Privacy Policy — Wivo

Last updated: 6 October 2026

Wivo ("Wivo", "we", "us") is a media player application operated by Maxime SADDEM. This policy explains what data we process when you use the Wivo app, and your rights.

Wivo is a player only. It does not provide, host, or supply any TV channels, media, or subscriptions. You add your own playlists (M3U / M3U8) or Xtream Codes credentials. We are not responsible for, and do not access, the content you load.

1. Data we process

• Account data — if you create an account, we store your email address and authentication data (handled by our backend, Supabase).
• Sign in with Apple — if you choose it, Apple shares with us a stable identifier for your Apple Account, the email address you decide to share (which may be a private relay address created by Apple’s “Hide My Email”) and, the first time only, the name on your Apple Account. We store them with your Wivo account. We never receive your Apple Account password.
• Your app content — when you are signed in, the playlists you add (their name, their source URL and, for Xtream sources, the username and password you enter), together with your favorites, watch-later list, watch progress and profiles, are stored on our servers so they sync across your devices. These credentials are yours and belong to your own provider; we use them only to restore your playlists on your devices, never to access content ourselves.
• Usage data — to know whether the app works for you, it records a few events linked to your account: whether adding or loading a playlist succeeded or failed (with the number of channels, films and series found, and a short error description from which any web address is removed), and whether playback started or failed (live, on demand or local file, and how long it took), together with the app version and the type of device (iPhone, iPad, Mac or Apple TV). These events never contain the address of your playlists, your provider credentials, or the titles you watch.
• Technical data — minimal diagnostic and log data needed to operate and secure the service.

We do not collect the video/stream content itself, and we do not track your viewing for advertising.

2. What we do NOT do

• We do not sell your personal data.
• We do not use advertising or third-party tracking SDKs. The usage data above is collected by Wivo itself and is never used for advertising or shared.
• We do not access, store, or redistribute the media behind your playlists.

3. How we use your data

• Provide and maintain the service (account, sign-in, including Sign in with Apple, cross-device sync).
• Find and fix problems with playlist imports and playback, and understand how the app is used, from the usage data.
• Send transactional emails (account confirmation, password reset) via Resend.
• Security, abuse prevention and legal compliance.

4. Legal basis (GDPR)

Performance of our contract with you (providing the app and account), our legitimate interest in securing and improving the service (including the usage data), and your consent where applicable.

5. Service providers

• Supabase (self-hosted) on Hetzner servers located in Germany (EU) — backend, database and authentication.
• Resend — delivery of transactional emails.
• Apple — App Store distribution, in-app purchases and Sign in with Apple, processed under Apple’s own privacy policy.

6. Data location & retention

Your data is stored in the European Union (Germany). We keep it while your account is active. You can delete your account directly from within the app, at any time: this permanently removes your account, your synced playlists and credentials, your favorites, watch-later list, watch progress, profiles and usage data from our servers. If you used Sign in with Apple, we also revoke Wivo’s access to your Apple Account, so Wivo no longer appears among the apps using it. You may also request deletion by email at the address below.

7. Security

We use HTTPS/TLS in transit and access controls. The username and password of your Xtream sources are encrypted on your device before being synced. For an account with a password, the encryption key is derived on your device from that password and is never sent to our servers: we cannot read these credentials. For an account created with Sign in with Apple, which has no password, the key is protected by a secret kept on our servers separately from the database. No method is 100% secure, but we take reasonable measures to protect your data.

8. Your rights

Under the GDPR you may access, correct, delete or export your data, and object to or restrict its processing. Contact us at the address below. You may also lodge a complaint with your data protection authority (in France, the CNIL).

9. Children

Wivo is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect their data.

10. Changes

We may update this policy; the "Last updated" date will change accordingly. Material changes will be notified in-app or by email.

11. Contact

Wivo — [email protected]