from Settings → About.

9. Changes to this policy

Any changes to this privacy policy will be posted at https://hiptv-tv.com/privacy with an updated effective date.