Privacy Policy

Effective date: August 27, 2026 · Last updated: October 12, 2026

This policy explains what personal information Novastream Player collects, why, who it is shared with, how long it is kept, and what you can do about it. It covers the Novastream Player apps for iPhone, iPad, Apple TV, Android, Android TV, Roku and Windows, and the website at novastreamplayer.com. Novastream Player is a video player for IPTV, Xtream Codes and M3U sources. It does not provide, host or resell any channel, movie or series. You connect it to a service you subscribe to separately.

At a glance

1. Using the app without an account

You can use Novastream Player on the free tier (with ads and some features locked) without creating an account or entering an activation key. To do this, the app creates or reads a device identifier:

• On iPhone, iPad and Apple TV, it is a random value created by the app and kept in the device Keychain, so it survives reinstalling the app.
• On Android and Android TV, it is the Android ID the system gives this app. The value is specific to this app and device and resets after a factory reset.
• On Windows, it is a random value the app creates the first time it runs and keeps in its data folder on your PC (uninstalling the app keeps it, deleting the folder resets it). On Roku, it is the identifier Roku gives this channel on this device.

None of these is an advertising identifier, and none is built from your name, email, phone number or a hardware serial number. We use the device identifier to apply your licence or plan to the right device, to stop one device from claiming more than one free trial, and to group the diagnostics described in section 2.

2. Diagnostics and usage analytics

The first time you open the app, it asks whether you allow diagnostics and usage data, and nothing is sent until you answer. If you allow it, the app sends us:

• Usage events. Which screens and features you open (for example Live, Search or the Guide). When you play something, the event includes the title or channel name, its ID in your provider's catalogue, and how long and how far you watched. We use this to learn which features matter, which content types are used, and where playback fails.
• Diagnostic logs. Errors, crashes, playback failures and performance timings. These include the app version, operating system, device type, screen size and time zone. If a log contains a stream address, the app removes the username and password from it before sending, but the provider's server name can still appear. We use logs only to find and fix bugs.
• Identifiers. The device identifier from section 1, and a random visitor ID and session ID created by the app.

Usage events and diagnostic logs are not linked to your account, email address or licence key, and we do not store your IP address with them. Profile names and playlist names are not included. However, your viewing activity can be sensitive. If you do not want it collected, choose “Don't allow”, or turn the setting off later in Settings → Advanced. While it is off, no usage events or diagnostic logs are sent.

Report a problem. The one exception is when you choose to send us a problem report (Settings → About & support, or Report a problem). Only when you tap Send (or press Send in the Windows app), the app sends the note you typed, your device identifier, platform and app version, and the last 40 or so lines of the app's activity log, even if diagnostics are turned off. The screen tells you this before you send. Those log lines can include the titles or channels you were using and your provider's server name (never its username or password). Please do not put passwords or other sensitive details in your note. Reports are stored with the diagnostic logs, are not linked to your account unless you tell us who you are, and are deleted after 12 months. We read them only to fix the problem.

On iPhone, iPad, Android, Android TV and Apple TV, the usage events (not the diagnostic logs) are also sent to our analytics provider, Greetevo (section 9). The Roku app does not send anything to Greetevo. The Windows app sends no usage events and no automatic diagnostic logs; it contacts our server only to check your licence and plan, the free-tier settings, app updates and the legal notice, and when you choose to send a problem report (Settings → About & support). Greetevo receives them directly from your device, so it also receives your device's IP address as part of the connection.

3. Accounts

An account is optional. You need one only to start a free trial from the website, to buy a plan on the website, or to sync your profiles across devices. You can create an account on the website or in the app, using an email address and password or by continuing with Google or Apple. We collect:

• Your email address and whether you have verified it. We send verification and password-reset emails through our email provider, Resend.
• Your password, stored only as a one-way hash. If you sign in with Google or Apple, we receive your email address and an account identifier from that provider, and never your Google or Apple password.
• A website session cookie that keeps you signed in on novastreamplayer.com for up to 30 days. It is strictly necessary for signing in. We use no advertising or analytics cookies on the website.
• Anti-abuse information to stop the same person from creating many accounts or claiming several free trials: a normalized form of your email address, its domain, a keyed one-way hash (HMAC) of the IP address used at sign-up, and the device identifier your trial key is first activated on. We never store your raw IP address with your account. Sign-up is limited to well-known email providers, and disposable addresses are refused.
• Invite codes and referrals. Every account has a random invite code. If you share it, and a friend enters it when they create an account, we record a link between the two accounts, the code used, when it happened, and the outcome (waiting, rewarded, over the limit or rejected) and how many free months were granted. The reward is given once the friend has verified their email address and activated a licence or free trial on a device. We use this only to give the free days, to enforce the limits on rewards, and to detect abuse, which includes comparing the keyed IP-address hash and normalized email address of the two accounts to spot accounts that belong to the same person. The person who invited you does not see your name or email address, only how many friends have joined, and you do not see theirs. If either account is deleted, the link to that account is removed, but the record is kept without the account details so that the reward limit cannot be avoided (section 11). See the Terms of Service for the rules of the referral program.

4. Trials, plans and purchases

• Licence keys. When you start a trial or buy a plan, we create a licence key. We record its plan, status and expiry date, the device it is activated on, and when that device last checked in. This lets us confirm your plan and stop one key from being used on more devices than allowed.
• In-app trials on Android and Android TV. These are tied to the device identifier, with a keyed hash of your IP address to limit abuse. No account is needed.
• Website purchases (Stripe). Payments are processed by Stripe. We receive a Stripe customer and subscription reference, the amount, currency and plan status. We never receive or store your full card number. You can cancel a subscription yourself from your account page.
• App Store purchases (Apple). Purchases and free trials on iPhone, iPad and Apple TV are processed by Apple. The app sends us Apple's signed transaction record so we can unlock your plan. We keep the transaction ID, product, and whether it was a sandbox purchase. Apple does not share your name, Apple ID or payment details with us. You manage and cancel Apple subscriptions in your Apple account settings.

5. Cross-device sync

If you link a device to your account, we store the following so your other linked devices can show the same thing:

• Your profiles: name, avatar, whether it is a Kids profile, and its PIN stored only as a one-way hash.
• Your favourites and watch progress: the title, its artwork and catalogue ID, and how far into it you are.
• A device record: platform, device identifier, the name you give the device, and when it was last used.

A device you never link sends none of this, and its profiles, favourites and history stay on that device. You can see and remove linked devices on your account page. Deleting a profile, favourite or progress entry in the app also deletes it from our servers.

6. Ads on the free tier

The free tier shows banner and short video-break ads for Novastream Player and selected partners. We choose and serve these ads ourselves. There is no advertising network or advertising SDK, no advertising identifier, and no targeting based on what you watch. We count only how many times each ad is shown or tapped, with no information about who saw it. An ad image may be loaded from the advertiser's own web address, and that server will see your device's IP address. If you tap an ad, it opens the advertiser's website, where their privacy policy applies. Premium plans have no ads.

7. Artwork, ratings and metadata

To show posters, cast information and ratings, the app looks up title names in The Movie Database (TMDB) and, if enabled, OMDb. Some of these lookups go straight from your device to those services, so they see the title being looked up and your device's IP address. Others go through our server, in which case only our server contacts them. We do not send your identity or account with these lookups.

8. What we do not collect

• Your provider credentials. Your IPTV, Xtream Codes or M3U username, password, server address and playlist addresses are stored only on your device (in the secure Keychain or Keystore where available). They are never sent to us. The one exception is the server name that can appear in a diagnostic log, as described in section 2.
• Your streams and catalogue. Video, channel lists and guide data travel directly between your provider and your device, not through our servers. Your provider's privacy policy applies to that traffic.
• We do not collect your contacts, photos, microphone, camera, precise location, or any advertising identifier. We do not track you across other companies' apps or websites.

9. Who we share information with

We do not sell or rent personal information, and we do not share it with advertisers or data brokers. We share it only with service providers that help us run Novastream Player, each for the purpose listed:

• Railway: hosts our servers. Supabase: hosts our database, in the United States. Vercel: hosts this website.
• Greetevo: product analytics (the usage events in section 2).
• Stripe: website payments. Apple: App Store purchases and Sign in with Apple. Google: Sign in with Google.
• Resend: sends account emails.
• TMDB and OMDb: artwork and ratings lookups (section 7).

These providers may use the information only to provide their service to us, and their own privacy policies also apply. We may also disclose information if Canadian law requires it, for example in response to a valid court order, or to protect against fraud.

10. Where your information is stored

We are based in Ontario, Canada, but our servers and most of our service providers are in the United States. Your information may therefore be stored and processed in the United States or other countries where those providers operate. While it is there, courts, law enforcement and national security authorities of that country may be able to access it under their laws.

11. How long we keep it

• Usage events and diagnostic logs: up to 12 months, then deleted.
• Account, licence and sync data: while your account exists. When you delete your account (section 13), your sign-in sessions, linked devices, profiles, favourites, watch progress and social sign-in links are deleted immediately.
• Payment and purchase records: as long as tax and accounting law requires, usually up to 7 years in Canada. When you delete your account, your licence keys are disabled and your email address is removed from them, but the key, plan and payment reference are kept for those records.
• Trial anti-abuse records: if you used a free trial, we keep the normalized form of your email address (lower-cased, with any “+tag” removed) after account deletion, with no name or password, so that deleting and re-registering cannot be used to claim the same free trial again. The keyed IP-address hash and device identifier tied to the trial are kept only as long as needed for the same purpose.
• Referral records: kept after either account is deleted, with the account links removed, so the reward limit cannot be avoided.

Greetevo, Stripe and Apple keep the data they receive under their own retention policies.

12. How we protect it

All traffic between the apps, the website and our servers is encrypted with HTTPS. Passwords, profile PINs, session tokens and IP-address records are stored only as one-way hashes. Access to our database and admin tools is limited to the developer. No system is perfectly secure. If a breach of your personal information creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as the law requires.

13. Your choices and rights

Deleting your account: you can delete your account yourself, from the account page on novastreamplayer.com or in the Android TV and mobile apps' account settings. You confirm with your password. Deleting also cancels any Stripe subscription first, and any paid time left on your licence is lost. If you subscribed through Apple, Apple does not let us cancel it, so cancel it in your Apple account settings.

You can also ask us to show you the personal information we hold about you, correct it, or delete your account and its data, or you can withdraw your consent to an optional use. Email support@novastreamplayer.com from the address on your account. We reply within 30 days. Analytics data is not linked to your account, so we can only find it if you tell us which device it came from. We will help you do that. Uninstalling the app deletes everything stored on the device. On iPhone, iPad and Apple TV, the Keychain device identifier can remain until the device is reset.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or to the privacy authority where you live. In Quebec, that is the Commission d'accès à l'information. In the European Union or United Kingdom, it is your local data protection authority. If you live there, our legal bases are: performing our contract with you (accounts, plans, sync), our legitimate interests (security, fraud prevention, fixing bugs), and your consent (diagnostics and usage analytics, which you choose when you first open the app and can withdraw at any time).

14. Children

Novastream Player is a general-audience app and is not directed at children. Accounts and purchases are for adults; you must be at least the age of majority where you live, or have a parent's or guardian's permission. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it. The Kids profile is a parental-control feature (a PIN and content filter applied on the device). It is not used to collect information about children.

15. Changes to this policy

When this policy changes, we will post the new version here and update the date at the top. If a change means we will collect more information or use it in a new way, we will tell you in the app before the change takes effect. We will not apply such a change to information we already hold without your consent where the law requires it.

16. Contact and privacy officer

The person responsible for privacy and for protecting personal information at Novastream Player is Said Elyas Said Aminuddin, Privacy Officer, Ontario, Canada. Send questions, requests and complaints to support@novastreamplayer.com.