NiPa Studio ("we", "our", or "us") operates the NiPa Player application for iOS, Android, Android TV,
and macOS (the "App"). This Privacy Policy explains how we collect, use, store, and protect your
personal data when you use our App, in accordance with the General Data Protection Regulation (EU)
2016/679 ("GDPR"), the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee
of Digital Rights ("LOPDGDD"), and other applicable data protection legislation.
By using the App, you acknowledge that you have read and understood this Privacy Policy. If you do
not agree with our data practices, please do not use the App.
Important Notice:
NiPa Player is exclusively a media player application.
We do not provide, sell, distribute, host, stream, or commercialize any IPTV
playlists, channels, media content, or streaming services of any kind. All content accessed
through the App comes from external sources provided solely by the user. NiPa Studio has no
affiliation with any IPTV service provider and bears no responsibility for the content,
legality, or availability of any third-party streams.
1. Data Controller
The data controller responsible for processing your personal data is:
You may contact us at any time regarding questions about data protection or to exercise your rights.
2. Information We Collect
We apply the principle of data minimization — we only collect data that is strictly
necessary for the App to function. The App contains no advertising and no analytics or
marketing trackers. Below is a detailed breakdown:
a) Account Information (optional — only if you create an account):
Creating an account is optional and is only required if you want cloud sync across your devices. You
can sign in using any of the following methods:
Email and password — we store your email address for authentication and
account recovery. Your password is never stored in plain text; Firebase Authentication handles
credential security using industry-standard hashing algorithms
Google Sign-In — we receive your email address and basic profile information
(name) from your Google account, as authorized by you during sign-in
Sign in with Apple — we receive the email address you choose to share. If you
use Apple's "Hide My Email" feature, we only receive the anonymized relay address, never your
real one
b) User Profiles:
The App lets you create up to 5 viewing profiles (including kids profiles) to keep favorites,
viewing history, and playback progress separate for each member of your household. Profile data
consists of:
Profile name and chosen avatar (you may use any name — real names are not required)
Per-profile favorites, viewing history, and playback progress ("continue watching")
This data is stored locally on your device. If you sign in to an account, it is
additionally synced to your account so it is available on your other devices.
c) Subscription Data:
If you subscribe to NiPa Player, all payment processing is handled entirely by Apple (App Store)
or Google (Google Play). We never collect, access, or store your payment
information (credit card numbers, billing addresses, bank details, etc.). We only receive a
confirmation of your subscription status (active/inactive/expired) through RevenueCat, our
subscription management service.
d) Device Identifier (free trial management):
To offer a free trial and prevent its abuse (e.g., repeatedly reinstalling the App to restart the
trial), we process a pseudonymous device identifier:
On Android: the ANDROID_ID value provided by the operating system
On Apple devices: the identifierForVendor value provided by the operating
system
This identifier is stored together with the trial start date on our servers. It is not the
advertising identifier (we never access IDFA/AAID), it cannot be used to identify you
personally, and it is used exclusively to enforce the one-trial-per-device policy — never for
advertising, tracking, or profiling.
e) User-Provided Content (playlists):
The App allows you to add your own IPTV playlists (M3U URLs or Xtream Codes API credentials). This
data is:
Stored locally on your device by default, encrypted at rest
using AES-256. The encryption key is stored securely in the device's native keychain
(Keychain on iOS/macOS, EncryptedSharedPreferences on Android)
If you sign in to an account, your playlist data is synced to your account on Cloud
Firestore, protected by Firebase Security Rules and encrypted in transit (TLS) and at rest
We do not monitor, access, inspect, or control the content of your playlists or
the streams you access
f) Offline Downloads:
If the download feature is available on your platform, media you download for offline viewing is
stored exclusively on your device, inside the App's private sandbox. Downloaded
files are never uploaded to our servers, are excluded from cloud device backups,
and are removed when you delete them or uninstall the App. We have no knowledge of, or access to,
what you download.
g) Crash Data:
We use Firebase Crashlytics (Google LLC) to collect anonymous crash reports. This
data includes device model, OS version, and stack traces. Before any crash report is sent, the App
automatically scrubs playlist URLs and credentials from it. Crash data does not
identify you personally and is used solely to fix bugs and improve app stability.
h) Remote Configuration:
The App uses Firebase Remote Config (Google LLC) to retrieve feature availability
flags and, occasionally, important service messages (e.g., a notice about a critical update). This
is a simple configuration download — no personal data is collected and no profile is built.
i) Data We Do NOT Collect:
We do not collect your location data
We do not collect your contacts, photos, or files
We do not collect advertising identifiers (IDFA/AAID)
We do not use analytics or marketing SDKs, and we do not track you across other apps or
websites
We do not use cookies or web tracking technologies within the App
We do not monitor what you watch — viewing history exists only for your own "continue
watching" convenience, on your device and (if signed in) in your private account space
3. Legal Basis for Processing
Under the GDPR (Article 6), we process your personal data based on the following legal grounds:
Contractual necessity (Art. 6(1)(b)): Processing your account data is
necessary to provide the App's services (authentication, cloud sync, subscription management)
Legitimate interests (Art. 6(1)(f)): Processing anonymous diagnostic data to
improve App stability, and processing the pseudonymous device identifier to prevent free-trial
abuse. These processing activities do not override your fundamental rights, as the data is
non-identifiable or strictly limited to fraud prevention
Consent (Art. 6(1)(a)): Where required, we obtain your explicit consent before
processing (e.g., enabling notification permissions). You may withdraw consent at any
time
4. How We Use Your Information
We use the information we collect exclusively for the following purposes:
To provide, operate, and maintain the App
To authenticate your account and enable cloud sync of your playlists, profiles, favorites, and
playback progress across your devices
To verify and manage your subscription status and free trial
To send local notifications for program reminders you have set (these are
processed entirely on your device; no notification data is sent to our servers)
To send essential service communications (e.g., password reset emails)
To improve the App through aggregated, anonymous diagnostic data
To respond to your support inquiries
We do not use your data for advertising, profiling, automated decision-making, or
any purpose not listed above. We never sell your data.
5. Data Storage, Security, and Retention
Storage:
Local data (playlists, profiles, favorites, settings, viewing history,
offline downloads) is stored solely on your device and is not accessible to us
Account data (if you create an account) is stored securely using Google
Firebase services (Firebase Authentication and Cloud Firestore), hosted in the European
Union
Security measures:
All data transmitted between the App and our servers is encrypted using TLS (Transport Layer
Security)
Playlist credentials stored locally on your device are encrypted at rest using
AES-256, with the encryption key secured in the device's native keychain
Offline downloads and their metadata are stored in the App's private, sandboxed storage,
with metadata kept in an encrypted local database
Data at rest in Firebase is encrypted using AES-256
Access to user data is restricted by Firebase Security Rules to the authenticated user only
Passwords are hashed using industry-standard algorithms and are never stored in plain text
Playlist URLs and credentials are automatically scrubbed from crash reports before they leave
your device
Data retention:
Account data is retained for as long as your account is active
When you delete your account (Settings → Account → Delete Account), all associated data is
permanently and irrecoverably deleted from our servers within 30 days
The pseudonymous device identifier used for trial management is retained only as long as
necessary to enforce the one-trial-per-device policy
Anonymous diagnostic data is retained for a maximum of 12 months, after which it is
automatically purged
Local data on your device is retained until you uninstall the App or clear App data
6. Third-Party Services
We use the following third-party services to provide App functionality. Each service processes data
in accordance with their own privacy policies:
Firebase Authentication (Google LLC) — user account management and
authentication (email/password, Google Sign-In, Sign in with Apple). Data processed: email
address, hashed credentials.
Privacy
Policy
Cloud Firestore (Google LLC) — cloud storage for synced data. Data
processed: playlist URLs and credentials, profiles, favorites, viewing progress, settings
(only if you sign in), and the pseudonymous trial device identifier.
Privacy
Policy
Firebase Remote Config (Google LLC) — feature flags and service messages. No
personal data is collected.
Privacy
Policy
Firebase Crashlytics (Google LLC) — anonymous crash reporting. Data
processed: device model, OS version, stack traces (with credentials scrubbed). No personally
identifiable information is collected.
Privacy
Policy
RevenueCat (RevenueCat, Inc.) — subscription status management. Data processed:
anonymous user identifier, subscription status. RevenueCat does not receive your email or
personal details.
Privacy Policy
Google Sign-In (Google LLC) — optional sign-in method. Data processed: your
Google account email and basic profile, as authorized by you.
Privacy Policy
Sign in with Apple (Apple Inc.) — optional sign-in method. Data processed:
the email address you choose to share (or a private relay address).
Privacy
Policy
Google Cast SDK (Google LLC) — Chromecast functionality. No personal data is
transmitted to us; media playback commands are sent to the Cast device on your local network.
We have ensured that all third-party processors offer adequate levels of data protection. Firebase
and Google services operate under Google's Data Processing Terms, which include Standard Contractual
Clauses for international transfers.
7. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA),
specifically to servers operated by Google LLC and RevenueCat, Inc. in the United States. These
transfers are protected by:
The EU-U.S. Data Privacy Framework (DPF), under which Google LLC and RevenueCat, Inc. are
certified
Standard Contractual Clauses (SCCs) approved by the European Commission
The providers' Data Processing Terms and security commitments
8. Data Sharing
We do not sell, trade, rent, or otherwise disclose your personal information to
third parties for their own purposes. Data is only shared with the third-party service providers
listed in Section 6, strictly as necessary to provide App functionality.
We may disclose personal data if required to do so by law or in response to valid requests by public
authorities (e.g., a court order or government agency).
9. Your Rights Under GDPR
Under the GDPR and LOPDGDD, you have the following rights regarding your personal data:
Right of Access (Art. 15) — You can request a copy of all personal data we hold
about you
Right to Rectification (Art. 16) — You can request correction of inaccurate or
incomplete data
Right to Erasure (Art. 17) — You can request deletion of your personal data
("right to be forgotten"). You can do this directly in the App (Settings → Account → Delete
Account) or by contacting us
Right to Restriction of Processing (Art. 18) — You can request that we limit
how we process your data under certain circumstances
Right to Data Portability (Art. 20) — You can request your data in a
structured,
commonly used, machine-readable format
Right to Object (Art. 21) — You can object to the processing of your personal
data where we rely on legitimate interests
Right to Withdraw Consent (Art. 7(3)) — Where processing is based on consent,
you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at
dev@nipaplayer.com. We will respond within 30 days as
required by law.
You also have the right to lodge a complaint with a supervisory authority. In Spain,
this is the Agencia Española de Protección de Datos (AEPD) —
www.aepd.es.
10. Children's Privacy
NiPa Player is not directed to children under the age of 16 (or the applicable minimum age in your
jurisdiction under GDPR). We do not knowingly collect personal information from children. Kids
profiles are a convenience feature managed entirely by the account holder — children do not create
accounts and no data about them is collected by us. If you are a parent or guardian and believe
that your child has provided us with personal data, please contact us at
dev@nipaplayer.com and we will promptly delete such
information.
11. Content Disclaimer
NiPa Player is a media player application. We do not provide, host, stream,
distribute, or have any control over any media content. The App plays content from sources (IPTV
playlists) provided exclusively by the user. Users are solely responsible for the content they
access and must ensure compliance with applicable copyright laws, intellectual property rights,
and the terms of service of their content providers.
NiPa Studio bears no responsibility for the nature, legality, or availability of any content
accessed through user-provided playlists.
12. Notifications
The App may show local notifications for program reminders that you have explicitly set, and for the
progress of downloads you have started. These notifications are:
Processed entirely on your device (no data is sent to our servers)
Only shown after you grant notification permission
Fully optional — you can disable them at any time in your device settings or within the App
13. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and
freedoms, we will:
Notify the relevant supervisory authority (AEPD) within 72 hours of becoming
aware of the breach, as required by GDPR Article 33
Notify affected users without undue delay if the breach is likely to result in a high
risk to their rights and freedoms (GDPR Article 34)
Document the breach, its effects, and the remedial actions taken
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal
requirements, or App functionality. When we make material changes, we will:
Update the "Last updated" date at the top of this page
Notify you through the App or via email for significant changes
Continued use of the App after any changes constitutes your acceptance of the revised Privacy
Policy. We encourage you to review this page periodically.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data
practices, please contact us: