Privacy Policy

• Data controller: Hyusnyu Sevdinch Hyusnyu (natural person)
• Address: Ul. Pirin 1, 9785 Timarevo, Bulgaria
• Contact / requests: info@mi-player.com

Mi Player collects only the data required to provide the service:

• Account: email address, display name (optional). Your password is stored in hashed form; we do not see or store your plaintext password.
• Content source: the M3U address or Xtream details (server, username, panel password) you add. These belong to your own IPTV subscription; only your account can access them (row-level security / RLS).
• Usage: your favorites, watch history, watch progress and app preferences (theme, language, density).
• Device identity: so that the free trial can be tied to a single device, your device’s manufacturer identifier (Samsung DUID, LG LGUDID or Android ID) is read. This identifier never leaves your device: only an irreversibly hashed form (salted SHA-256) is sent to the server, and it is used for nothing beyond tracking your trial entitlement.
• Payment: when you buy a paid plan, payment is taken via Stripe. Your card details never reach us; we only receive the plan you bought, the status of the payment and a reference matching your account.
• Error records: if the app hits an unexpected error, the error message, its technical detail, the app version and the platform are recorded against your account. This is used solely to fix the fault.

Mi Player does not collect data such as advertising identifiers, location, contacts, or camera/microphone. It does not use third-party analytics or advertising trackers.

We process your data solely for the following purposes:

• To create your account and manage your session
• To fetch and play channel/movie/series lists from the source you add
• To store your favorites, history and preferences across devices
• To operate your free trial entitlement and your paid subscription
• To detect and fix application faults

Legal basis: performance of the contract (delivery of the service) and, where required, your explicit consent (KVKK Art. 5; GDPR Art. 6(1)(b) and 6(1)(a)). Error records and the prevention of trial abuse rest on legitimate interests (GDPR Art. 6(1)(f)).

• Your data is stored on our infrastructure provider Supabase (PostgreSQL).
• Row-level security (RLS) is enabled on all tables: each user can access only their own data; no other user can see your data.
• Communication is encrypted (HTTPS/TLS); your account password is hashed.
• Your IPTV panel password is technically required to play the stream directly from the panel and reaches your device; it is tied only to your account.
• Your card details are never present in our systems; payment happens entirely within Stripe’s infrastructure.

• Supabase: database, authentication and email delivery infrastructure.
• Stripe: payment infrastructure. The name, email and card details you provide during payment are processed directly by Stripe and are subject to Stripe’s own privacy policy.
• The IPTV providers you add: channel/movie content comes from the third-party sources you add. Mi Player does not provide, host or moderate this content; the provider’s own privacy policy applies to those connections.
• We do not sell your data and do not share it with third parties for marketing purposes.

The servers of our infrastructure providers Supabase and Stripe are located outside Türkiye. Your data is therefore processed abroad in order to deliver the service. Such transfers are made for the performance of the contract, under Art. 9 of the KVKK and the international transfer provisions of the GDPR, and under the providers’ standard contractual safeguards.

Mi Player uses your device’s local storage (localStorage) to keep you signed in and to load your preferences quickly. No advertising or tracking cookies are used.

• To access your data and request a copy of it
• To rectify (incorrect/incomplete data)
• Erasure — you can delete your account and all your data yourself via Settings → Account → Delete account permanently; this action is irreversible.
• To object to processing and to data portability

You may submit your requests to info@mi-player.com.

Your data is retained for as long as your account is active. When you delete your account, all associated data is permanently deleted (via cascade). Payment records may continue to be held by our payment provider for the retention period required by law.

Mi Player is not designed for persons under the age of 18 and does not knowingly collect data from persons below this age.

We may update this policy from time to time. For significant changes we will notify you within the app or by email.

For privacy questions and requests: info@mi-player.com