SahratiPrivacy policy
Last updated: 8 November 2026
In short: we keep the least we need for your account to work on your devices: your email, your plan, and the settings you choose to sync. Your IPTV provider login and playlist links never leave your device. No ads, no trackers, no selling data.
Who is responsible for your data
Sahrati. You can reach us at [email protected].
The operator's name and postal address will be added before launch.
What we keep, and why
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Your email, account ID and sign-in times | To sign you in and link your devices to one account | Contract | Until you delete your account |
| The date your free trial started | So each account gets one free week | Contract | Until you delete your account |
| Your Google Play subscription: purchase token, plan, expiry date | To know your plan is active on all your devices | Contract | Until you delete your account |
| What you sync: favourites, where you stopped watching, channel and category order, profiles, settings | So your other device finds them as you left them | Contract | Until you delete them or your account |
| A random device ID, the device's name and when it last played | So your plan plays on one screen at a time, and to tell you where playback moved | Contract | Deleted when playback stops, or after two minutes without contact |
| The device name and a temporary code when you link a TV | So the TV signs in without typing | Contract | The code expires after 10 minutes |
| Your email and language on the "remind me at launch" list | To send you one message at launch | Your consent | Until launch, or until you ask us to remove it |
Favourites and progress are stored with identifiers from your playlist, so they can show what you watched. We use them for nothing else, and nobody but you sees them.
What we don't collect
- Your IPTV provider username, password and playlist links: they are stored encrypted on your device only, never sent to us, never logged.
- No ads, analytics or trackers, no device fingerprinting, no location, and we don't keep your IP address to find where you are.
- Your card details: Google Play handles payment entirely, and we never see them.
Who processes data with us
- Supabase: the database and sign-in, on servers in Frankfurt, Germany.
- Google Play: payments and subscriptions, under Google's privacy policy.
- Resend: sends the sign-in code emails, from the EU (Ireland).
- Cloudflare: hosts this website.
- GitHub: keeps an encrypted nightly backup of the database, deleted after 30 days.
Some of these companies are based in the US. Where data leaves the EU, it does so under the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
If you turn on Android backup, Google keeps a copy of the app's settings in your Google account. That happens between your device and Google, not through us.
Deleting your account
In the app: Settings → Account → Delete account. Or on our account deletion page.
Your account and everything linked to it are deleted at once. The last copy leaves our backups within 30 days. Deleting your account does not cancel a Google Play subscription, so cancel it in Google Play first.
Your rights
You have the right to access, correct, delete and export your data, to restrict or object to its processing, and to withdraw consent at any time. Email [email protected], and we reply within 30 days. You can also complain to the data protection authority in your country.
Children
Sahrati is not meant for anyone under 16, and we don't knowingly keep their data.
Changes
If we change this policy in an important way, we tell you in the app or by email before it takes effect.