This policy covers Mediavyr Player on supported Apple devices, the mediavyr.com website and support correspondence. It explains Source Sync, media-server support, parental controls and Apple-verified trial timing in version 1.1.5. The app developer identified on the Mediavyr Player App Store listing is responsible for Mediavyr’s own processing described here. References to “Mediavyr”, “we” and “us” mean that developer.
1. Your sources and local app data
You choose which IPTV providers, playlists, EPG services, local files, SMB libraries and media servers to connect. The app processes source addresses, configuration, credentials, access tokens, library metadata and playback information to provide the functions you request. No channels, movies, series or provider credentials are supplied by Mediavyr.
Provider and SMB credentials and media-server access tokens are stored locally using Apple’s Keychain. Library state, favourites, viewing progress, recently watched items, settings and caches may also be stored on your device. Mediavyr does not operate an app backend that receives your provider credentials, viewing history or media library.
2. iCloud library-state sync
When supported library-state synchronization is enabled, favourites, recently watched items and Continue Watching information can synchronize using Apple’s iCloud key-value storage under your Apple Account. This is separate from Source Sync. Media files are not uploaded by these synchronization features.
3. Optional Source Sync
Source Sync synchronizes supported source configurations and related access information through your private iCloud/CloudKit database. Depending on the sources you add, this can include server or playlist addresses, usernames, provider or SMB passwords, media-server tokens, source settings and supported media bookmarks. Credentials can also be embedded in playlist URLs.
Source credentials are stored in CloudKit encrypted fields, not as ordinary iCloud key-value entries. A local synchronization journal tracks changes, and the Source Sync preference is shared through iCloud. Source Sync is opt-in: it starts after you enable it, and an existing choice can follow your Apple Account to another device.
Each device still connects directly to your selected provider or server. Sync does not upload your media files and does not make a home-network server reachable from outside your network. Mediavyr does not operate a server that receives synchronized source credentials or configurations.
CloudKit data uses Apple’s infrastructure and security settings. Advanced Data Protection, when enabled and supported, also applies to CloudKit encrypted fields. See Apple’s iCloud data security overview. This policy does not claim that every item of app or iCloud data is end-to-end encrypted by default.
4. Your choices, retention and deletion
You can change supported sync settings under Settings → Services & Security. Turning synchronization off stops future syncing; it does not by itself erase existing local or iCloud copies. Disconnecting a service also does not delete an account you hold with that service.
To synchronize removal of a saved source, remove it through the app’s source-management controls while Source Sync is enabled and allow synchronization to complete. A deletion marker without the source’s credential payload can remain in the sync journal and CloudKit so an offline device does not restore the removed entry when it reconnects. This mechanism does not automatically revoke a server-issued token; revoke access through the selected service when needed.
Local library state and caches remain until changed, cleared by available app controls or removed by the operating system. Private iCloud copies remain subject to your sync choices and Apple’s storage controls. Deleting the app is not a guarantee that its iCloud or Keychain entries are erased, and reinstalling it does not promise a new trial.
We cannot retrieve your private library or source credentials from a Mediavyr backend to process an access or deletion request, because we do not operate such a backend. Contact us for guidance about the available app controls. Data held by Apple, your email provider or a media service is also subject to that provider’s retention and deletion processes.
5. Third-party media services
Requests go directly to the IPTV provider, playlist host, EPG source, SMB server or other service you configure, including Plex, Jellyfin and Emby. Plex sign-in uses Plex’s authorization flow and access tokens; Mediavyr does not ask for or store your Plex account password. Jellyfin and Emby authentication is sent to the server you select.
Those requests may reveal your IP address, authentication information, a random app installation identifier, app/device information, selected media and playback progress to the selected service. Content and artwork are retrieved from the configured sources and addresses they supply. These independent services have their own privacy practices; use sources you trust and are authorised to access.
6. Purchases and the free trial
Apple processes subscriptions and one-time purchases through the App Store and StoreKit. The app uses purchase and entitlement information to determine access. Mediavyr does not receive or store your payment card details.
Mediavyr includes an app-level seven-day Premium trial. Starting it does not create a subscription or schedule a charge. Trial timing is anchored using Apple-provided services, including private CloudKit server timestamps, with a monotonic device clock and a cached Apple-verified state used between checks. Existing trial information from earlier releases can be migrated so an update or reinstall does not automatically grant a new trial. If trial timing cannot be verified, the app does not grant unverified Premium access and remains in Lite. After the trial, users can continue with Mediavyr Lite for free or choose Premium.
7. Parental controls
A salted hash of your parental-control PIN or password and your selected locks are stored on the device. They are not synchronized through iCloud. Temporary access is limited to the protected category visit or playback session. The app is a general-purpose media player, not a service that supplies children’s content.
8. Support correspondence
If you email support@mediavyr.com or contact@mediavyr.com, we receive your email address, the message, mail metadata and anything you choose to attach. This information is used to answer your question and investigate the issue through our email service provider. Do not send provider passwords, access tokens, your parental PIN or unredacted playlist URLs and logs.
We retain support correspondence for as long as reasonably needed to handle the enquiry, related follow-up and any applicable legal obligations or disputes. You can request access, correction or deletion of correspondence by contacting us. We do not add support contacts to a marketing list merely because they ask for help.
9. This website and hosting
This website is hosted through Cloudflare Pages. Its own code contains no advertising tracker, analytics script or tracking-cookie mechanism. Images and the promotional video are served from this website rather than a third-party video embed.
Cloudflare necessarily handles requests to deliver and protect the website. This can include IP addresses, requested URLs, browser/system information, traffic and security data. Service-level traffic or security information may be available to the site operator. Depending on enabled security features, Cloudflare may set security cookies. See Cloudflare’s privacy policy and information about Cloudflare cookies. Hosting data is different from the app’s private library data.
Links to the App Store, Apple, third-party projects or other websites take you to those services, which process visits under their own policies.
10. Purposes and privacy rights
Where applicable data-protection law requires a legal basis, necessary app operations and purchase-access checks support providing the functionality you request; optional synchronization follows your choice; and support and website-security processing serves the legitimate interests of answering enquiries and keeping the service available and secure. We also process information when necessary to meet legal obligations. Consent, where required, can be withdrawn without affecting earlier lawful processing.
Depending on applicable law, you may have rights to access, correct, erase or receive a copy of your personal data, restrict processing, object to it or withdraw consent. Contact support@mediavyr.com to exercise rights relating to information we hold. You may also complain to your local data-protection authority, including Datatilsynet in Norway. These rights can be subject to legal conditions and exceptions.
Apple, Cloudflare, email providers and services selected by you may process information in countries outside your own, including outside the EEA. Their applicable service terms, privacy notices and transfer safeguards govern their processing. We do not promise that all data stays in Norway or the EEA.
11. Security, advertising and changes
Mediavyr does not sell personal information or use app data for advertising, cross-app tracking or behavioural profiling. The app has no advertising or third-party analytics SDK. Keychain and CloudKit protection do not make an insecure third-party connection secure: use HTTPS where your service supports it and protect access to your devices and servers.
No system can guarantee absolute security. When app features or these practices change, we update this policy and its effective date. Questions can be sent to support@mediavyr.com.