Privacy policy

1. Who we are

Kanvo is run by Aeosoft LLC, which is responsible for the data described here (the data controller). Contact us at support@kanvoplayer.com.

2. What we store about your device

• A random device code and a secret key created by the app. We store only a hash of the key.
• The device type (for example Android TV or Samsung TV), the model, the app version and when the app last connected.
• Your trial or activation status and end date, and the reseller that activated the device, if any.
• The playlists you add: the name you give them, and the link or Xtream login, stored encrypted.
• Profiles: name, avatar, whether it is a kids profile, and a hash of the PIN if you set one.
• For Xtream playlists, the end date of your provider subscription as the provider reports it. If a reseller activated your device, the reseller can see this date to remind you to renew.

3. What stays on your device

Favourites, recently watched, where you stopped in a film, reminders and settings are stored on the device only. We don't receive them, and we don't know what you watch.

4. Payments

When you pay for an activation, we store the plan, amount, status and the payment provider's reference. Your card or bank details go straight to our payment provider, Airwallex, and we never see them.

5. Resellers

For reseller accounts we store the business name, contact email, country, WhatsApp number, logo, renewal link and the login details used to sign in.

6. Cookies and logs

kanvoplayer.com sets a cookie to remember your language (kanvo_lang) and, when you sign in, cookies that keep you signed in. We use no advertising or analytics cookies.

To protect against abuse, we briefly keep your IP address in memory to limit the number of requests. It is not stored in our database.

7. Why we use this data

• To provide Kanvo: to deliver your playlists to your device and manage trials and activations (performance of the contract).
• To keep the service secure and prevent abuse (our legitimate interest).
• To keep payment records (legal obligation).

8. Who processes it for us

Our database and sign-in run on Supabase, the website and API on Vercel, and payments on Airwallex. They process data only on our instructions. Resellers see the devices they activated. We don't sell data and don't share it with advertisers.

Some of these providers process data outside the European Economic Area, including in the United States. Where they do, the transfer is covered by an adequacy decision of the European Commission or by its standard contractual clauses.

9. How long we keep it

Playlists and profiles are deleted as soon as you remove them. Device data is kept while the device uses Kanvo; ask us and we delete it. Payment records are kept for as long as accounting law requires.

10. Your rights

You can ask to see, correct or delete your data, to receive a copy, or object to how we use it. Email support@kanvoplayer.com and include your device code, so we can find your device. You can also complain to the data protection authority in your country.

11. Children

Kids profiles never show adult groups. Purchases on kanvoplayer.com are meant for adults.

12. Changes

If we change this policy, we update the date at the top. If a change matters, we announce it on kanvoplayer.com.