Privacy Policy

Zephlix ("the App", "we", "us", "our"), operated by Tranquil Mind Technology JSC, respects your privacy. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. By using the App, you agree to this Policy.

Zephlix is a media player for playlists you supply yourself: you add an M3U/M3U8 link, an Xtream Codes login, or a local .m3u file, and the App plays the live channels, movies and series those sources contain. You do not need to create an account to use Zephlix, and we do not operate any account system. The App also links to a small set of publicly available news channels, including official YouTube live streams.

1. Information We Collect

1.1 Information collected automatically

We do not ask you for your name, email address, phone number, or any other directly identifying information. The following is collected automatically by the third-party services listed in Section 3:

1.2 Information that stays on your device

The following is stored only on your device and is never uploaded to us:

• Your playlists — M3U/M3U8 URLs, Xtream Codes server addresses, usernames and passwords, and any local .m3u file you open.
• Your favourites, watch history, custom collections, and recent searches.
• Your parental-control PIN, stored as a SHA-256 hash rather than as the PIN itself.
• Your language, appearance, sorting and playback preferences.

Deleting the App, or clearing its storage in Android settings, removes all of it.

1.3 Information you send directly to your own provider

When you add a playlist, the App connects directly from your device to the server you specified — your IPTV provider, your M3U host, or your XMLTV/EPG host. Your Xtream username and password, your IP address, and the requests for channels and programme data go to that server, not to us. We have no access to those servers, no relationship with their operators, and no visibility into what they log.

Please note that many IPTV providers use plain http:// rather than https://. If your provider does, the credentials and requests sent to it are not encrypted in transit, and anyone on the same network can potentially observe them. This is a property of the server you chose, not of the App. Prefer providers that offer https://.

1.4 Third-party media and images

Playing a stream, loading a channel logo or thumbnail, or opening the built-in YouTube news row causes your device to make a request to that third party's servers. Those servers necessarily see your IP address, and, in the case of YouTube, may set cookies and apply Google's own policies. Zephlix does not control what these third parties collect.

1.5 What we do not collect

We do not collect your name, email address, phone number, contacts, calendar, photos, camera or microphone input, files other than a playlist file you explicitly choose, precise location, health data, or payment information. Zephlix contains no in-app purchases and no payment mechanism of any kind.

2. How We Use Information

• To provide and operate the App — load and play your playlists, render the programme guide, remember where you stopped watching, cast to a Chromecast device.
• To show advertising — Zephlix is free and is funded by ads. Advertising identifiers, approximate location and app activity are used to select, deliver, frequency-cap and measure ads, and (where you have consented) to personalise them.
• To measure installs and campaigns — attribution data tells us which marketing campaign an install came from.
• For analytics and improvement — aggregate usage patterns show which features are used and where people get stuck.
• For crash reporting and stability — diagnostics let us find and fix defects.
• For fraud prevention and security — advertising identifiers are used by our ad partners to detect invalid traffic and attribution fraud.
• To comply with law — where we are legally required to retain or disclose information.

We do not use your information to build a profile of you outside the App, and we do not attempt to identify you by name.

3. Third-Party Services

The App integrates the following third-party services. Each operates under its own privacy policy, which we encourage you to read.

4. How We Share Information

We do not sell your personal information for money. We share information only as described here:

• With the service providers and advertising partners listed in Section 3, for the purposes stated there.
• For legal reasons — where we believe disclosure is required by law, regulation, legal process, or an enforceable governmental request, or is necessary to protect rights, safety, or property.
• In a business transfer — if we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

U.S. state privacy laws. Personalised advertising involves disclosing advertising identifiers and approximate location to advertising partners. Under the California Consumer Privacy Act as amended by the CPRA, and under comparable laws in other U.S. states, that disclosure may be treated as a "sale" or as "sharing" for cross-context behavioural advertising, even though no money changes hands. You may opt out by declining personalised advertising in the App's privacy options, by resetting or deleting your advertising ID as described in Section 3, or by contacting us at the address in Section 13.

5. Legal Bases for Processing (EEA and UK — GDPR)

6. Data Retention

We retain automatically collected information only as long as necessary for the purposes described in this Policy, or as required by law.

• Analytics data is retained by Firebase for the retention window configured in that service, after which it is deleted or aggregated.
• Crash and diagnostic reports are retained for a limited period sufficient to diagnose and fix the defect.
• Advertising and attribution identifiers are retained by each partner according to its own retention schedule; see the policies in Section 3.
• Everything described in Section 1.2 lives on your device and is retained until you delete it or uninstall the App.

7. Your Rights

7.1 EEA and UK (GDPR)

You have the right to access your personal data; to rectify inaccurate data; to erasure; to restrict processing; to data portability; to object to processing based on legitimate interests, including profiling for advertising; to withdraw consent at any time without affecting prior processing; and to lodge a complaint with your national supervisory authority.

7.2 California and other U.S. states (CCPA/CPRA and comparable laws)

You have the right to know what categories of personal information are collected, used and disclosed; to request deletion; to request correction; to opt out of the sale or sharing of personal information and of targeted advertising; to limit the use of sensitive personal information (Zephlix collects none); and not to be discriminated against for exercising these rights.

7.3 Other regions

Residents of Brazil (LGPD), Canada (PIPEDA), and other jurisdictions with comparable laws have equivalent rights of access, correction, deletion and objection.

7.4 How to exercise your rights

Email contact@tranquilmind.co. Because Zephlix has no accounts and we hold no directly identifying information, we cannot locate your data from your name or email address alone. To let us act on your request, include your Google Advertising ID (Android: Settings → Google → Ads) or your iOS advertising identifier, together with your device model and the approximate dates you used the App. We will respond within the period required by applicable law — 30 days under the GDPR and 45 days under the CCPA, each extendable where the law permits.

You may also delete everything stored locally at any time by uninstalling the App or clearing its storage, and you may stop all future automatic collection by resetting or deleting your advertising ID.

8. Children's Privacy

Zephlix is intended for users aged 16 and over, or the higher age of digital consent that applies where you live. It is not directed to children, it is not listed in Google Play's Designed for Families programme, and its store listing declares a target audience of 16-17 and 18+.

We do not knowingly collect personal information from children under 13 (or under the applicable age of digital consent in your jurisdiction). If you are a parent or guardian and believe a child has provided information through the App, contact us at contact@tranquilmind.co and we will delete it and take reasonable steps to prevent further collection.

Zephlix contains a parental-control feature: you can set a 4-digit PIN and hide categories that a playlist labels as adult. This is a convenience filter that matches category names supplied by your playlist, not a content-classification system. It cannot inspect the streams themselves and it cannot catch content that a playlist has mislabelled or left unlabelled. Because Zephlix plays sources chosen entirely by the user, an adult should decide what playlists are added to a device a minor can access.

9. International Data Transfers

We are based in Vietnam, and the third-party services in Section 3 operate globally. Your information may be processed in countries other than your own, including the United States, whose data-protection laws may differ from those of your country. Where transfers out of the EEA or the UK are involved, our providers rely on lawful transfer mechanisms such as the European Commission's Standard Contractual Clauses.

10. Data Security

All data collected by the App's own SDKs is transmitted over encrypted HTTPS/TLS connections. We apply reasonable technical and organisational measures appropriate to the limited information we handle. Note, as explained in Section 1.3, that traffic between your device and a playlist server you configure is governed by that server, and is not encrypted when the provider offers only http://. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Third-Party Content

Zephlix does not provide, host, stream, or sell any channel, film, or series. All viewable content comes from playlists and servers you choose to add, or from third-party feeds the App links to. We do not control, endorse, review, or assume responsibility for that content, for its legality, or for the privacy practices of the servers that deliver it. Channel names, logos, and trademarks belong to their respective owners, and their appearance in the App does not imply any affiliation with or endorsement by them. Please review the terms and privacy policies of any provider whose service you use with the App.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted at this URL with a revised "Last updated" date, and, where required by law, we will seek your consent again. Continued use of the App after a change takes effect constitutes acceptance of the revised Policy.

13. Contact Us

Tranquil Mind Technology JSC
No. 3, Alley 98, Vu Trong Phung Street, Thanh Xuan Ward, Hanoi City, Vietnam
Email: contact@tranquilmind.co