IPATYJ UNIVERSAL

Privacy policy — IPatyj Universal — TV & Phone

Updated: November 1, 2026

Controller and purpose

IPatyj Universal — TV & Phone is an independent media player. The controller is Sergejs Rudenko (IPatyj), reachable at ipatyj.support@gmail.com. This policy covers the app, Premium and support requests. IPatyj does not sell personal data, use advertising SDKs or operate viewing analytics.

Library and sources

Playlists, source URLs, favourites, viewing history, EPG, preferences and parental PIN are kept on your device. Local photos and videos are accessed when you choose them. They are not sent to the Premium server. Playlists, streams, EPG and logos are requested directly from your chosen sources, which receive your IP address and request information. Source URLs may contain your provider credentials. Playlist transfer, Companion and Cast send the necessary information to the device or recipient you choose when you use those features.

Premium data and sign-in

From first launch, the Premium server receives a random installation ID and an installation secret; it stores a hash of the secret and the first-launch time. Google sign-in is optional for free playback. At sign-in, Google supplies a signed ID token which may contain an account ID, name and email. The server verifies it in memory and stores derived account and billing identifiers, trial start time and a device name. The Premium database does not store your name, email, photo or the ID token. Linked devices are recorded to enforce the five-device limit. TV sign-in flow information is processed temporarily until completion or expiry.

Purchases

Google Play handles payment. The IPatyj server receives the product ID, purchase token and verification result: licence type and status, expiry, plan and verification time. Tokens are stored encrypted; token hashes support matching and protection against reuse. Purchases are verified and acknowledged through Google Play. IPatyj does not receive your bank card number. This processing provides purchases, licence restoration and abuse prevention.

Voice search

Voice search starts only at your request and with microphone permission. Android or your selected speech-recognition service processes audio on-device or on its servers. IPatyj receives recognised text, does not record audio and does not store it on the Premium server. You can revoke microphone permission and continue using text search.

Recipients and security

Premium requests use HTTPS at premium.ipatyj.com, and stored purchase tokens are encrypted. The server is hosted by Hetzner; protected backups are kept on the server and by the operator. Google processes sign-in, purchases, speech recognition and support email for the functions you use. Content sources have their own practices and may use unencrypted HTTP: Premium security does not secure their connections. We process data to operate the service, verify rights, prevent abuse and answer support requests, not for advertising.

Retention and deletion

Local library data remains until you delete it in the app, clear Android app storage or uninstall; Android backup behaviour depends on system settings. Premium expiry does not delete playlists. The live Premium database keeps information while needed to service the installation/account and restore purchased rights; it is not automatically erased after 90 days. Backup copies have a 90-day retention period. After a deletion request is fulfilled, deleted records in backups are not used; deletion records must be reapplied before a backup is restored to service. Minimal pseudonymous identifiers and original trial dates remain to prevent repeated trials. Mobile also retains a minimal purchase fingerprint and payer binding for secure restoration, without the encrypted purchase token when no other installation needs it. These exceptions are not used for advertising and remain only while needed for the relevant trial restriction, licence restoration or a required dispute or obligation. Support correspondence is retained while needed for the request and any related dispute or obligation.

Your requests

You can request access, correction or deletion through ipatyj.support@gmail.com. The deletion page explains the steps and exceptions. The app can prepare a signed request code: it proves control of an installation, expires after 30 days, contains no password or purchase token and cannot grant Premium access. It is used only to verify your request; opening the page deletes nothing. Never send a Google password, sign-in code or card details. If you no longer have the app, contact support for proportionate ownership verification. You may also contact the competent data-protection authority, including Latvia’s Datu valsts inspekcija, about applicable rights or a complaint.

Children and changes

You choose the media and are responsible for its lawful use. The app is not specifically directed at children; adults should use parental controls. We update this policy and its date when processing changes.

Website

OpenAI/Cloudflare hosting processes the IP address, requested page, browser and access time to deliver and protect the website. No advertising analytics is added. YouTube loads after you click Play and processes information under Google’s policy. Operational log retention is governed by the providers. Support email is handled through Gmail.

ipatyj.support@gmail.com · Google Privacy · Cloudflare Privacy · Datu valsts inspekcija