Privacy policy

Data processed by the app

When the app starts it connects to our server to check the licence. It sends:

• a device identifier made of a MAC-style code and a 6-digit device key, created by the app itself (it is not your hardware MAC address);
• the device model, platform (Android TV, Fire TV, Android, Vega OS), app version and language;
• and, as part of any internet connection, your IP address. We keep the time and IP address of the last connection.

We use this to give the device its free trial or licence, deliver its playlists and prevent misuse of licences. The legal basis is the performance of the contract (GDPR Art. 6(1)(b)) and, for preventing misuse, our legitimate interest (Art. 6(1)(f)).

Playlists

Playlists are added by you on this website, or by your provider or reseller in their panel. We store the playlist name and URL, Xtream Codes server, username and password, or MAG portal address and MAC, an optional TV guide (EPG) link and an optional PIN. Links and logins are encrypted on our servers (AES-256-GCM) and PINs are stored only as a one-way hash. They are sent only to your device, over an encrypted connection.

The app downloads the playlist, the channels and the TV guide directly from your provider's servers. Your provider therefore sees your IP address and what you watch, under its own privacy policy. We are not responsible for that content or processing.

Customers, sales and panel accounts

When a licence is sold, the seller may record a customer name, phone number, email address and notes, the plan, the price, the payment method and the date paid. Payments are made outside the app and recorded by hand; we never receive card or bank details. This is needed for the contract and to keep accounts as required by law (Art. 6(1)(b) and (c)).

Staff and resellers who use the management panel have an account with name, email and a hashed password. Sign-ins and changes are recorded in an activity log together with the IP address, to keep the service secure (Art. 6(1)(f)).

Messages you send us

When you write to us from the Contact page we keep your name, email address, the optional phone number and device MAC address, the topic, your message and the IP address it came from. We use them only to answer you and to stop abuse of the form (legitimate interest, Art. 6(1)(f)), and delete them after 12 months.

What stays on your device

Favourites, watch progress, programme reminders, the cached playlist and licence, and your language choice are stored only on your device and are never sent to us. Reminders are shown by your device's own notification system. Uninstalling the app deletes them.

Crash reports

If the app or our server runs into an error, a crash report can be sent to Sentry, the error-monitoring service we use as a processor. It contains the error and where it happened in the code, the app version, the device model and system version, and the device identifier — never playlist links, logins, cookies, IP addresses or what you watch. We use it only to fix problems (legitimate interest, Art. 6(1)(f)); reports are kept for up to 90 days.

What we do not do

• no advertising and no advertising identifiers;
• no analytics or tracking tools in the app or on this website;
• no viewing history is collected;
• we never sell personal data.

Cookies

This website only uses cookies that are strictly necessary, so no consent banner is needed:

• fp_portal: keeps you signed in to the playlist page after you enter your MAC and device key (up to a few hours);
• fp_session: keeps staff and resellers signed in to their panel;
• fp_locale: remembers the language you chose (one year).

Who receives the data

Your provider or reseller sees the devices, playlists and customer records they manage. Our hosting provider stores the data, and Sentry receives crash reports, on our behalf under data processing agreements. App stores (Google Play, Amazon Appstore) handle downloads under their own policies. We do not transfer data outside the European Economic Area; if a supplier ever requires it, we will rely on the European Commission's standard contractual clauses.

How long we keep data

• Device data: while the licence is active. 12 months after a licence ends, if the app has not connected since, the device is deleted automatically. If it was sold, it is anonymised instead: the identifier, model, IP address and playlists are deleted and only the sale record remains.
• IP addresses: 12 months, then erased from the device record and the activity log.
• Crash reports: up to 90 days.
• Playlists: until they are removed, or until the device is deleted.
• Sales records: as long as accounting and tax law requires (in Italy, 10 years).
• Panel accounts: until the account is closed.

Security

All connections use HTTPS. Playlist logins are encrypted, passwords and PINs are hashed, panel access is limited by role, sign-in attempts are rate-limited and every change is logged.

Your rights

You can ask for access to your data, its correction or deletion, to restrict or object to its processing, and for a copy in a portable format. Write to the email address above or use the Contact page, or ask your provider, and include your MAC address so we can find your device. You can delete your playlists yourself at any time on the Manage playlist page. You also have the right to lodge a complaint with a supervisory authority; in Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Children

Focus Play Pro is not intended for children under 14, and we do not knowingly process their data.

Changes

If this policy changes, the new version is published on this page with a new date.