Privacy policy
Last updated: 27 September 2026 · Applies to Hooksha IPTV on Android (com.mshahin.hooksha), Windows and LG webOS, and to this website.
1. What the app is
Hooksha IPTV is a media player for Xtream Codes compatible IPTV services. The app does not provide, host, sell or include any channels, movies, series or other content. You must already have a subscription with a provider and enter its server address, username and password yourself. All video comes directly from that provider's server; we have no relationship with, and no control over, any provider.
2. Your provider login
The server address, username and password you enter are stored only on your device (on Android in encrypted storage using the Android Keystore). They are sent only to the provider server you entered, in order to sign in and load your content. They are never sent to us.
3. Data sent to our server
A few optional features use our own servers, operated by the developer. Everything is sent over HTTPS.
| Feature | What is sent | Why |
|---|---|---|
| Sync between your devices | An anonymous ID (a one-way hash calculated from your provider login — it cannot be reversed to get your login), your favourites, “watch later” list, playback positions, favourite teams and favourites order. | So your phone, TV and PC show the same favourites and resume points. |
| Movie/series details and subtitles | The title (and season/episode) you open, and your preferred subtitle language. | To look up cast, plot and subtitles. Our server forwards the title to TMDB and OpenSubtitles; no ID or personal data is included. |
| Demo server (optional) | If you sign in with the public demo account, the app's requests go to our demo server, which only serves invented test content. | So anyone (including app reviewers) can try the app without a subscription. |
| Subscription (free trial and activation) | A random device ID created by the app (on Android the system's app-specific ID), the platform and app version, the trial start date, and — if you subscribe — your activation code and the list of device IDs using it. No name or card details. | To run the 14-day free trial, check whether the device is subscribed, and limit one subscription to 5 devices. |
| Payments (outside Google Play) | When you pay on our payment page, the card payment is handled entirely by Paymob. We receive only the order result (paid or not, amount, plan, Paymob's transaction number) — never your card number. | To issue your activation code and extend your subscription. |
| Email (optional) | Only if you type it: on the payment page (to receive your receipt and code), on the “find my code” page, or in the contact form (with your name and message). | To send your receipt and code, remind you before your subscription ends, and reply to you. Never used for marketing, never shared. |
| TV guide, match schedule, time | Nothing personal — a plain request. | To download the program guide, today's football schedule and the correct time. |
Apart from the optional email above, we do not collect your name, email, phone number, location, contacts, photos or device identifiers. The app contains no advertising, no analytics and no crash-reporting SDKs. We do not sell or share data with anyone for advertising.
4. Data that stays on your device
Watch history, the error log, parental-control PIN and all settings are stored locally and never uploaded. The error log is only shown to you inside the app.
5. Third-party services
- Your IPTV provider — receives your login and streaming requests, under its own privacy policy.
- Google Cast (Android) — if you choose to cast to a TV, Google Play services handles device discovery under Google's Privacy Policy.
- TMDB and OpenSubtitles — receive only titles, via our server.
- Paymob — processes card payments made on our payment page (outside Google Play), under Paymob's Privacy Policy.
6. Permissions (Android)
- Internet — to reach your provider and our server.
- Notifications — for match and program reminders you set yourself.
- Run at startup — to restore those reminders after the device restarts.
7. Retention and deletion
Sync data is kept only while you use sync and is linked only to the anonymous ID. Signing out removes your provider login from the device. To delete your sync data from our server, email the contact address below with the words “delete my data” — we will ask for nothing that identifies you beyond what is needed, and deletion is completed within 30 days. Subscription records (device IDs, codes, orders) are kept while the subscription is active and for up to 12 months after it ends, for support and accounting; you can ask for them to be deleted the same way. Uninstalling the app deletes all local data.
8. Children
The app is not directed to children under 13 and we do not knowingly collect data from children. Adult categories are always hidden in the app.
9. Changes
If this policy changes, the new version will be published on this page with a new “Last updated” date.