TiviPro
Scope and contact
Last updated: October 23, 2026.
This policy describes information handled by the TiviPro app, its membership and AI services, and tivipro.app. TiviPro plays sources you add; it does not supply television services. No separate TiviPro account is required. For support, privacy questions or a request concerning your data, write to support@tivipro.app. Do not send provider passwords, complete playlist URLs, payment details or other secrets.
Playlists, credentials and viewing information
The app stores your playlist settings, provider credentials, favourites, organization, preferences, recent channels and searches, and viewing progress on your device. It also downloads channel catalogues, programme guides and artwork. Credentials use Keychain, and sensitive catalogue addresses use encrypted local storage. Device storage and system backups are separate from the optional sync feature described below.
When you load or play a source, the app connects to your provider and the guide, artwork or media hosts associated with that source. Those services receive the requests needed to deliver it, including your IP address and any credentials required by the source. Their own terms and privacy practices apply. Check that you trust a source before adding it. TiviPro cannot control its collection or retention practices.
Optional iCloud Sync
iCloud Sync is off until enabled on each device. When enabled, it sends playlist addresses, provider usernames and passwords, country and group choices, favourites, hidden channels, guide corrections, recent channels and searches, movie and episode progress, and supported settings to your private Apple CloudKit database. Devices using the same Apple Account can retrieve that information. Downloaded channel catalogues, programme guides and artwork are fetched separately on each device.
TiviPro uses CloudKit encrypted fields for synced data and an encrypted local sync record. This sync data goes to Apple's service rather than TiviPro's membership or AI backend. Turning sync off stops future syncing on that device; it does not erase copies already in iCloud or on other devices. Manage stored TiviPro data through Apple's iCloud storage controls. Re-enabling sync can upload the data still on a device. Apple's privacy information is available at https://www.apple.com/legal/privacy/
Apple purchases and membership
Apple processes App Store purchases and payment details. TiviPro does not receive your payment card number. To authorize AI features, the app sends Apple-signed purchase information to TiviPro's membership service on Cloudflare. The service verifies subscription status with Apple and receives subscription updates from Apple.
The membership service stores the original transaction identifier, subscription status and expiry, a pseudonymous subscriber identifier, usage totals, and request and notification identifiers. These records support membership checks, shared AI allowances, purchase updates and duplicate-request prevention. Pseudonymous does not mean anonymous: these records remain associated with a purchase.
AI requests and recipients
Automatic country matching sends limited group names, counts, channel-name samples and playlist summary information to TiviPro's service. Movie and TV category matching sends category names and their media kind for language, country or region classification; it does not send library titles or viewing history. The assistant sends your request, the recent messages of the same conversation, your language setting, whether you have a movie and TV library and, when needed, a limited selection of channel names, groups, favourite status and programme details such as titles, descriptions and times, or of movie and series titles with their kind, genre, year and description. It never sends stream addresses, account details or viewing history. This information is processed through TiviPro’s Cloudflare service, OpenRouter and the providers serving the selected AI models. TiviPro uses OpenAI GPT 6-Luna for country matching, movie and TV category matching, and the assistant. OpenRouter can route a model to different hosting providers. The app asks for permission the first time you use each AI feature. That permission is remembered until you turn sharing off in Settings; choosing Not Now leaves manual browsing and organization available.
The request formats do not include dedicated fields for provider passwords, playlist addresses or stream URLs. The app and service also redact common URL and credential patterns. Redaction cannot reliably remove every secret or personal detail entered into free text or present in display names. Do not include sensitive information in requests. Manual organization and previously saved classifications remain available without new AI requests.
OpenRouter and the model providers have their own processing and retention practices. This policy does not promise that every provider uses zero retention or excludes all data from training. OpenRouter's policy is at https://openrouter.ai/privacy
Service records and retention
AI outputs are stored to answer retries without repeating an inference or charging the same allowance twice. These outputs can include request-derived search terms, channel names and response text. The membership service's scheduled cleanup removes stored result bodies once they are older than 24 hours; this is a cleanup threshold, not a guaranteed deletion deadline. Request hashes and duplicate-prevention records remain after result bodies are removed.
Country and library category classification results also use a separate service cache. The configured cache lifetime can be up to 30 days; entries may be removed sooner. The membership service currently has no automatic expiry for entitlement records, usage counters, notification identifiers or request tombstones. Cancelling a subscription or removing the app does not automatically erase these server records.
Diagnostics, website and support
The app produces local diagnostics, including playback and error information. The app and website do not integrate Firebase Analytics or Firebase Crashlytics. Service diagnostics include limited error metadata such as request phase, upstream status and response size. Hosting and network providers may process IP addresses, timestamps and other connection information to deliver and protect the services. Cloudflare's privacy information is at https://www.cloudflare.com/privacypolicy/
The website is publicly accessible and does not require an account or access cookie. It does not include advertising or analytics scripts. Email sent to support@tivipro.app is forwarded through Cloudflare Email Routing to a Gmail support inbox. Your email address, message and attachments are processed by these services so your request can be handled. Avoid sending unredacted diagnostics that contain credentials or personal information.
Local commercial muting
Commercial muting on supported Apple TV playback uses local signals and image analysis. The detection feature does not upload video frames to the AI service. It is optional and can be disabled in the app.
Choices and data requests
Use the app's settings to remove saved playlists or clear available history. Consider each device and iCloud separately when removing synced information. Removing the app does not cancel an Apple subscription or necessarily remove Keychain, backup, cloud or service records. Manage subscriptions through your Apple Account.
You can contact support@tivipro.app about access, correction or deletion of information held by TiviPro. The rights available to you, and any permitted exceptions, depend on applicable law. Requests about a provider's records or your Apple Account should also be directed to that provider or Apple. Do not send credentials to prove your identity.
Changes
Updates to this policy will be available on the TiviPro website and in future app versions.