Privacy Policy — Casto IPTV

Last updated: February 2026

1. Introduction

Casto IPTV ("the App") is a media player application developed for Android. This Privacy Policy describes what information we collect, how we use it, and your choices regarding your data.

2. Information We Do NOT Collect

  • We do not collect, store, or transmit your viewing history, browsing habits, or playlist content to any proprietary server operated by us.
  • We do not track which channels, movies, or streams you watch.
  • We do not sell, share, or monetize any personal user data.
  • We do not require you to create an account to use the App's core features.

2a. Google Play Data Safety Disclosure

In accordance with Google Play's Data Safety requirements, we disclose the following:

  • Data collected: Device identifiers (for crash reporting), app interactions (anonymized analytics), and authentication tokens (if you sign in with Google).
  • Data sharing: Anonymous crash reports and analytics are shared with Google Firebase. No personal data is sold to third parties.
  • Data security: Data is encrypted in transit using HTTPS/TLS.
  • Data deletion: You can delete local data by uninstalling the app. For account deletion, see our Delete Account page.

3. Data Stored Locally on Your Device

The following data is stored locally on your device only and is never transmitted to our servers:

  • Playlist URLs and IPTV service credentials you enter
  • Viewing preferences and app settings
  • Favorites and watch history (including playback resume positions)
  • Parental control settings and PIN
  • EPG (Electronic Program Guide) data cached from your IPTV provider

This data remains on your device and is permanently deleted when you uninstall the App or clear its data through your device settings.

4. Third-Party Services

The App integrates with the following third-party services:

a) Google Sign-In (Firebase Authentication)

If you choose to sign in with Google, we receive basic profile information (name, email address, profile photo) from Google to identify your account. This data is processed by Google Firebase Authentication. We do not store or transmit this information to any other server. Google's privacy policy governs the collection and processing of your authentication data: https://policies.google.com/privacy

b) Google Play Billing

If you purchase a Premium subscription, the transaction is handled entirely by Google Play. We receive only a purchase confirmation token to verify your subscription status. We do not receive or store your payment information (credit card number, billing address, etc.). Google's privacy policy governs the processing of all payment data.

c) Firebase Crashlytics

The App uses Firebase Crashlytics to collect anonymous crash reports and performance diagnostics. This data includes device model, OS version, and stack traces of errors. It does not include any personally identifiable information, playlist content, or viewing history. You can opt out by disabling crash reporting in your device settings.

Data retention: Crash data is retained by Firebase for 90 days.

d) Firebase Analytics

The App uses Firebase Analytics to collect anonymous usage statistics (e.g., screen views, feature usage frequency). This data is aggregated and does not identify individual users. No playlist content, viewing history, or personal information is included.

Data retention: Analytics data is retained by Firebase for 14 months by default. You can opt out of analytics collection in the App's settings.

e) IPTV Content Providers

When you add a playlist or IPTV service, the App connects directly to that provider's servers to retrieve channel listings, movie catalogs, series information, EPG data, and media streams. Your interaction with these third-party providers is governed by their own privacy policies. We have no control over and assume no responsibility for the privacy practices of any third-party content provider.

5. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children. The App includes optional parental controls that allow a parent or guardian to restrict access to specific content categories with a PIN code.

6. Data Security

All user data is stored locally on your device using an encrypted SQLite database (Room). No user data is transmitted to external servers operated by us. Authentication tokens and subscription verification are handled securely through Google's infrastructure.

7. Your Rights and Choices

  • You can delete all local App data at any time by clearing the App's data in your device settings or by uninstalling the App.
  • You can revoke Google Sign-In access through your Google Account settings.
  • You can cancel your subscription at any time through Google Play Store.
  • You can request deletion of any account-associated data by visiting our Delete Account & Data page.

7a. GDPR & CCPA Rights (EEA, UK, and California Residents)

If you are located in the European Economic Area (EEA), United Kingdom (UK), or California, you have additional rights under GDPR, UK GDPR, and CCPA respectively:

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You may request correction of inaccurate data.
  • Right to Erasure: You may request deletion of your data ("right to be forgotten").
  • Right to Data Portability: You may request your data in a portable format.
  • Right to Object: You may object to processing of your data for certain purposes.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at support@castotv.com. We will respond within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the revised policy.

9. Contact

For privacy-related inquiries, please contact us at: