Aura IPTV Privacy Policy

Aura IPTV is an Android and Android TV app for playing IPTV content from playlist sources that you add or import.

Last updated: May 9, 2026

Short version: Aura IPTV is designed as a local-first media client. The app stores IPTV playlist and account data locally on your device so it can load and play your selected sources. The app also uses Google AdMob / Google Mobile Ads to show ads. Google or its partners may collect or receive identifiers such as the Advertising ID and related device or ad interaction data for advertising, analytics, ad measurement, and fraud prevention. Network requests are made to the IPTV sources you configure and to Google ad services.

1. Information We Collect or Store

Aura IPTV stores information needed to provide playlist management, playback, search, favorites, parental controls, and program guide features.

Category Examples Purpose Where It Is Stored or Sent
Playlist source details M3U URLs, local M3U file URIs, XMLTV URLs, source names, Xtream server URL, Xtream username, Xtream password Add, refresh, and play content from your selected IPTV providers Stored locally in the app database. Sent only to the source/provider required to download catalogs, EPG data, or streams.
Imported catalog and guide data Channel names, stream URLs, logos, categories, movie and series metadata, episode metadata, EPG program schedules Display live TV, movies, series, search results, and program guide information Stored locally in the app database after being downloaded from your configured sources.
Playback and personalization data Recently watched items, playback progress, completion status, favorites, locked items, recent searches Resume playback, show favorites, support parental controls, and make search easier Stored locally in the app database.
App settings Theme, language, EPG window size, stream redirect compatibility, live preview setting, active source, parental PIN hash, hide locked content setting Remember your app preferences and parental control choices Stored locally using Android DataStore preferences.
Advertising and ad measurement data Advertising ID, device and app identifiers, IP address, ad requests, ad interactions, and invalid traffic or fraud signals Display ads, measure ad performance, support analytics, and prevent fraud or abuse May be collected and processed by Google and its partners through Google AdMob / Google Mobile Ads when ads are requested or displayed.
Device registration data Android ID or fallback device identifier, local IP address, Android version, manufacturer and model, user agent, and registration request count Register this device and determine app configuration such as ad availability Sent to Aura IPTV Platform when the app registers the device.

Xtream credentials and source URLs can be sensitive. They are stored in the app's private local database so the app can refresh and play your sources. The current app code does not apply a separate app-level encryption layer to the Room database.

2. Permissions

Aura IPTV requests only the Android INTERNET permission. This permission is needed to download playlists and EPG data, load artwork, register the device, and play streams.

The app does not request location, contacts, calendar, camera, microphone, SMS, call log, or phone state permissions. The app may use Google AdMob / Google Mobile Ads, which may collect or access advertising-related identifiers such as the Advertising ID, subject to your device settings and Google Play services behavior.

3. How Information Is Used

4. Network Requests and Third Parties

User-configured IPTV sources

The app connects to IPTV providers and content sources that you add, import, or select. Those sources may receive information that is naturally included in the request, such as your IP address, requested URLs, Xtream username and password, access tokens embedded in stream URLs, and playback requests. Aura IPTV does not control the privacy practices of those providers.

Aura IPTV Platform

The Aura IPTV Platform lets the app register a device and receive app configuration.

Artwork and media delivery

Channel logos, posters, backdrops, EPG images, and video streams may be loaded from URLs supplied by your playlist provider. Requests to those URLs are made directly from your device.

Google AdMob / Google Mobile Ads

The app uses Google AdMob / Google Mobile Ads to request and display ads. When ads are loaded or shown, Google and its partners may collect or receive identifiers such as the Advertising ID, device and app identifiers, IP address, ad interaction events, and signals used to measure ad performance and detect invalid traffic or fraud. This data may be shared with Google for advertising, analytics, ad measurement, and fraud prevention. Google's handling of that data is governed by Google's own privacy terms and settings.

5. Security

Aura IPTV stores app data in Android app-private storage using Room and DataStore. Android normally prevents other apps from reading this storage directly. The app also stores the parental PIN as a SHA-256 hash instead of storing the PIN text.

IPTV compatibility tradeoffs: Many IPTV sources use plain HTTP, redirects between HTTP and HTTPS, self-signed certificates, or misconfigured TLS. To support those sources, Aura IPTV permits cleartext HTTP traffic and uses a permissive HTTPS configuration in its HTTP client. This improves compatibility but may reduce network security for those connections. Use IPTV providers you trust, and prefer HTTPS sources when available.

The Android manifest currently allows Android backup. Depending on your device settings and Android backup configuration, app data may be included in system backups managed by Android or your device vendor.

6. Data Retention and Deletion

Local app data is retained until it is replaced, cleared in the app, deleted with a source, or removed by uninstalling the app. Aura IPTV Platform records follow separate server-side cleanup rules.

7. Children

Aura IPTV is not directed to children under 13. The app includes parental control features such as locked content, a parental PIN, and an option to hide locked content. These controls are stored locally and do not require creating a child profile.

8. Your Choices

9. International Transfers

Most information is stored locally on your device. Information may cross borders when your device connects to IPTV providers, artwork hosts, stream servers, EPG hosts, or Aura IPTV Platform, depending on where those services operate.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes to Aura IPTV, platform features, legal requirements, or privacy practices. The "Last updated" date will be changed when the policy is updated.

11. Contact

For privacy questions or support, contact us at info@auraiptv.info.