Privacy Policy

1. Controller and scope

Loki TV is operated by Pushin Consultoria em TI, located at Rua Affonso da Fonseca Valverde, 49, Campinas, Brazil. This policy applies to the Loki TV Smart TV application, lokiptv.com, the customer and integrator portals, support, and related APIs. Contact: [email protected]; telephone/WhatsApp: +55 16 99329-4017.

Loki TV is a player and management platform. We do not provide, sell, host, or license channels, movies, series, signals, or playlists.

2. Information we process

Depending on how the service is used, we process the following categories:

• Account and profile information: name, email address, password hash, language, timezone, email verification, account role, and optional two-factor authentication secrets and recovery codes.
• TV and application information: persistent device identifier, public activation code, device name or room, platform, manufacturer, model, application version, license and activation status, masked IP or network fingerprint, and last connection.
• Activation and security information: temporary activation/access codes, hashed pairing and API tokens, session identifiers, IP address, user agent, login and security activity, permissions, and legal acceptances.
• Playlist and provider information supplied by the user or an authorized integrator: playlist name, source type, provider label or host, source URL, usernames, passwords or tokens embedded in that source, authorization records, and imported catalog metadata. Source URLs and credentials are encrypted at rest and excluded from normal responses.
• Viewing and personalization information: favorites, watch history, resume or progress state, selected catalog items, and synchronization revision.
• Technical and playback information: event type, item identifier and title, pseudonymized stream fingerprint, redacted error message, user agent, playback context, app performance, catalog/import health, and diagnostic results.
• Commercial and support information: plan, license, subscription and transaction references, billing status, customer or organization links, support messages, copyright reports, and diagnostic context voluntarily submitted with a request. Full payment-card details are processed by Stripe and are not stored by Loki TV.
• Website information: essential cookies or session storage, CSRF protection, locale preference, request route, timestamps, and security logs.

3. Purposes and legal bases

• Perform the service contract: create accounts, activate and license TVs, configure authorized playlists, import catalogs, synchronize preferences, deliver playback, process billing, and provide support.
• Meet legitimate interests in operating, securing, troubleshooting, measuring reliability, preventing fraud and abuse, and improving compatibility, balanced against user rights.
• Meet legal and regulatory obligations, respond to lawful requests, maintain accounting records, handle copyright reports, and establish or defend legal claims.
• Use consent where required by applicable law for an optional feature or communication. Consent may be withdrawn without affecting earlier lawful processing.

4. Sharing, processors, and international transfers

We do not sell or rent personal information. We share only what is necessary with hosting, database, content-delivery and security providers, including Cloudflare; communication and monitoring providers; payment processing, including Stripe; an integrator expressly authorized for a particular TV or playlist; or authorities and other parties where required by law or necessary to protect rights, safety, and the service.

Providers may process information outside the user’s country. Where required, we use contractual, organizational, and technical safeguards. Third-party playlist providers receive the network requests needed to retrieve the selected catalog or media and apply their own privacy practices.

5. Retention and security

We keep account, device, playlist, license, and personalization information while needed to provide the service or until deletion is requested, subject to legal retention and dispute requirements. Encrypted playlist credentials are deleted when the playlist is permanently removed. Diagnostic runs are normally retained for 30 days; pseudonymized application access logs are normally retained for 180 days. Billing, legal acceptance, audit, security, support, and copyright records may be kept longer where required. Backups are removed on their normal secure rotation.

We use encryption for sensitive playlist sources and two-factor secrets, one-way hashing for passwords and tokens, access controls, service segregation, rate limits, redaction or pseudonymization, monitoring, and backups. No system is completely secure; relevant incidents will be handled and notified as required by law.

6. Your rights

Subject to applicable law, including Brazil’s LGPD, you may request confirmation, access, correction, anonymization, blocking or deletion of unnecessary data, portability where available, information about sharing, review of automated decisions where applicable, consent withdrawal, and account deletion. You may also change your password, close sessions, remove playlists, revoke integrator access, and change preferences. We may request information needed to verify identity.

7. Children, content, and third parties

Loki TV is not directed to children and does not provide audiovisual content. Third-party playlists and pages follow their owners’ policies. Users must be authorized to use all configured content.