Privacy Policy

01

Scope, controller and contact

This Privacy Policy applies to TVMamba IPTV Player (“TVMamba”, “the app”), developed and published by TV Mamba.

TVMamba is a media player. It does not provide, host, sell, recommend or endorse television channels, films, series, playlists, streams or access credentials. You must use only content and services that you are legally authorised to access.

TVMamba does not require a TVMamba viewing account. Privacy questions and requests may be sent to dabbajafar@gmail.com.

02

Information handled by the app

To provide its features, TVMamba may store the following information locally on your device:

• Playlist names and URLs, local playlist-file references, EPG URLs and provider server addresses;
• Provider usernames and passwords that you enter;
• Channel, group, film, series, logo and programme-guide information returned by your chosen source;
• Favourites, recently played and top-played history, playback positions, ordering and hidden items;
• Preferences such as theme, menu layout, startup behaviour, selected source and recording location;
• Recording and scheduled-recording details, including titles, stream URLs, dates, status and file locations;
• An optional TheSportsDB API key if you enter one;
• A parental PIN stored as a salted cryptographic hash rather than as the plaintext PIN; and
• On Android TV, a short-lived premium entitlement type and verification time. The app does not store full payment-card details in this cache.

Playlist credentials and other app data are kept in the app’s private Android storage. TV Mamba does not receive a central copy because it currently operates no app backend or viewing-account service.

Recordings and selected files

Recordings are written to app-specific storage or to a folder you select through Android’s system file picker. A recording kept in a user-selected folder may remain after the app is uninstalled and must then be deleted separately.

When you choose a playlist file, recording folder or migration archive, Android grants access to the selected item or folder. A migration archive may contain playlists, provider credentials, favourites and preferences and may not be encrypted. Store and transfer it securely.

03

Playlist, EPG and media-provider connections

When you add, refresh or play a source, TVMamba connects directly to the server addresses entered by you or contained in your source. Depending on the source, a request may include:

• The server URL, provider username and password;
• Playlist, catalogue, stream or programme-guide parameters;
• The channel, film, episode or media URL requested;
• Your IP address, request time and a TVMamba user-agent header; and
• Other network information normally visible to the receiving server.

Your provider may return catalogues, EPG data, metadata, artwork and streams. Its handling of information is governed by its own privacy policy and terms, not this Policy.

TVMamba accepts both HTTPS and unencrypted HTTP sources because some user-supplied services require HTTP. Information sent to an HTTP source, including credentials, is not encrypted in transit. Use HTTPS sources where available and only use providers you trust.

Optional sports schedule information

If you configure and use official sports verification with a TheSportsDB API key, the app sends date and sport-category queries, the API key and ordinary network information directly to TheSportsDB. It receives event, schedule, broadcaster and artwork information. Playlist credentials are not intentionally sent to TheSportsDB. See TheSportsDB’s privacy policy.

04

Local web remote and phone setup

On an entitled Android TV installation, TVMamba can run a local HTTP web server on the television or box. A browser on the same local network can use it to:

• View playlist names, groups, channels, favourites, EPG and now-playing details;
• Control navigation, playback, volume and recording; and
• Enter playlist URLs or provider credentials while the TV phone-setup screen is active.

This traffic is intended to stay on your local network and is not relayed through a TV Mamba server. The local remote uses unencrypted HTTP and does not currently require a separate remote password. Other people or devices with access to the same network may be able to reach it while it is running. Use it only on a trusted private network, not public or shared Wi-Fi.

05

Google Play, Google Cast and diagnostics

Google Play Billing

Android TV subscriptions and one-time purchases are processed by Google Play. Google may process Google-account, payment, device and transaction information. TVMamba queries Google Play for products and purchase status and may handle a purchase token long enough to acknowledge and verify a purchase. TV Mamba does not receive or store your full payment-card details.

The app stores a limited entitlement type and verification time locally for offline and background operation. Google retains transaction records according to its policies and legal obligations.

Google Cast

When you choose to cast from a supported phone or tablet, TVMamba sends the selected stream URL and related metadata, such as a channel or programme name and logo, to the Cast receiver you select through Google Cast. Google and the receiver may process device, network, diagnostic and media-session information under their own policies.

The Google Cast sender SDK also automatically sends anonymised Cast discovery, session and app-activity information, together with mobile-device and client-app information, to Google for Cast functionality and diagnostics. Google states that this required Cast data is encrypted in transit and is not shared with third parties. See Google’s Cast SDK data-disclosure guidance.

Diagnostics and support

TV Mamba does not integrate an advertising network or operate its own behavioural-analytics or crash-reporting service. Google Play, Google Cast and Android may independently process installation, app-activity, purchase, security, crash and performance information and may provide Play Console reports or aggregated diagnostics under Google’s policies.

If you contact us, we receive the email address, message and attachments you choose to send. We use them to respond and troubleshoot.

For Google services described above, see the Google Privacy Policy.

06

How information is used and disclosed

Information is handled only as needed to:

• Import, organise, refresh and play sources that you choose;
• Display programme guides, metadata, favourites and viewing history;
• Provide recordings, scheduled recordings, Cast and local-remote features;
• Verify premium access and process purchases through Google Play;
• Preserve settings and restore data that you select;
• Respond to support requests; and
• Maintain app security, reliability and legal compliance.

We do not sell personal information and do not use it for targeted advertising.

Information may be made available only to the playlist, EPG, artwork and media services you choose; TheSportsDB when you configure that optional feature; Google for Play Billing, Android backup, Google Cast, distribution, security and diagnostics; the Cast receiver or local browser you choose; authorities where legally required; or a lawful successor to the app or business subject to appropriate safeguards.

Where applicable, the legal bases are performance of the service you request, your action or consent for optional features, compliance with legal obligations, and legitimate interests in supporting and securing the app.

07

Retention and deletion

Local playlists, credentials, catalogues, preferences, favourites, history and recording records remain until you delete the relevant item, clear the app’s storage or uninstall the app. Refreshed catalogue and EPG data may be replaced or cleaned automatically.

• Delete a playlist in the app to remove its locally stored credentials and imported data.
• Delete recordings in the app and separately remove files kept in a user-selected folder where necessary.
• Clear TVMamba storage in Android Settings or uninstall the app to remove app-private local data.
• Manage Android backups through your Google account and device backup settings.
• Cancel subscriptions through Google Play. Uninstalling the app does not cancel a subscription.
• Contact us to request deletion of support correspondence or other information we hold, subject to legal retention requirements.

TVMamba has no viewing account and TV Mamba holds no central copy of your local playlists or viewing history, so we cannot remotely retrieve or delete device-only data. Google, your provider and other third parties determine their own retention periods.

08

Security

We use reasonable technical and organisational measures appropriate to the information handled. App-private information is protected by Android’s application sandbox, the parental PIN is stored as a salted hash, and the local TV billing cache is excluded from backup.

No storage or transmission method is completely secure. User-supplied HTTP sources, the local web remote and migration archives may be unencrypted. You are responsible for securing your device, local network, provider account and backup files.

09

Children

TVMamba is a general-purpose media player and is not directed to children. We do not knowingly collect children’s personal information through a TVMamba account or backend service. Parents and guardians are responsible for selecting lawful, age-appropriate sources and using the available parental controls.

If you believe a child has sent personal information through a support request, contact us so we can review and delete it where required.

10

International processing and your rights

TV Mamba does not upload your playlist or viewing data to a developer-operated server. Google, TheSportsDB, providers, artwork hosts, media servers and other services you select may process information outside your country. Their privacy policies describe their safeguards and transfer mechanisms.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability or objection concerning personal information we control, and to complain to a data-protection authority.

Most TVMamba information is stored only on your device and can be managed using the deletion controls described above. For support correspondence or other information held by TV Mamba, email dabbajafar@gmail.com.

11

Changes to this Policy

We may update this Policy when the app, third-party services or legal requirements change. The revised Policy will be published at this URL with an updated date. Material changes will be highlighted in the app or store listing where appropriate.