Privacy policy

1. Who handles your data

The Max App operator is responsible for personal data processed to run this player service and website. Contact details are listed below. A reseller separately handles its customer relationship and sales records. We may receive device settings and playlists from you, your app or the reseller managing your device.

2. What we process

Device records include virtual MAC, app/device identifiers, Android identifier hashes, enrollment public keys, app version, system type, registration, trial and paid activation history, provider/MAC lock settings, playlist delivery receipts and diagnostic state. A one-way hash of the device's hardware DRM identifier, computed on the device, is used only to restore that device's activation after a reset, and only after an administrator confirms it; the identifier itself is never collected. Connection records contain the app identifier, last connection and approximate country derived from the request IP; they do not store that raw IP. Reseller customer records include names, email, notes and device/list assignments. We also store provider host settings, alternate-server preferences, credit transactions and audit/operation records. MAC lookup logs store the requesting account, queried MAC, registered/ownership result and time. Server requests include an IP address for security and rate limits. Reseller account data includes name, email, role, credits, activation activity and recent sign-in history, including IP, browser and operating system.

3. Playlists and messages

Playlists added by you or a reseller, including links, file contents and any required provider credentials, are stored to deliver them to the intended device. They are not published through the public website. Contact requests include your name, email, optional MAC and message, plus submission/expiry times, processing status and a request fingerprint for duplicate prevention. Only the service owner can read contact messages. Support cases store the submitted description, replies and selected device/playlist diagnostics. Do not send playlist links, passwords, tokens or payment details in messages; we remove links and recognizable credential text before storing contact messages.

4. Why we use data and our legal bases

We use data to register devices, deliver playlists, provide playback configuration and activations, operate reseller accounts and answer requests. Where necessary to provide an agreed service or take requested steps before a contract, processing is based on that contract. Security, abuse prevention and service reliability rely on legitimate interests, balanced against your rights. Records required by law rely on legal obligations. Where consent is required, we ask for it separately and you may withdraw it without affecting prior lawful processing.

5. Retention

We keep device and account records while needed for the service, licence history and prevention of repeated trials. Playlists are retained in the account library or while needed for delivery. Detach removes the owning reseller’s lists from the device; copies in that reseller’s library remain private until deleted. Sign-in history keeps the latest 30 entries. Support cases and replies older than 180 days are eligible for administrator cleanup. Contact messages and MAC lookup logs are marked for automatic deletion after 90 days; deletion runs asynchronously. Locking a device removes customer-added lists. Detach preserves the device’s original trial and paid activation expiry. Security and transaction records may be retained longer where required to meet legal obligations or protect legitimate claims. We review retention and remove data that is no longer needed.

6. Service providers and sharing

We use Firebase/Google as a processor for authentication and hosted data, and Cloudflare Turnstile to verify public submissions. These providers process data needed for their services. The reseller managing a device can access its own customer and playlist records, never another reseller's private lists. When you tap “Send report” in the app's Connection test, the results, including your public IP address, internet provider (ISP/ASN), country, device DNS, and the username and server address of the tested IPTV line (never the password or the list name), are shared with the reseller managing your device for support; only the latest report is kept and it is deleted automatically after 30 days. We may disclose data where law requires it. We do not sell personal data. Where service processing involves international transfers, applicable safeguards must be used, including contractual protections where required.

7. Security and browser storage

Access controls separate reseller accounts, device access and public actions. Public upload/delete requires a one-time device code and bot verification; public status checks return activation information only. We restrict access to private configuration and avoid including credentials in diagnostics. The browser stores the selected language and necessary sign-in state. No system can guarantee absolute security; tell us promptly about suspected misuse.

8. Your rights

Subject to applicable law, you can request access, correction, deletion, restriction or a portable copy of your data, and object to processing based on legitimate interests. You can withdraw consent where it is used. Contact us using the form or configured support email; provide enough information to locate the device or account, but no passwords. We may ask for proportionate proof that the request is yours. You may also complain to the relevant data-protection authority. We do not use these data for automated decisions producing legal or similarly significant effects.

9. Children and updates

The service is not directed at children acting without a parent or guardian. Do not submit a child's personal data unnecessarily; contact us about data collected inappropriately. We may update this policy to reflect service or legal changes and will give additional notice where required.

Support email

maxiprograme@gmail.com

Questions or privacy requests? Use Contact us.