Privacy Policy — Nova Fast IPTV

This data never leaves the device, except as described in sections 2 and 3.

• Your IPTV source credentials (server URL, username, Xtream Codes password, or M3U playlist URL): encrypted locally (AES-256-GCM) and stored in the TV's local database. They are only ever sent to the IPTV server you configured yourself, to load your channels/movies/series.
• TMDB API key (if you provide one in Settings): stored locally, used only to query the TMDB API directly from the TV (posters, synopsis, cast, ratings).
• Viewing preferences: favorites, search history, playback/resume positions, profiles (name, avatar, PIN code — stored as a hash, never in plain text), parental control settings. All stays local, except for Nova Plus sync (section 3).
• Interface settings: theme, language, subtitle/audio preferences, etc.

You can delete all of this data at any time by uninstalling the app or resetting profiles from Settings.

When you activate or check a Nova Plus license, the app contacts our servers (novafast.tv) and sends:

• An anonymous device identifier: a UUID randomly generated on the TV on first launch, unrelated to any serial number or personal data.
• A descriptive device label (e.g. “LG webOS TV”), so you can recognize your devices in your account portal.
• The license key you enter during activation.

No IPTV source credentials, stream URLs, or watched content are transmitted during this check.

If you are a Nova Plus subscriber and use the “Synced resume playback” feature, the app additionally sends, on each playback progress update:

• A non-reversible hash of your server + Xtream username — never the password, never in plain text — used only to recognize “the same account” across your devices.
• The numeric content identifier (provided by your Xtream server), season/episode if applicable, playback position, duration, and watched status.

This feature can be disabled at any time (simply don't activate Nova Plus, or don't configure the same account on multiple devices).

To operate novafast.tv, license management and email delivery, we rely on the following providers:

• IONOS: web hosting for novafast.tv and license services. Data is hosted in Europe.
• Lovable Cloud: backend, database and user authentication. Data is encrypted in transit (TLS) and at rest.
• Stripe: secure payment processing when you purchase Nova Plus. Nova Fast IPTV never stores your card details.
• notify.novafast.tv: sends transactional emails (purchase confirmation, account login link).
• TMDB (The Movie Database): direct requests from your TV for metadata (posters, synopsis, cast). See TMDB's privacy policy.

We do not integrate any advertising SDK or third-party analytics/tracking tool in the app.

• We do not sell any data to third parties.
• We do not display any ads in the app.
• We do not provide any content, channel, or IPTV service: the app is a technical player that connects to the source you configure yourself, under your responsibility.
• We do not collect precise geolocation data.

You can at any time:

• Delete your local data (uninstall the app or reset profiles).
• Deactivate a device from your Nova Plus license via your account portal on novafast.tv.
• Request deletion of your license data (email, license key, associated devices) by contacting us at contact@novafast.tv.

The app offers kid profiles with parental controls (PIN code, category locking, keyword filtering), configured by the responsible adult in the household. We do not knowingly collect data from children beyond these adult-configured settings.

For any question about this policy or your data: contact@novafast.tv.