Privacy policy — Caravela IPTV
In short: Caravela is a player. It does not provide channels or playlists, and your playlists, credentials, favourites and history stay only on your phone — we never receive them. We use Google services for usage statistics, crash reports and ads, and RevenueCat for Premium purchases. In the European Union, the United Kingdom and Switzerland we ask you first, and you can change your mind at any time in the app's Settings.
1. Who we are
Caravela IPTV is published by Nortada Studio (Pedro Figueiredo), the controller of the data described here. Contact: apps.nortadastudio@gmail.com.
2. What stays only on your phone
- The playlists you add (M3U addresses, Xtream Codes servers and credentials), channels, movies and series, the TV guide (EPG), favourites, watch history and your preferences.
- This data is not sent to us or to the services below. Credentials are only used to connect directly to the provider's server you entered.
- If you pick an M3U file from your phone, it is read locally and never leaves the device.
- It may be included in your Android backup, if you have it turned on (managed by Google, in your account).
The content you watch comes from providers you choose. Caravela does not control those providers or their privacy practices.
3. What we collect and why
Usage statistics — Google Analytics for Firebase
Which screens and features are used, session length, device model, Android and app version, language, approximate country (from the IP address) and a random installation identifier. Used to understand what to improve. In the EU, UK and Switzerland they are only collected if you agree, in the consent window, to storing information on the device and to content performance measurement. In other regions they are on by default. In every region you can turn them off in Settings › Privacy › Usage statistics. Kept for up to 14 months.
Crash reports — Firebase Crashlytics
When the app crashes: the technical error log, the device state at that moment (model, system version, free memory), the app version and a random installation identifier. Used only to fix problems (legitimate interest in keeping the app working). You can turn them off in Settings › Privacy › Crash reports. Kept for about 90 days.
Remote configuration — Firebase Remote Config
The app asks Google's servers for settings we can change without publishing a new version (for example notices or free-version limits). This uses a random installation identifier and the app version. No profile is built.
Ads — Google AdMob (free version only)
The free version shows an ad every now and then when you open a channel, movie or episode — never during playback. Google may collect the device's advertising ID, IP address, device information and interactions with ads.
- In the EU, UK and Switzerland we use Google's consent window (IAB TCF certified). If you agree, ads may be personalised; if you decline, Google shows limited, non-personalised ads. Your choice is stored on your phone and you can review it in Settings › Privacy › Consent options.
- In other regions local rules and your phone's ad settings apply (you can reset or delete the advertising ID in Android settings).
- Premium has no ads.
Google also processes this data on its own behalf; see How Google uses information from sites or apps that use its services.
Premium purchases — Google Play and RevenueCat
Payments are handled by Google Play: we never see your card or payment details. To confirm purchases and know whether Premium is active we use RevenueCat, which receives an anonymous identifier generated by the app, receipts and history of Premium purchases, device information and the store country. Legal basis: performance of the contract (giving you what you bought). RevenueCat acts as a processor on our behalf.
4. What we don't do
- We don't ask for an account, name, email or phone number to use the app.
- We don't sell personal data.
- We don't collect your precise location or access contacts, photos or files (except the M3U file you choose, read only on the device).
5. Who we share with
Only the services above: Google (Firebase, AdMob, Google Play) and RevenueCat. Some of them process data outside the European Economic Area, namely in the United States; such transfers rely on the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).
6. Your rights
You can ask for access, rectification, erasure, restriction or portability of your data, object to its processing and withdraw consent at any time (without affecting what was done before). The quickest way is the switches in Settings › Privacy. Since we don't know who you are, for requests about data held by the services above we may need information identifying your installation or purchase (for example, your Google Play order number). Uninstalling the app deletes the data stored on the phone and stops all collection.
Write to us at apps.nortadastudio@gmail.com. You also have the right to lodge a complaint with a data protection authority — in Portugal, the CNPD.
7. Children
Caravela is not intended for children under 13 and we do not knowingly collect children's data. If you believe this has happened, contact us and we will delete it.
8. Changes
If this policy changes, we will publish the new version on this page with an updated date. Important changes will also be announced in the app.