NuxaPrivacy statement
Last updated: 4 November 2026
The short version
NuxaTV stores as little as possible. Everything you add to the app (playlists, accounts, favourites, settings) stays in the app's private storage on your device. We do not show ads, do not track you across apps or websites and do not sell or share any personal data.
Who we are
NuxaTV is developed by AC Engineering (Netherlands). Questions about privacy: Amine.chourti@acengineering.nl.
What we process, and why
- Without an account: nothing leaves your device. Playlist URLs, stream credentials and viewing data are stored locally only.
- Account (optional): your email address and password hash, used solely to sign you in and sync your profile — legal basis: performance of the agreement (Art. 6(1)(b) GDPR).
- Sync data (Pro): your profile configuration (sources, favourites, settings) is stored encrypted in our EU-based cloud so it can follow you to your devices.
- Device sign-in: when you sign in on a TV with a QR code, the TV name and a one-time code are processed to complete that sign-in. Codes expire after a few minutes.
- Purchases: Google Play processes your payment. We only receive the confirmation that Pro is active on your account — never your card details.
- Server logs: our hosting provider briefly logs technical request data (IP address, timestamp) for security and reliability purposes.
What we never do
- No ads and no advertising trackers in the app or on this website.
- No selling, renting or sharing of personal data with third parties.
- No analysis of what you watch. Viewing progress is stored for you, not for us.
Where your data lives
Cloud data is stored in the European Union (Supabase, eu-west-1) and served via Cloudflare's European network. No data is transferred outside the EEA without adequate safeguards.
Retention
- Local app data: as long as you keep the app installed; you can delete it anytime in the app.
- Account and sync data: until you delete your account; then permanently within 30 days.
- Login sessions and one-time codes: a few minutes.
- Audit log entries (security events): maximum 12 months, anonymised afterwards.
Your rights
You have the right to access, correct, export and delete your personal data, and to object to or limit processing. Because we store so little, most of this is self-service: your account page shows your data and deletes your account completely. For anything else, email us — we respond within 30 days.
Security
All traffic is HTTPS/TLS. Passwords are stored as salted hashes, never in plain text. Backups that contain account data are always encrypted. Row-level security ensures that every request only ever sees your own data.
Children
NuxaTV is not intended for children under 16 without supervision. We do not knowingly collect data from children; a parental PIN feature exists for families using the app together.
Changes
If this statement changes materially, we announce it in the app and on this page with a new date.