Privacy Policy

1. Guiding principle

TuneLoft never sees your source credentials in the free version. Your credentials (M3U URL, Xtream Codes username/password, provider password) live exclusively on your phone and on your Meta Quest headset, inside the iOS Keychain or the Android Keystore. Pairing between your devices uses an AES-256-GCM-encrypted QR code, with no server transit.

2. Data collected in the Free tier

None. The TuneLoft Free mobile app runs without a user account and without any connection to our servers (other than app updates via the Apple / Google stores).

3. Data collected in the Plus tier

The TuneLoft Plus subscription requires creating an account. Data collected:

• Email address (for magic-link sign-in)
• Stripe Customer ID (for subscription management)
• Your favorites list and watch history (for cross-device sync, encrypted at rest)

Your source credentials stay strictly local to your device, even in the Plus tier. Cross-device sync covers favorites and resume points, not provider credentials.

4. Hosting and jurisdiction

Plus user data is hosted in the European Union (Neon DB, Frankfurt region). TuneLoft is operated by an Estonian OÜ, under European jurisdiction and in compliance with GDPR.

5. Your rights (GDPR)

Under GDPR, you may at any time:

• Access your data through the Stripe Customer Portal, available from the app
• Request full deletion of your account and associated data (from the app or by email at privacy@tuneloft.tv)
• Export your data in a portable format

6. Cookies and analytics

This marketing site uses Cloudflare Web Analytics in cookie-less mode (to be confirmed in P-W1 SE 3). No tracking cookies are set in your browser. The TuneLoft mobile app contains no third-party tracking SDK (other than opt-in crash reporting that you can disable).

7. Contact

For any data-related question: privacy@tuneloft.tv (functional mailbox opened at V1 release).