Privacy Policy

To do: [Legal entity: to be added], To do: [Registered address: to be added] ("Vexla", "we") is responsible for your personal data (the controller). Contact us at To do: [Contact email: to be added] about anything in this policy.

• No cookies of our own. vexla.tv sets no cookies and uses no local storage. Cloudflare, which delivers and protects the site, may set a strictly necessary security cookie (__cf_bm or cf_clearance) when it needs to tell people from bots.
• Request logs. Cloudflare processes standard request data, such as your IP address, browser type and the page requested, to deliver the site and protect it from abuse.
• No third parties. Every file comes from vexla.tv or our own media subdomain, media.vexla.tv. There are no analytics, ads or social media scripts, and no forms.

We never receive your full card details: the App Store, Google Play, Amazon or our payment processor handles payment, and we receive only the purchase details we need (plan, price, currency, country and transaction ID).

• Playlist links often contain your provider username and password, so we treat every playlist link, login and stream link as a secret.
• With Unlock, your sources are stored on your devices, in their secure storage, and are not saved to your Vexla account. If you use a QR code to send a playlist from your phone to a TV, it passes through our servers only to reach that TV.
• With Pro, they are stored in your account, encrypted, so your other devices can play them.
• With Pro, our servers may download your playlist and guide from your provider to prepare your channel list, so your provider may see requests from our servers. Your video is never part of this.
• They are kept out of our logs, crash reports and analytics, and our support tools hide them by default.
• When your device plays a channel, it connects to your provider directly. Vexla never sees, stores or relays your video.
• Your TV provider, guide sources and logo hosts see your IP address and what you stream, under their own policies. We have no control over them.

We share personal data only with service providers that process it for us under a data processing agreement, receive only what they need, and must protect it at least as well as this policy describes:

• Cloudflare: delivers and protects the website and media files.
• Supabase: our database and sign-in provider, hosted in the European Union.
• RevenueCat: keeps track of your purchases across stores.
• Stripe: processes payments made on vexla.tv.
• Apple, Google and Amazon: process purchases made in their stores, under their own privacy policies.
• Crash reporting: To do: [Crash reporting provider: to be added], which only receives reports with playlist links removed.
• Email delivery: To do: [Email provider: to be added], which sends sign-in and billing emails.
• Product analytics: To do: [Analytics provider: to be added], only if you agree.

We don't sell personal data and we don't share it for advertising. We may disclose data if the law requires it.

Our main database is in the European Union. Some providers above may process data outside the EU or EEA, for example in the United States. When they do, we rely on safeguards the law recognises, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. You can ask us for a copy of these safeguards at To do: [Contact email: to be added].

• Account and library: while your account exists. When you delete your account we delete them, apart from what the law requires us to keep.
• After a trial or subscription ends: your setup is kept so it comes back if you buy later. We'll state exactly how long before accounts open. To do: [Retention period: to be added]
• Purchase records: as long as tax and accounting law requires.
• Diagnostics and request logs: for a short, limited time, then deleted or anonymised.

To delete your account, go to Settings → Account → Delete account in the app, or Account → Delete account on vexla.tv. We delete your account, devices, playlists and library within To do: [Deletion period: to be added], and remove them from backups within To do: [Backup period: to be added]. We keep purchase records as long as tax and accounting law requires. Deleting your account doesn't cancel a Pro subscription bought in the App Store, Google Play or Amazon Appstore; cancel it in that store's subscription settings.

You can ask to access, correct, download (portability) or delete your personal data, and to restrict or object to how we use it. Where we rely on consent, you can withdraw it at any time in Settings. You can delete your account in the app or on vexla.tv, and that starts deletion of your data. To use any right, email To do: [Contact email: to be added]. We'll answer without undue delay and within one month; for complex requests we may extend this by up to two more months and will tell you why. You can also complain to your data protection authority.

Vexla is not directed at children under 16, and we don't knowingly collect their data. If you believe a child has given us personal data, contact us and we'll delete it. Parental controls in the apps help families manage what is watched.

When we change this policy we'll update the date at the top. If a change is significant we'll tell you in the app or by email before it takes effect.

Contact details will be published here before the apps launch.

To do: [Legal entity: to be added], To do: [Registered address: to be added], To do: [Contact email: to be added].