PolarGate TV privacy policy.

01Who is responsible

PolarGate TV is an app by POLARGATE, S.L. (CIF B24895005), Calle Electrónica 6, 28027 Madrid, Spain. We are the data controller for the personal data described here. This policy covers only the PolarGate TV app (identifier ai.polargate.tv) on iPhone, iPad, Mac and Android. The rest of Polargate has its own privacy policy.

For any question about your data, write to hello@polargate.ai.

02What PolarGate TV is

PolarGate TV is a player. It offers no content: you add the IPTV line you contract with your own provider, and the app shows and plays what that provider gives you. Your provider is a separate company, independent from us, and handles your data under its own policy. For example, it sees the IP address of your device when the device asks it for a video.

03Data we process

• Account. Your email address, an internal user id and the dates of your account and sessions. If you sign in with Apple: the identifier Apple gives this app, the email Apple shares (it can be an Apple relay address) and your name if you choose to share it. We also keep an Apple token, encrypted in the Supabase Vault, only to revoke Sign in with Apple when you delete your account.
• Sign-in codes. If you sign in by email, we send a one-time code to your address. The codes are not logged.
• Your IPTV line. The server address, username and password, encrypted in the Supabase Vault. They are used only to talk to your provider: to check the line, fetch its catalogue and prepare playback. They are never sent back to the app or shared with anyone. We also keep the name you give the line, its status as reported by the panel (active, expiry date, connections allowed) and when it was last checked. If Polargate assigned the line to your account, that line is ours.
• Your line's catalogue. The channels, films and series your provider offers, so the app can show them to you.
• What you do in the app. Where you are in each film or episode and whether you finished it, My list, your preferences (languages and whether adult content is shown) and the devices with an open session (when the session started, its last activity and the device or browser type).
• AI search. Only if you have the subscription and have given your permission: what you type in the search and the titles of your catalogue that match. Section 05 explains it.
• Subscription. What Apple or Google tell us about your purchase: the store, the product, the transaction or purchase identifier, its status, its expiry date and whether it renews. We never see your card or payment details.
• Technical data. The IP address your device connects from, in the access logs of our servers. Server logs with closed error codes, without the address of your panel or your credentials. Counters that stop abuse: attempts to check a line (with a hash of the panel's server, never its name) and AI searches per day.

04What we do not do

• No advertising and no third-party analytics in the app.
• We do not track you across other companies' apps or websites, and we do not build advertising profiles.
• We do not sell or rent your data.
• The app does not use your camera, microphone, contacts or location.

05AI search

AI search lets you ask for something to watch in your own words. It is part of the paid subscription, and the first time you use it the app asks for your permission. Without both, nothing you type leaves for an AI provider.

• Anthropic (Claude) receives what you type and the titles of your catalogue that match, to understand what you are asking for.
• OpenAI receives what you type, to turn it into a numeric vector the search can compare against the catalogue.
• Neither receives your name, your email or the details of your line.
• We do not store your searches in our database. We only record usage (model, tokens and cost) to control spending. Under their API terms, neither company uses this data to train its models.
• You can withdraw your permission at any time in Cuenta > Retirar el permiso de la IA (Account > Withdraw AI permission; the app is in Spanish). If what is sent to the AI changes, the app will ask you again.

06Purposes and legal bases

07Who receives data

These companies process data on our behalf, only for what is described here:

We do not give your data to anyone else, except when the law requires it. Your IPTV provider is not on this list: it is not our processor, it is an independent company you chose.

08International transfers

Our database is in the European Union. Anthropic, OpenAI, Resend, TMDB, Apple and Google can process data in the United States. Those transfers rely on the standard contractual clauses approved by the European Commission and, where the company is certified, on the EU-US Data Privacy Framework. You can ask us for a copy of these safeguards.

09How long we keep it

• Your account and everything linked to it (line and credentials, preferences, progress, My list, consent, subscription record, sessions) for as long as you keep the account. When you delete it, it is deleted at that moment. See how to delete your account.
• Attempts to check a line: 2 days. Daily AI search counters: 35 days.
• Server and access logs: the limited period of our hosting provider, after which they are deleted automatically.
• Deleted data can remain for a short time in the automatic backups of our provider until they are overwritten.
• Apple and Google keep their own records of your purchases under their policies.

10Your rights

You can ask us for access to your data, to correct it, to delete it, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time without affecting what was done before. Write to hello@polargate.ai from the email of your account so we can check it is you. We answer within one month.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, or to the authority of the EU country where you live.

11Minors

PolarGate TV is for people aged 18 or over. It is not aimed at minors. If we learn that an account belongs to a minor, we delete it.

12Security

Everything travels encrypted between the app and our servers. Line credentials and the Apple token are stored encrypted in the Supabase Vault. The app never reads the database directly: only our server functions can, each with access limited to the account that calls them. Your session is kept in the secure storage of your device (the Keychain on Apple devices).

13Changes

If this policy changes, we publish the new version here with its date.

14Other PolarGate TV documents

• Terms of use
• Delete your account