TV España

Privacy Policy

Last updated: 2026-08-12

This policy describes how TV España (hereafter "the app") collects, uses and shares personal data. It complies with Regulation (EU) 2016/679 (GDPR), Spain's LSSI-CE, the California CCPA, and the requirements of Google Play Console and App Store Connect. It applies to the Android and iOS/tvOS apps; where a processing activity is platform-specific, this is stated.

Data controller: Insodia LLC, 530B Harkle Road, Suite 100, Santa Fe, NM 87505, USA.
General contact: [email protected].
Data protection matters: [email protected].

1. What we collect and why

This is ALL the data the app processes directly:

1.1 Device data (all users)

  • Anonymous device identifier (a UUID generated locally — not the Android ID, the IMEI or the advertising identifier).
  • Model, manufacturer, operating system version (Android or iOS), app version.
  • FCM token (Firebase Cloud Messaging), used to send push notifications for programme reminders.
  • Firebase installation identifier (assigned automatically by the SDK).

GDPR legal basis: legitimate interest (Art. 6(1)(f)) — operating and securing the service.

1.2 Account data (only if you sign in)

  • Email and name, depending on the method you use: Google (Android and iOS), Facebook (Android), Sign in with Apple (iOS/tvOS — you may use Apple's option to hide your real email), or email and password registration (Android and iOS).
  • Password, only if you register with an email address: we do not store it ourselves; it is handled by Firebase Auth.
  • Firebase Auth UID.

Legal basis: performance of a contract (Art. 6(1)(b)) — linking your premium subscription and your synced data to your account.

1.3 Premium subscription data (only if you purchase)

  • SHA-256 hash of the Google Play purchase token or of the App Store transaction identifier (we never store the original value in plain text).
  • Expiry date, product ID, auto-renewal status.

Legal basis: performance of a contract — managing your subscription.

1.4 Usage data and synced content

  • In-app usage events (which screens you visit, which channels you open), collected by Firebase Analytics.
  • Crash reports (Crashlytics).
  • Favourites and watch history: stored on your device and, if you are signed in with a real account, synced to Firestore so they are kept across your devices. Premium is not required. In an anonymous session nothing leaves the device.
  • Custom IPTV lists: their metadata is synced on Android only, and only with Premium; on iOS they are always local to the device.

Legal basis: consent (Art. 6(1)(a)) for analytics, which you can disable in Settings; performance of a contract (Art. 6(1)(b)) for the content you sync by signing in.

1.5 Advertising data

  • Advertising ID from Google Play Services on Android (you can reset or limit it in your device settings).
  • IDFA on iOS, only if you grant tracking permission (App Tracking Transparency). If you decline, ads are served without an identifier and campaign attribution uses Apple's SKAdNetwork, which does not identify you individually.
  • App Set ID (Android), truncated IP address, ad impression/click data.
  • Signals about apps installed or present on the device, where the advertising SDKs process them for personalisation, measurement, fraud prevention and security.

Legal basis: consent (Art. 6(1)(a)) — requested through the UMP (User Messaging Platform) form the first time you open the app. You can withdraw consent at any time from Settings → Privacy options.

2. Who we share data with

We work with the following processors. Each has its own privacy policy:

2.1 Technical infrastructure

  • Google LLC (Firebase: Auth, Firestore, Storage, Cloud Functions, Cloud Messaging, Crashlytics, Analytics, Remote Config) — Policy.
  • Google Play (Billing, Subscriptions, RTDN — Android) — Terms.
  • Apple Inc. (App Store, StoreKit purchases and App Store Server Notifications — iOS/tvOS) — Policy.

2.2 Authentication

  • Google LLC (Google Sign-In — Android and iOS) — Policy.
  • Meta Platforms Inc. (Facebook Login — Android) — Policy.
  • Apple Inc. (Sign in with Apple — iOS/tvOS) — Policy.

2.3 Advertising partners (AdMob mediation)

Only if you give advertising consent:

2.4 Web (only if you visit tvespana.app)

  • Google Analytics and Microsoft Clarity — loaded only if you accept the cookie banner.

We do not sell your data to third parties. The sharing described above is operational (service delivery, advertising monetisation).

3. International transfers

Most processors (Google, Meta) store data in the United States. Those transfers rely on:

  • EU-U.S. Data Privacy Framework (EU adequacy decision of 10/07/2023) for Google, Apple and Meta.
  • EU Standard Contractual Clauses (SCCs) (Decision 2021/914) for the remaining processors (InMobi, AppLovin, Unity, ironSource).

4. Data retention

  • users/{uid}: for as long as your account exists.
  • devices/*: for as long as they are linked to your account.
  • Operational logs (without personal identifiers): 30 days.
  • Aggregated analytics: up to 14 months (Firebase default setting).
  • Crash reports: 90 days.

5. Your GDPR rights

  • Access (Art. 15): request a copy of your data at [email protected].
  • Rectification (Art. 16): contact support to correct inaccurate data.
  • Erasure / right to be forgotten (Art. 17): delete your account in Settings → Delete account (recommended), or at tvespana.app/delete-account. This deletes users/{uid} together with its synced data, every device linked to your account, the local data on the device and the sign-in credential itself (on iOS the Sign in with Apple authorisation is also revoked). Deletion is permanent: to use the app with an account again you will have to register from scratch.
  • Portability (Art. 20): request your data in JSON format at [email protected].
  • Objection (Art. 21): you may object to processing based on legitimate interest.
  • Withdrawal of consent (Art. 7(3)): personalised advertising and analytics can be disabled from Settings → Privacy options.
  • Complaint to a supervisory authority: the Spanish Data Protection Agency (aepd.es) or the authority of your country of residence in the EU.

We respond to GDPR rights requests within a maximum of 30 days.

6. CCPA rights (California residents)

We do not sell personal information within the meaning of the CCPA. Data shared with advertising partners to serve personalised ads is governed by Meta's "Limited Data Use" and the equivalent Google AdMob opt-outs, which we enable automatically if you decline personalised advertising.

To exercise CCPA rights (Right to Know / Right to Delete / Do Not Sell My Personal Information), write to [email protected] with the subject "CCPA Request".

7. Children

The app is not directed at children under 13 (16 in the EU). Although the catalogue may include free-to-air children's channels (Clan, Boing, etc.), we recommend that the app be used by adults or under supervision. The app includes an optional PIN-based parental control. If we discover that we have processed a child's data without verifiable parental consent, we will delete it immediately.

8. Security

  • Encryption in transit: TLS 1.2+ for all calls to Firebase and AdMob.
  • Parental control PIN: never stored in plain text. It is derived with PBKDF2-HMAC-SHA256 and a random salt on both Android and iOS (on iOS the result is held in the Keychain).
  • Purchase tokens: we store only the SHA-256 hash, never the original value.
  • Backend access: restricted to Cloud Functions using the Admin SDK; Firestore rules are deny-all by default.

9. Changes to this policy

We will publish any material change on this page and, where reasonable, notify it inside the app via Firebase Remote Config. The "Last updated" date at the top of this document reflects the version in force.

10. Contact