Strimly — Privacy Policy

Last updated: April 28, 2026

Strimly is a "Bring Your Own Content" (BYOC) IPTV player. Strimly does not host, sell, or proxy any video content. The channels and streams you watch come from your existing IPTV provider, not from Strimly. This policy explains the limited information Strimly collects to operate the app, and what we do (and don't do) with it.

1. What we collect

• Google account email and Google account ID. When you sign in, Google provides Strimly with your email address and a stable Google account identifier. We use these to create your account, scope your data to you, and let you sign in on multiple devices with the same identity.
• IPTV credentials you enter. If you add an Xtream Codes panel, the panel URL, username, and password are stored in Strimly's database (encrypted at rest by our hosting provider) so that the same playlist syncs across your phone and Android TV. If you add an M3U URL, that URL is stored the same way.
• Device session metadata. A non-identifying device id and a human-friendly device name (e.g. "Pixel 7") for the "max 3 active devices" limit and remote sign-out.
• Anonymous crash and analytics events. Strimly sends crash reports and a few app-event counters (e.g. stream_started, android_login) to help diagnose problems. These reports do not include your IPTV credentials, stream URLs, or your name. Your email is hashed before it is stored alongside any event.
• Purchase token. If you buy the one-time license, Google Play Billing returns a purchase token. Strimly verifies that token with Google's servers and stores it under your account so your purchase can be restored across devices.

2. What we do not collect

• We do not collect your name, address, phone number, or payment information.
• We do not see what specific channels or programs you watch — Strimly streams directly from your IPTV provider to your device.
• We do not include any third-party advertising SDKs.
• We do not sell or rent any data to anyone.

3. How we use the information

• To sign you in and keep your playlists in sync across devices.
• To enforce the 7-day free trial and verify your one-time purchase.
• To diagnose crashes and fix bugs.
• To enforce the device limit and let you sign out of other devices.

4. Data sharing

Strimly does not share your personal data with third parties for advertising or marketing. Strimly relies on the following processors strictly to operate the service:

• Google Sign-In — to authenticate you.
• Google Play Billing / Play Developer API — to process the one-time purchase and verify your license.
• Railway (hosting) — to run Strimly's backend and database.
• Sentry — to receive anonymous crash reports.

All traffic between the app and these services uses HTTPS / TLS in transit. Your IPTV credentials are sent only between your device and your IPTV provider; Strimly's backend stores them but never proxies your video traffic.

5. Data retention and deletion

• You can sign out at any time from the app. Signing out clears your local session.
• You can request full account deletion (including playlists and session history) by emailing the address below. Strimly will delete your account within 30 days of the request.
• Anonymous crash reports are retained by Sentry under their default 90-day policy.

6. Children

Strimly is intended for users aged 18 and over. We do not knowingly collect personal information from children. If you believe a child under 18 has provided us with information, please contact us and we will delete it.

7. Changes to this policy

If this policy changes, the new version will be published at this URL. Material changes will also be communicated in-app the next time you sign in.

8. Contact

Questions or deletion requests: halil.ugur.acikgoz@gmail.com