GRKN iPTV Player

Privacy Policy

Updated 6 November 2026

Who we are

GRKN iPTV Player is provided by GRKN Studios. Contact us about privacy at info@grknstudios.co.uk. This notice describes local app storage, optional server services and this product website.

Information on your device

The app stores your catalogue, source refresh addresses, playback addresses, favourites, named lists, recent viewing, settings and download metadata on your device. Catalogue and source addresses are encrypted locally; personal preferences use operating-system secure storage. Downloaded video files and cached artwork are local files and are not covered by the catalogue’s application-level encryption. Some provider URLs contain credentials; these are needed when connecting to your chosen provider.

Subscription verification

When you use the subscription-enabled version, the app sends a random installation identifier and App Store-signed purchase evidence on iOS or a Google Play purchase token on Android to our subscription verification service over HTTPS. We keep the identifier hash, store type, purchase-chain hash and encrypted purchase evidence. Evidence can include transaction IDs, product, purchase and expiry dates, offer details and, where supplied by the store, price, currency and storefront. It is used to validate purchases, restore access and determine subscription status through Apple or Google Play. Card details and Apple or Google Account passwords are not received by our service. Playlist URLs, provider credentials, viewing history and favourites are not sent to this service. A signed access certificate is stored on the device for up to 24 hours, never beyond the verified access expiry.

Subscription retention and deletion requests

Encrypted purchase records are removed by the daily cleanup after 90 days without a successful synchronization that updates the record. A successful empty store synchronization also removes the installation record. Deleting the app or cancelling a subscription does not immediately delete the server record. To request deletion, email info@grknstudios.co.uk with the subject Subscription data deletion; we will arrange verification of the relevant record before processing your request. Do not send passwords, provider credentials or private keys. Deletion does not cancel your store subscription or erase Apple’s or Google Play’s transaction records. Using purchase restore or subscription verification again can recreate a necessary record. This deployment does not create separate application-level backups of purchase-proof files.

Subscription service logs

The subscription endpoint access log records the request time, HTTP method, endpoint path, response status, response size and processing duration. It excludes IP addresses, query strings, user-agent, authorization headers and purchase evidence. Critical reverse-proxy error logs may contain technical connection information including an IP address. These dedicated logs use daily rotation with seven retained rotations and a seven-day age limit when rotation runs. Other website and hosting security logs are separate. The service sees an IP address in memory to apply a short request-rate limit; it is not used to infer location.

Connections to your sources

When you import or refresh a list, play or download a video, fetch artwork or programme data, the app connects to the relevant source servers. Those servers receive your IP address and the request, including any provider credentials required by your source. They apply their own privacy practices. HTTPS protects requests in transit; HTTP does not. Local encryption does not make HTTP traffic private.

Optional TV playback

When you open TV playback, Google Cast or Apple AirPlay discovers compatible receivers. Selecting a receiver shares the selected playback address and playback controls with that device; Google Cast also sends the content title. The address may contain provider credentials. The receiver connects to your provider using its own network connection. Your whole playlist and favourite database are not transferred. Google Cast uses Google services and may process device, connection and usage information under Google’s privacy policy (https://policies.google.com/privacy). Cast plugin diagnostic logging and iOS Cast analytics logging are disabled; this does not disable every operating-system or Google service log. TV playback is separate from encrypted favourite transfer. The bundled iOS Cast SDK 4.8.4 privacy manifest declares device identifiers, product interactions and other diagnostic data, used for analytics and/or app functionality, not linked to identity or used for tracking in that manifest. Disabling its discovery diagnostic analytics option does not establish that all SDK data collection is disabled. On Android, the Cast SDK collects app interactions, connection and session information, and device information for analytics. Google documents that these SDK data are encrypted in transit; this does not encrypt HTTP media sources. Cast is optional and is initialised when you open TV playback.

Optional device transfer

When you choose Send, the app encrypts standard favourite matching identifiers, eligible named lists, language and refresh preference with your pairing code before sending them to our server. Playlist addresses, provider credentials, list names containing links, the private folder and viewing history are not sent. Keep the code secret: anyone with it can access the transfer. A receiving device matches favourites to its own sources and merges them; deletions are not synchronised. You can delete the encrypted server record in the app. Records become eligible for removal 30 days after the last send, when the service next processes a request. Network infrastructure receives technical information such as IP addresses.

Diagnostics and support

The app records limited technical events locally, such as timestamps, operation stages, error codes and record counts. Diagnostic reports exclude source URLs, passwords and channel names. Reports are not automatically emailed to us. If you choose to share a report or contact support, we receive the information you send and your email address. Please do not include provider credentials. Your chosen mail or sharing service also handles the information.

How information is used

Local data enables the functions you request, including playback, source refresh and favourites. Support correspondence is used to answer requests and investigate problems. Where UK data protection law applies, responding to support and maintaining service security relies on our legitimate interests in operating and supporting the product, subject to your rights. We do not use the app to serve targeted advertising or make automated decisions with legal or similarly significant effects.

Storage and control

Your local catalogue remains until you remove its sources or clear the relevant app data. Downloads can be removed from Downloads; history and artwork cache can be cleared in Settings. Local diagnostics are size-limited and older entries are periodically trimmed. Operating-system backups and secure storage can have their own retention behaviour. Support correspondence is kept as needed to resolve the request and handle related follow-up or legal obligations; contact us to request deletion. We cannot remotely inspect or erase your local catalogue.

This website and other services

These product pages use locally hosted images and styles and do not add analytics, advertising scripts or tracking cookies. The hosting infrastructure may process technical request information, such as IP addresses, for delivery and security. Email, hosting and the source services you choose may operate in other countries; their own processing and transfer arrangements apply. Links to external websites open services with their own privacy notices.

Your rights and contact

Depending on applicable law, you may request access, correction, deletion, restriction or portability of personal information we hold. You may object to processing based on legitimate interests. Contact info@grknstudios.co.uk. You may also complain to the UK Information Commissioner at ico.org.uk or your relevant local authority. Information stored only on your device must be managed through the app or device settings.

Changes

We will update this page when the app’s data practices change. The date above identifies the current notice.

Seven-day app access (version 1.0.1 onwards)

The app provides seven days of full access from the first successful store verification, without a subscription purchase. We verify Apple signed app-transaction data, or a hash of the Android app-scoped device identifier together with a Google Play Integrity token. Google receives the integrity token for verification. The trial service does not retain the raw Apple proof or integrity token. It keeps a keyed hash identifying the trial and its start and end times, with restricted file access. This minimal anti-repeat record is separate from purchase evidence and is not deleted by the 90-day purchase-cache cleanup; it is retained while this trial programme operates to prevent reinstalling from granting another trial. To request access or deletion, contact info@grknstudios.co.uk with the subject Trial data request. We verify record ownership before processing requests. App deletion does not automatically remove this record. The trial never charges you automatically. If you choose to subscribe, the store charges the displayed annual price when you confirm, and renews annually unless cancelled. Existing store subscriptions and introductory trials retain their verified rights.