# Privacy Policy

_Last updated 4 October 2026_

## The short version

GridTV does not collect anything about you. There are no accounts, no analytics, no
advertising, and no servers of ours for your information to sit on. Everything GridTV knows —
your playlists, your favourites, where you stopped watching — is stored on your device.

If you switch on iCloud Sync, some of it is also copied to **your own** iCloud account so your
other devices can see it. That is Apple's storage under your Apple Account, not ours, and we
cannot read it. Your provider logins are kept out of it — "Syncing with iCloud" says exactly
how far that goes. Sync is off unless you turn it on.

## What GridTV is

GridTV is a player. It does not provide channels, sell subscriptions to channels, or help you
find a provider. You supply a playlist or a provider login, and GridTV shows you what is in it
and plays it; Search only looks inside your own playlists. That distinction matters for
privacy: the content you watch comes from a service you chose and have your own relationship
with, not from us.

## Who is responsible

GridTV is made and sold by Csaba Farkas, a sole trader in Austria who publishes apps under the
name Sylenia. Sylenia is a brand name, not a company. Where this policy says "we" or "us", it
means Csaba Farkas.

Csaba Farkas (Sylenia), Münchner Bundesstraße 121b, 5020 Salzburg, Austria. Email:
**info@syleniainc.com**.

## What we collect about you

Nothing, through the app.

We have no analytics, no crash-reporting service, no advertising identifiers, no marketing
tools, and no account system. GridTV never asks who you are, and there is no server of ours it
could tell. The only personal information we ever hold is an email you choose to send us — see
"Your rights".

Apple runs two programmes of its own that can reach us. If you have chosen in iOS Settings to
share analytics with app developers, Apple may pass us crash reports and usage statistics that
do not identify you. If you test a beta of GridTV through TestFlight, Apple passes on the crash
reports and feedback you send from it. Both happen under Apple's privacy policy, not through
anything in GridTV.

## What is stored on your device

All of this lives on your iPhone or iPad. The database and settings are private to GridTV; the
two things other parts of your device can see are named below.

- **Your playlists** — the name, address and settings of each playlist you add.
- **Your provider logins.** An Xtream username and password, and any username, password or
  token GridTV finds in a playlist address, go into the iOS Keychain, the same protected
  storage Apple uses for saved passwords. They are never synced through iCloud Keychain or by
  GridTV's iCloud Sync, and GridTV only ever sends a saved login to the address it was saved
  for. Like other Keychain items, they are part of an encrypted backup of your device — see
  "Backups".
- **What your provider sends** — channels, categories, TV guide data, and films, series and
  episodes with their descriptions, cast and artwork addresses — so the app is fast and works
  while you are scrolling.
- **Your favourites, your recently watched channels, and the channels and categories you hid
  or locked.**
- **Where you stopped watching** a film, an episode, a catch-up programme or a video you
  imported, so it can resume.
- **Programme reminders you set.** They are scheduled on your device as notifications, alarms
  or Live Activities. Nothing about them is sent to us.
- **Your last eight searches**, so Search can offer them again. **Clear Recent Searches** in
  Search removes them.
- **Videos you import.** They are kept in GridTV's Documents folder, which you can see in the
  Files app and in Finder on a computer, so you can manage them there. They are left out of
  device backups.
- **A short summary for widgets and Apple Watch.** The names and logos of your favourite
  channels, the titles of what is on now and next, and your upcoming reminders are shared with
  GridTV's own widgets and, if you have one paired, GridTV's Apple Watch app. It holds no login
  and no stream address.
- **Your parental lock PIN**, in the Keychain, marked so it never leaves this device and never
  appears in a backup restored onto a different one.
- **The date you first opened GridTV**, in the Keychain, to measure the 72-hour free trial.
  iOS keeps it when the app is deleted, so reinstalling does not restart the trial.
- **Your settings**, such as whether you turned on Face ID for the parental lock.
- **Diagnostic reports from iOS**, if the system produces any. iOS can hand an app a summary
  of its own crashes, hangs and memory use. GridTV keeps at most twenty of these, shows them
  to you under Settings ▸ Diagnostics, and sends them nowhere. You can read them, share one
  yourself if you choose to, or delete them all. This is not a crash-reporting service: there
  is no service, and nothing is uploaded.

None of this is sent to us. If you turn on iCloud Sync, part of it is copied to your own
iCloud account — see "Syncing with iCloud" below for exactly which part.

## Who your device talks to

GridTV makes network connections only to places you or your playlist point it at, and to
Apple:

- **Your provider.** To load your channel list, guide data, film and series details, and the
  streams themselves. If you use an Xtream login, your username and password are sent to your
  provider's server, because that is how their API identifies you. GridTV sends them nowhere
  else; "About unencrypted connections" and "Casting to a television" describe the two ways
  others can still see them.
- **Logos, artwork and guide sources.** Playlists usually include a logo or poster address for
  each channel, film and series, and often a separate address for TV guide data. GridTV loads
  those, which means the servers hosting them can see that a request arrived from your
  internet connection.
- **The same places, in the background.** If Background App Refresh is on, iOS lets GridTV
  refresh your TV guide now and then, and fill in film details while your device is charging
  and on Wi-Fi, so the app is up to date when you open it. Neither runs in Low Data Mode.
- **YouTube**, only if you tap a trailer. Film and series pages can show a trailer your
  provider names; tapping it opens YouTube, and Google's privacy policy applies from there.
- **Devices on your Wi-Fi**, only when you cast. See "Casting to a television".
- **Apple**, when you buy or restore a subscription, or open the Terms of Use from the
  purchase screen. See "Paying for GridTV Pro" below.
- **Apple's iCloud**, but only if you switch on iCloud Sync. See the next section.

There is no other traffic. GridTV does not phone home, because there is no home to phone.

## Syncing with iCloud

iCloud Sync is off until you turn it on, under Settings ▸ iCloud Sync. Nothing is uploaded
before you do.

When it is on, GridTV copies the following into the private area of your own iCloud account,
so your other devices running GridTV can pick it up:

- The name, address and settings of each playlist you have added, including any custom
  User-Agent.
- The address of each TV guide source you added, and any guide time offset you set.
- Which channels you marked as favourites, and which you hid. On an M3U playlist a channel is
  known by its stream address, with the login removed, so those addresses are part of what is
  copied.
- Which categories you hid, which you locked, and the order you put them in.
- Any TV guide channel you matched to a channel by hand.
- A record that a playlist was deleted, so deleting it on one device removes it on the others.

What is not uploaded:

- **Your Xtream login.** It stays in this device's Keychain. A playlist that arrives on a new
  device will ask you to sign in there.
- **A login inside a playlist address, as far as GridTV can recognise one.** Before a playlist
  address is copied, GridTV moves the parts named `username`, `password`, `token`, `auth`,
  `api_key` or `key`, and any `user:password@` before the server name, into the Keychain. A
  provider that puts a login in the address under some other name would have it copied along
  with the address. If yours does, leave iCloud Sync off, or ask your provider for an Xtream
  login instead.
- **Your parental lock PIN**, and whether you turned on Face ID. Those guard the device they
  were set on.
- **Channels, programmes, guide listings, films and series.** Each device downloads those from
  your provider itself.
- **Where you stopped watching, your recent channels and searches, your reminders and your
  imported videos.**

This is Apple's iCloud, under your Apple Account. It is not a server of ours, we have no
access to it, and no information about you reaches us at any point. Apple's handling of it is
covered by Apple's own privacy policy.

Turning the switch off stops the syncing. Nothing on the device is deleted, and nothing
already in your iCloud account is deleted either — turn it back on and your devices pick up
where they left off. To remove what GridTV has stored in iCloud, use Settings ▸ your name ▸
iCloud on your device.

## Backups

There are two kinds of backup, and they hold different things.

**Your device's own backup.** When iOS backs up your iPhone or iPad to iCloud Backup or to a
computer, it includes GridTV's database and settings, as it does for most apps. If the backup
is encrypted — iCloud Backup always is — it also carries your saved provider logins and the
date your free trial began, so a device restored from it has your playlists signed in and
ready. Your parental lock PIN is never restored onto a different device; set a new one there.
Videos you imported are left out to save space, so import them again after restoring. That
backup is Apple's, under your Apple Account, and we cannot see it.

**A backup you make in GridTV.** Settings ▸ Backup saves a file wherever you choose. It holds
the same things iCloud Sync copies — your playlists, favourites, hidden channels, category
order and guide settings — and leaves out the same things, including your Xtream login and
any login GridTV recognises in a playlist address. GridTV does not send the file anywhere;
where it goes is up to you.

## About unencrypted connections

This one deserves plain speaking. Many IPTV addresses use plain `http://` rather than
encrypted `https://` — roughly one stream address in five, in a large public channel index we
counted in September 2026. GridTV allows those connections, because refusing them would stop
a large share of the playlists people actually have from playing.

GridTV does two things about it, and it is worth being exact about the first.

When you add a playlist **by its M3U address**, GridTV checks once whether the same address is
available over `https://`, and if it is, that is the one it saves — you do not have to know or
do anything. When you add an **Xtream panel**, it does not, deliberately: every stream address
is built from the one you give, and panels routinely serve `https://` on the login API while
the streaming port has none, so switching the saved address would secure a small request and
break playback entirely. The address you give is the address GridTV keeps.

Either way, a playlist whose address is `http://` is marked **Unencrypted** in
Settings ▸ Playlists, so you can see which of your providers this applies to.

The practical consequence, where `https://` genuinely is not on offer: anyone able to observe
your network — the operator of the Wi-Fi you are on, for example — can potentially see which
addresses you request, and where a provider uses the Xtream login scheme, the username and
password included in them. That is a property of your provider's setup, not something GridTV
adds, and it is the same on any player. If it matters to you, ask your provider whether they
offer an `https://` address.

## Paying for GridTV Pro

Purchases are handled entirely by Apple through the App Store. GridTV never sees your name,
your payment details, or your Apple Account. What the app receives from Apple is a yes-or-no
answer to a single question: does this device have an active GridTV Pro purchase? That answer
is not stored on our side or sent anywhere, because there is no our side.

The 72-hour free trial is measured on your device, from the date described under "What is
stored on your device". Nothing about it is sent anywhere.

Apple's own handling of your purchase is covered by Apple's privacy policy.

## Face ID and Touch ID

If you turn on biometric unlocking for the parental lock, the check is performed by iOS. GridTV
asks the system whether the face or fingerprint matches one enrolled on this device, and
receives only yes or no. Face ID or Touch ID can also be used to reset a forgotten PIN. GridTV
has no access to your face or fingerprint data, which never leaves the secure hardware on your
device.

## Casting to a television

**AirPlay.** When you send a channel to an AirPlay device, your device gives the receiver the
address of the stream so it can play it directly, over your own network. If your provider uses
an Xtream login, that address contains your username and password, so the receiver is given
them too. Cast only to devices you trust.

**Chromecast.** When you open the Cast sheet, GridTV looks for Chromecast devices on your
Wi-Fi; iOS asks your permission for this the first time. When you cast, your iPhone keeps
fetching the stream from your provider and passes it to the television over your own network.
The Chromecast is given a local address on your iPhone, never your login. It is a Google device
and works under Google's terms.

Either way, nothing goes through us.

## Children

GridTV is rated 9+. It ships no channels, no catalogue and no way to look for either beyond
your own playlists — it plays what your own provider sends it, and nothing else.

Some providers do include adult material, so the app includes a parental lock. It is
**opt-in: until you set a PIN, nothing is hidden**. Once you set one, categories that look
adult from their name are locked automatically, and you can lock or unlock any category
yourself. What your subscription carries is between you and your provider; the lock is here
so you can decide what this device shows.

## Your choices, and deleting your data

Because everything is on your device, you are in control of all of it:

- Deleting a playlist removes its channels, guide data, films and series, where you stopped
  watching them, and its saved login from the Keychain. With iCloud Sync on, it is removed
  from your other devices too.
- Turning off the parental lock erases the stored PIN.
- **Clear Recent Searches** in Search removes your search history, and Settings ▸ Diagnostics
  deletes diagnostic reports.
- Turning off iCloud Sync stops anything further being copied to iCloud. Your playlists,
  favourites and settings stay on the device untouched, and what is already in iCloud stays
  there until you remove it — see "Syncing with iCloud".
- Deleting GridTV removes its database, guide data, settings and imported videos. iOS keeps
  Keychain items after an app is deleted, though: your saved provider logins, your parental
  lock PIN and the date your free trial began stay in the Keychain. To remove the logins and
  the PIN, delete each playlist and turn off the parental lock before deleting GridTV. Erasing
  the device removes everything.
- Copies you made yourself — a backup file, an iCloud Backup of your device — stay wherever you
  keep them until you delete them.

There is no account to close. The only thing we could ever hold about you is an email you sent
us — see "Your rights".

## Your rights

Under the EU General Data Protection Regulation you can ask us what personal data we hold
about you, and ask us to correct it, delete it, restrict its use, or give it to you in a
portable form. You can also object to how it is used. Because GridTV sends us nothing, in
practice this only ever concerns emails you have sent us. We use an email only to answer it,
and keep it no longer than that takes. Email to us is received through Private Email, a mailbox
service run by Namecheap, which handles it on our behalf under a data processing agreement and
relies on the European Commission's Standard Contractual Clauses for transfers outside the EU.
Write to **info@syleniainc.com** to use any of these rights.

You also have the right to complain to a data protection authority. Ours is the Austrian
Datenschutzbehörde, at www.dsb.gv.at; you can also turn to the authority where you live.

## Changes to this policy

If GridTV ever starts handling information differently, this policy will be updated before the
change ships, and the date at the top will say when. Given the design of the app — no accounts,
no servers, no analytics — we do not expect that to happen.

## How to reach us

Questions about privacy in GridTV can be sent to **info@syleniainc.com**, or by post to the
address under "Who is responsible".
