ZYO PLAYER · PRIVACY
Privacy Policy
ZYO is a media player. We collect data needed to operate the player, My app and account panels, together with limited first-party website measurements described below. We do not sell your data, show advertising or use cross-site advertising trackers.
1. Who we are
This policy covers the ZYO Player apps, the zyoplayer.com website, My app and the account panel. For privacy questions or requests, write to [email protected].
2. Data from your TV
- Device ID (ZYO-XXXX-XXXX-XXXX), derived from an identifier of your device, plus technical details the app reports: platform, model, operating system, app version and playback engine.
- Lists you add: playlist address, Xtream server, username and password, or an uploaded .m3u file. They are stored encrypted and are sent only to the TV they belong to. Source addresses are hidden in the apps and panels, but the owner of a device can still inspect what that device receives.
- Settings of the app, including a history of who changed which setting (you, the account that manages the TV or ZYO defaults), the accepted Terms version and the app language.
- Parental controls: your rules and PIN, stored in protected form, plus a count of wrong PIN attempts.
- Synchronized data, only if you turn on synchronization on that TV: favourites, watch history, progress and likes, shared with the other TVs of the same line.
- Activity: the hours in which the app contacted the server (kept 31 days) and the time of the last contact.
- Connection address: the last IP address and an approximate location (country and city) for each active line. The location comes from an offline database on our own server; we do not send your address to a location service.
3. Data from panel accounts
For website accounts and administrator accounts: email address, name, password (stored only as a one-way hash), two-step verification secret and recovery codes (codes stored only as hashes), accepted Terms version and time, language, last sign-in, last IP address and approximate location, credit balance and credit history (including which administrator made each change) and a log of administrative actions.
4. My app on the website
Signing in to My app uses a Device ID and a one-time key shown on your TV. The key works once, for 10 minutes, and we keep only a hash of it. The session lasts 30 minutes.
App Support tickets
When you write to App Support we store the ticket type, subject and messages, the replies of ZYO Support and, only if you choose it, technical details of the TV (platform, model, system, app version, player and Device ID — never your lists or passwords). From the contact form we also store your name and e-mail address to answer you. Tickets are stored encrypted and are visible only to you (in your account, or in My app for that TV) and to ZYO administrators. Tickets close after 14 days without a reply and are deleted 12 months after they are closed; deleting your account deletes its tickets.
E-mails
We send e-mails only for your account and App Support: confirming your address, resetting your password, security alerts (password changed, two-step verification reset), invitations to accounts created by ZYO and replies to your tickets. They come from [email protected] through our e-mail provider, Namecheap. We do not send newsletters or advertising and we do not track whether you open them or click. A message waiting to be sent is stored encrypted; after it is sent we keep only its type and time, for 30 days.
5. Cookies and browser storage
We use only cookies that are needed to keep you signed in: one for the account panel and one for My app. The website also stores your chosen theme and language in your browser. There are no advertising or analytics cookies.
6. Why we use the data
To activate the player and deliver your lists to your TV, to apply your settings and parental controls, to synchronize your markers when you ask for it, to let account holders manage the TVs and lists in their account, to handle credits and to protect the service (for example by limiting repeated sign-in attempts from one address).
7. Who can see it
- The account that manages your TV, if your list was added from another account: the Device ID, device details, settings, last activity, last IP address and approximate location of the TVs that use its lists.
- ZYO administrators, to run the service and to handle requests.
- Your playlist provider: to load your catalogue and, for some films, to convert their audio, our server connects to your provider on behalf of your TV. The provider sees our server's address.
- TMDB: when you open details from TMDB, the server sends the title name and year to The Movie Database. No personal data is sent.
- Hosting and network providers: OVHcloud hosts the application server; Cloudflare provides DNS, HTTPS, Tunnel connectivity and public APK storage/delivery; Namecheap hosts our email.
- Cloudflare Turnstile: web sign-in and list-submission forms use anti-bot verification. Cloudflare processes technical browser/network signals and the connection IP to check for abuse; our server validates the short-lived result. We do not send playlist credentials or form contents to Turnstile. See Cloudflare Privacy Policy.
We do not sell or rent personal data.
8. Data stored on your TV
The app keeps your saved lists, settings, watch markers and a downloaded copy of your library on the TV. You can delete them in the app: Settings → General has Delete cache, Delete app data and Delete sync user data, each confirmed separately.
9. How long we keep it
- A line and its settings, history, parental controls and connection details are deleted when you or the managing account delete it, or after 90 days in which the TV has not connected.
- Synchronized data is deleted when you delete it in the app or when the last line using it is deleted.
- Hourly activity is kept 31 days; only the latest IP address and location are kept, and only for active lines.
- Records that limit repeated sign-in, registration or activation attempts contain the connection address and are deleted within about an hour after their limit period ends.
- Panel accounts are kept until you ask us to close them (see Delete your data); closing is done by ZYO on request. Copies of deleted data can remain in server backups until those backups are replaced.
Device activation records are kept separately from playlist records. The server stores the device activation expiry and the credit movements used to extend it; deleting a playlist does not delete this activation record.
10. Security
Lists are encrypted on the server, passwords are stored as hashes and the account panel requires two-step verification. No system is completely secure; tell us at [email protected] if you notice a problem.
11. Your rights
Depending on where you live, you can ask to access, correct or delete your data, to object to or restrict its use and to receive a copy. You can also complain to your data protection authority. See Delete your data for the quickest ways to remove it.
Website measurement
We use first-party measurements hosted on our own server to understand page views, approximate countries, browser sessions and time spent on visible, focused pages. A random session identifier is held in session storage and renewed after inactivity. We do not store full IP addresses, query strings, form values, playlist details or account identities in these analytics records. Country is derived from the connection address using our offline location database. We respect browser Do Not Track for page measurement. Records are retained for up to 90 days.
APK counters measure requests through our download and update endpoints, not confirmed installations or completed transfers. Direct download-host links may not be counted. We do not send these analytics records to Google Analytics.
12. Children
ZYO is not directed at children. Parental controls let the owner of a TV restrict content.
13. Changes
When this policy changes, the version date above changes too.