MyKroko

Privacy Policy

Last updated: February 18, 2026

MATHDEV ("we", "us", "our") operates the IPTV App application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Service.

1. Data Controller

The data controller is MATHDEV, a micro-enterprise registered in France. Address: 59, rue de Ponthieu, Bureau 326, 75008, Paris, France Email: contact@mykroko.com SIRET: 949 785 349 00018

2. Data We Collect

2.1 Account Information

  • Email address
  • Password (stored as a cryptographic hash, never in plain text)
  • Account creation date and last login date

2.2 Profile Information

  • Profile name and color preference
  • Language preferences

2.3 Device Information

  • Device identifier, name, type (Apple TV, Android TV, Mobile, Web)
  • Device model, OS version, app version

2.4 Usage Data

  • Watch history and progress (content watched, duration, position)
  • Watchlist items
  • Real-time viewer tracking for channel viewing sessions (stored in Redis with a 5-minute TTL)

2.5 Subscription Information

  • Subscription status, expiry date, product ID
  • Store platform (iOS, Android, Web/Stripe)
  • Transaction identifiers
  • Stripe customer ID (for web subscriptions)

3. Data We Do NOT Collect

  • We do not use push notifications or advertising identifiers (IDFA/GAID)
  • We do not use advertising tracking or behavioral targeting
  • We do not use cookies (the mobile app uses MMKV local storage)
  • We do not collect location data, contacts, or camera/microphone data (beyond the video player)

4. How We Use Your Data

  • To provide and maintain the Service (account management, content delivery)
  • To manage your subscription and process payments
  • To personalize your experience (profiles, watch history, watchlist)
  • To improve the Service (analytics, error tracking)
  • To communicate with you (account-related emails only)

5. Legal Basis for Processing (GDPR)

  • Contract performance: Processing necessary to provide the Service you subscribed to (account, profiles, content delivery, subscriptions)
  • Legitimate interest: Analytics and error tracking to improve the Service
  • Consent: Where required by applicable law

6. Third-Party Services

6.1 Analytics

We use PostHog for product analytics, hosted in the EU (eu.i.posthog.com). PostHog collects screen views, user interactions, and anonymized user properties to help us improve the Service.

6.2 Error Tracking

We use Sentry for error tracking, hosted in the EU (de.sentry.io). Sentry collects error reports, user context, and session data to help us fix bugs and improve stability.

6.3 Authentication

  • Apple Sign-In: OAuth authentication and receipt validation for in-app purchases
  • Google Sign-In: OAuth authentication and receipt validation for in-app purchases

6.4 Payments

  • Apple In-App Purchase: For iOS and tvOS subscriptions
  • Google Play Billing: For Android TV subscriptions
  • Stripe: For web and TV (device code) subscriptions. Stripe manages customer IDs and payment processing.

6.5 Email

We use Azure Communication Services for sending transactional emails (account confirmation, password reset).

7. Data Storage and Security

Your data is stored on secure servers hosted by OVHcloud in France. We use encryption in transit (TLS) and implement industry-standard security measures to protect your data.

Real-time viewer tracking data is stored in Redis with a short time-to-live (5 minutes) and is automatically deleted after expiry.

8. Data Retention

We retain your personal data for as long as your account is active. When you delete your account, all associated data (profiles, watch history, watchlist, device information) is permanently deleted.

9. Your Rights (GDPR)

As a user, you have the following rights:

  • Right of access: Request a copy of your personal data
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your data
  • Right to data portability: Request your data in a machine-readable format
  • Right to restrict processing: Request limitation of data processing
  • Right to object: Object to processing based on legitimate interest

To exercise any of these rights, please contact us at contact@mykroko.com.

10. International Data Transfers

Your data is primarily stored and processed within the European Union. Where third-party services process data outside the EU (e.g., Apple, Google), they do so under appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

11. Children's Privacy

Our Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

For any questions about this Privacy Policy, please contact us at: Email: contact@mykroko.com Address: 59, rue de Ponthieu, Bureau 326, 75008, Paris, France