Privacy policy

Last updated 14 November 2026.

TiviHero is a media player for TVs. It does not come with any channels or content: you bring your own provider. This page explains what TiviHero’s service keeps about you, why, for how long, and how to delete it. It covers the TiviHero app (from Google Play or from our website) and this website, tivihero.app.

The short version

• Your provider login, channel lists, stream addresses and what you watch stay on your TV.
• You can use TiviHero without an account. An account is only needed to link TVs to this website or to buy Premium here.
• Sharing with the website and syncing between TVs are off until you turn them on.
• No ads, no analytics or tracking tools, and we never sell your data.

Who runs TiviHero

TiviHero is run by Agathoklis Athanasiou (TiviHero), Cyprus, who is responsible for your data (the “data controller”). Postal address: Dikomou 46A, 2323 Lakatamia, Nicosia, Cyprus. Email: support@tivihero.app.

What stays on your TV

Your provider login (server, username and password, or playlist link), channel lists, programme guide, artwork, stream addresses and your viewing history are kept on the TV only. TiviHero’s servers never receive them, except in the encrypted, one-time hand-over described under “Set up from your phone”.

What our service keeps

Every TV: trial and plan checks

When TiviHero starts, and now and then afterwards, the TV asks our server whether it is in its 14-day trial or which plan it has. It sends:

• a one-way scrambled code made from the TV’s Android ID (never the ID itself). We scramble it once more before storing it with the trial dates, so the same TV cannot start a new trial. We cannot turn it back into the device ID;
• the app version and which build it is (Google Play or website);
• an anonymous support code made from the same scrambled code. It is also shown on the TV under About, so you can quote it if you contact us.

If you create an account

• Your email address and an internal account ID. You sign in with a code sent to your email (or with Google, if offered).
• Your linked TVs: a name you choose, when each was linked and last checked in, and a secret that lets that TV talk to your account.
• Your plan: Free, Premium or Friend, and until when.

Only if you turn it on

• Sharing categories and Live groups (on the TV, under Link to tivihero.app): the names of your categories, and for Live groups the names of the channels in them, with their order and whether they are hidden, so you can organise them on this website. Categories protected by your parental PIN are never shared. Provider details and stream addresses are never shared.
• Watch progress between TVs: the provider’s number for each film or episode you have started, how far you got, its length and whether it is marked as watched. Your provider and each viewer are stored only as scrambled keys made on the TV with a secret key (HMAC). The provider key is made from your provider username only, so our server never sees your username, the provider’s address or viewer names.

Set up from your phone

When you set up a TV by scanning its QR code, your provider login is encrypted on your phone with a key that only that TV has (end-to-end encryption). Our server cannot read it. It holds the encrypted message for at most 10 minutes, hands it to the TV once and deletes it straight away.

Payments

Premium in the Google Play app

Google Play sells the subscription and processes the payment under Google’s own privacy policy. We never see your card or payment details. To turn Premium on, the TV sends the Google Play purchase token and the product (monthly or yearly) to our server, which checks them with Google. We then keep:

• the purchase token, the product, when the current period ends and the subscription’s state (for example active, cancelled or expired);
• which TVs the purchase covers, as their scrambled device codes.

We use this only to turn Premium on, keep it on after renewals, and turn it off after a cancellation, refund or expiry. Google tells our server when any of these happen, and we re-check the token with Google when a period ends. Purchase tokens never appear in our logs.

Premium bought on this website

Paddle is the merchant of record and processes your payment. To start a checkout we give Paddle your email address and your account ID. Paddle collects your card or other payment details itself; we never see or store them. We keep your subscription status, interval, renewal date and the Paddle IDs for your customer and subscription. Paddle handles your payment data under its own privacy policy.

Services your TV contacts directly

Some features fetch information straight from other services. TiviHero does not send them your account or anything it keeps; they see your TV’s internet address and the request itself, under their own privacy policies.

• TMDB (themoviedb.org): film and series details, posters and artwork. The TV sends the title it looks up.
• OpenSubtitles: subtitle search, only if you add your own OpenSubtitles key.
• Radio Browser: the internet radio directory in Spaces.
• YouTube: trailers, when you choose to play one.
• Google or Cloudflare DNS-over-HTTPS: only if you pick one in Settings, to look up internet addresses.
• Your own provider: the server or playlist you enter. That is between you and your provider.

Why we use it

• To run the account, linked TVs and the plan you chose (our contract with you).
• To give each TV one trial, prevent abuse and keep the service secure (our legitimate interest).
• Sharing with the website and watch-progress sync happen only because you turned them on, and stop when you turn them off (your consent).
• To keep records the law requires, for example for payments.

Who processes it for us

We do not sell your data or use it for advertising. These companies process it on our behalf: Cloudflare (hosting and database), Neon (sign-in and sign-in emails), Paddle (website payments) and Google (Google Play payments). Our hosting keeps short technical logs of requests, which can include your internet address, to find faults and stop abuse.

How long we keep it

• Account, linked TVs and plan: until you close your account.
• Shared categories, Live groups and watch progress: until you turn sharing off, unlink the TV, remove all TVs or close your account.
• Trial record (scrambled device code): 12 months after the TV last checked in.
• Set-up-from-phone message: deleted when the TV collects it, and at most after 10 minutes. TV link codes expire after 5 minutes.
• Google Play purchase records: 12 months after the subscription ends.
• Paddle event IDs (used to avoid processing a payment message twice): 90 days.
• Payment and tax records held by Paddle or Google: as long as they are required to keep them.

Your rights

Under data protection law (GDPR) you can ask us to:

• give you a copy of your data (access), including in a format you can reuse (portability);
• correct it;
• delete it;
• stop or limit using it, or object to how we use it;
• withdraw consent at any time, by turning sharing or sync off.

Email support@tivihero.app. We answer within one month. You can also complain to the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy) or the authority where you live.

Deleting your data

• Unlink a TV, or remove all TVs and shared data, from the Account page.
• Close your account from the Account page. That deletes the account, its TV links, shared data and sign-in. If you have an active subscription, cancel it first.
• No account? You can ask us to delete your TV’s trial record.

Step by step: Delete your account or data.

Children

TiviHero is not directed at children and the account is for adults. If you think a child has given us personal data, email us and we will delete it.

Changes

If we change this policy, we will update this page and its date. If a change matters, we will also say so in the app or by email.