Effective 6 September 2026. This policy covers the Flipbox iOS app and flipbox.app.
Flipbox is built so that we cannot see what you watch. There are no accounts, no analytics, no tracking SDKs, and no servers of ours for your data to sit on. Nothing about your viewing reaches us, because there is nowhere for it to go.
What we collect
Nothing. Flipbox has no sign-up, no login, no user profile, and no analytics or attribution software of any kind. We do not collect, transmit, store, or sell personal information or viewing data, and we have no ability to associate any activity with you.
This is checkable rather than a promise. The app links no analytics, attribution or crash-reporting software at all — its only third-party component is the subscription library described below — and the App Store privacy label we file will read Data Not Collected, which Apple holds us to against the app's actual behaviour.
What stays on your device
Your playlists, channel lists, favourites, watch history, viewing statistics, parental PIN and settings are stored locally on your device and never leave it. Xtream Codes passwords are stored in the iOS Keychain. Deleting the app deletes all of it.
The backup file you can export from Settings is written by you, to wherever you choose. It deliberately omits every credential: a playlist URL that carries a username or password in it is withheld from the export rather than written out, so a backup you share cannot leak your provider login.
Connections the app makes
| Your provider | The app connects to the playlist, guide and stream servers you configure, to fetch your channel list, programme guide and video. We are not party to those connections and never see them. |
| Apple | Purchases are processed entirely by Apple. We never receive or handle payment details. |
| RevenueCat | Our subscription provider validates purchases against an anonymous, app-generated identifier. It is not linked to your name, email or viewing. See RevenueCat's privacy policy. |
There are no other outbound connections. No advertising networks, no crash-reporting services, no telemetry.
Diagnostics you send us
If you use Report a problem, the app opens a pre-filled email in your own mail app, so you read it before you send it. The technical part is four lines: the app version, which screen you were on, whether your playlists are M3U or Xtream, and your playback engine and stream-format preferences. It contains no addresses, no credentials, no channel names and nothing about what you were watching, and nothing is sent unless you send it.
Content
Flipbox includes no channels, streams or content of any kind, and never will. You choose the sources you connect and you are responsible for having the right to access them.
Children
Flipbox is not directed at children and is rated 17+ because the content you can connect to it is outside our control. The app includes a parental PIN and category locking for households that want them.
Your rights
Privacy law gives you rights to access, correct and delete personal data a company holds about you. We hold none, so there is nothing for us to return or erase. Everything the app knows about you is on your device, under your control, and removed when you delete the app.
Changes
If this policy ever changes we will update this page and the effective date above. Material changes will be noted in the app's release notes rather than made quietly.
Contact
Questions about privacy: support@flipbox.app. Sixteen Mile Ventures Inc., Oakville, Ontario, Canada.