Privacy policy
1. Data controller
Clarity Player is published by FOCUS TESTING LTD, a private limited company registered in England and Wales under number 15429929, whose registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom ("we", "us").
Contact for any privacy question: focus.target.app@gmail.com.
2. What we never see
We never receive, in readable form: your playlist links, servers, usernames and passwords, the channels, films and series you watch, your favourites, history, resume points, profiles or settings. Clarity Player does not sell personal data and does not share it with data brokers.
3. Data stored on your device
To work, Clarity Player stores the following on your device only:
- the sources you add (M3U links, Xtream Codes servers and usernames) and the catalogues they provide (channels, films, series, programme guide);
- passwords, stored in your device's secure storage (Android Keystore or Apple Keychain), never in the app database;
- your profiles, favourites, viewing history, resume points, reminders and downloads;
- your settings, including the parental control PIN, stored as a salted hash.
This data is erased when you uninstall the app or clear its data.
4. Your sources and providers
Clarity Player connects directly from your device to the servers of the sources you add (your IPTV provider, programme guide servers, image servers). These third parties receive your IP address and the requests needed to play content. They act under their own responsibility and their own privacy policies; we have no control over them and receive no data from them.
5. Sync between devices (optional)
If you create a Clarity Player account, a secret key is generated on your device and shown as a recovery key. No email, name or phone number is requested.
- Your sources (including credentials), profiles, settings and deleted sources are compressed and then encrypted on your device (AES-256-GCM) with a key derived from this secret. We never receive this key.
- Our server stores only: a random account identifier, a hash of an access token, the encrypted data block, a version number and the date of the last update.
- Retention: until you delete your account from the app (deletion is immediate and permanent), or until we close the account under section 11 of the terms of use. See how to delete your account.
- Legal basis: performance of the service you request (Article 6(1)(b) UK GDPR / GDPR).
- Anyone who holds your recovery key can access your synced data. Keep it private. We cannot recover it for you.
6. Setting up a TV from your phone
When you set up a TV by scanning its QR code, the message sent by your phone is encrypted for that TV only. It passes through our server in unreadable form and is deleted as soon as the TV reads it, and at the latest after 10 minutes.
On the same Wi-Fi network, the TV can also receive your configuration directly over your local network, without going through our server.
7. Technical data
To protect the sync service against abuse, each installation that uses it receives an anonymous random identifier (Firebase Authentication, Google). Like any server, our host may record technical logs (IP address, date, function called), kept for up to 30 days. These logs never contain your synced data, which is encrypted.
Hosting: Google Cloud / Firebase, in the European Union (Belgium and the Europe multi-region). Legal basis: our legitimate interest in securing the service (Article 6(1)(f)).
8. Advertising (Google AdMob) and ad campaign measurement
After the first 7 days, the free version shows ads on phones and tablets, before playback and at most once every 3 minutes. There are no ads on Android TV, for Clarity Player Premium subscribers or for users identified as under 18 (see section 15).
- Ads are provided by Google AdMob (Google LLC / Google Ireland Limited). Google may collect your device's advertising identifier, IP address, device information and ad interactions to show, measure and personalise ads and to prevent fraud.
- In the UK, the European Economic Area and Switzerland, your consent is requested first through Google's consent form. Without consent, only non-personalised ads (or no ads) are shown. You can change your choice at any time in the app settings (Settings › About › Ad privacy).
- You can also reset or delete your advertising ID in your device settings.
- Legal basis: your consent for personalised ads; our legitimate interest in funding the free version for non-personalised ads.
- See how Google uses data from partner apps.
Measuring our own ad campaigns
We advertise Clarity Player. To know whether our own ads work, the app uses Google Analytics for Firebase, linked to Google Ads (Google LLC / Google Ireland Limited).
- The app tells Google that it was installed, when it is opened and for how long it is used, that a source was added (never which one) and that a subscription or a free trial was started (plan, price and currency), together with an app instance identifier, your device's advertising identifier and technical information about your device (model, system version, language, country).
- It never sends your sources, links, credentials, or what you watch.
- In the UK, the European Economic Area and Switzerland, this is done only with the consent you give in Google's consent form (Settings › About › Ad privacy); that form is not available on Android TV, so nothing is measured on a TV in those countries. Everywhere, you can turn it off in Settings › About › Ad campaign measurement.
- For users identified as under 18, these events are never used to personalise advertising (see section 15).
- Legal basis: your consent where the consent form applies; elsewhere, our legitimate interest in measuring our advertising, which you can object to with the setting above. Retention: event data is kept by Google Analytics for up to 14 months.
9. Purchases (RevenueCat)
Clarity Player Premium is purchased through Google Play or the App Store. RevenueCat, Inc. manages subscription status with an anonymous identifier (linked to your Clarity Player account identifier if you have one), together with your purchase history sent by the store (product, date, price, renewal status). We never see your name, email or payment details.
Legal basis: performance of the contract. Retention: as long as needed to provide Premium and meet our accounting obligations. See the RevenueCat privacy policy.
10. Usage statistics (Microsoft Clarity)
Only if you agree (the option is off by default), and never on Android TV, Microsoft Clarity records how you navigate in the app (screens viewed, taps, scrolls, session replays and heatmaps), with technical information about your device. It helps us find where the app is confusing.
- Fields showing links, servers, usernames, passwords and PIN codes are masked and never recorded. Screen names never include the identifiers of what you watch. Video is not captured.
- You can withdraw your consent at any time in the app settings (Settings › About › Usage statistics).
- Legal basis: your consent (Article 6(1)(a)).
- See the Microsoft privacy statement.
11. Device permissions
| Permission | Why |
|---|---|
| Internet and network state | Play your sources, sync, ads. |
| Camera | Only to scan a TV's QR code. Images are processed on the device and never stored or sent. |
| Local network, Wi-Fi multicast | Find Chromecast and smart TVs, and send your setup to a TV on the same network. |
| Notifications | Programme reminders, new episodes of series in your list, download progress. |
| Run at startup | Restore your scheduled programme reminders after the device restarts. |
You can withdraw any permission in your device settings; only the related feature will stop working.
12. Summary table
| Data | Where | Shared with | Retention |
|---|---|---|---|
| Sources, credentials, history, settings | Your device | Nobody | Until uninstall |
| Whether the store reports a user under 18 (Android, where Google provides it) | Your device | Nobody | Until uninstall |
| Encrypted sync data (optional) | Firebase, EU | Google (host), unreadable | Until you delete the account |
| TV setup message | Firebase, EU | Google (host), unreadable | Read once, 10 min max |
| Anonymous ID, server logs | Firebase, EU | Up to 30 days (logs) | |
| Advertising ID, ad data | Google AdMob | Google and its ad partners (with consent) | Per Google's policy |
| Ad campaign measurement events (install, use, source added, subscription or trial started), advertising ID | Google Analytics for Firebase, Google Ads | Google (with consent where required) | Up to 14 months |
| Purchase status | RevenueCat | RevenueCat, Google Play / App Store | While needed, plus legal obligations |
| Usage recordings (opt-in) | Microsoft Clarity | Microsoft | Per Microsoft's policy (recordings about 30 days) |
13. International transfers
Google, Microsoft and RevenueCat may process data outside the UK and the European Economic Area, in particular in the United States. These transfers rely on the EU-US Data Privacy Framework and its UK extension, or on standard contractual clauses (and the UK addendum).
14. Your rights
Under the UK GDPR and the EU GDPR, you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time.
Because we do not know who you are, the simplest way to exercise these rights is the app itself: deleting your account erases your data from our server, and uninstalling the app erases the data on your device. For anything else, write to focus.target.app@gmail.com; we answer within one month.
You can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority of the EU country where you live.
15. Children and users under 18
Clarity Player is not directed at children under 13, and anyone under 18 should use it with the agreement of a parent or legal guardian. A PIN-protected parental control is available in the settings.
On Android, the app asks Google Play for the age range of the Google account in use (Play Age Signals). Google provides it only where the law requires it, for example in Brazil and in some states of the United States. When it shows that the user is under 18, adult content is hidden, no ads are shown, usage statistics stay off and ad campaign measurement is never used to personalise advertising. The age range is used for nothing else: it stays on your device and is never sent to our server, to advertisers or to analytics providers.
16. Additional information for Brazil and Mexico
This section adds to the rest of this policy if you live in Brazil or in Mexico. The data controller and its contact details are given in section 1; the data, the purposes and the recipients are described in sections 2 to 10.
Brazil
- Legal bases. Under the Lei Geral de Proteção de Dados (LGPD, Law No. 13,709/2018), we rely on: the performance of the service you request, for syncing, setting up a TV and purchases (Article 7, V); our legitimate interest, for securing the service, displaying ads in the free version and measuring our ad campaigns (Article 7, IX); and your consent, for usage statistics (Article 7, I), which you can withdraw at any time in Settings › About. You can turn off ad campaign measurement in Settings › About, and limit personalised ads by resetting or deleting the advertising identifier in your device settings.
- Your rights. Article 18 of the LGPD gives you the right to obtain confirmation that we process your data, to access it, to have it corrected, to have unnecessary or excessive data anonymised, blocked or deleted, to data portability, to the deletion of data processed with your consent, to information about whom we share data with and about the consequences of refusing consent, and to withdraw your consent. Write to focus.target.app@gmail.com, which is also the contact of our data protection officer (encarregado); we reply within 15 days. You can also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD, gov.br/anpd).
- International transfers and minors. Our server is in the European Union and the providers named in sections 8 to 10 may process data in the United States. These transfers are necessary to provide the service you request, or rely on your consent or on the contractual safeguards offered by these providers (Article 33 of the LGPD). In line with the Digital Statute of Children and Adolescents (Law No. 15,211/2025), we do not profile users identified as under 18 and show them no ads (see section 15).
Mexico
- Privacy notice. For the purposes of the Ley Federal de Protección de Datos Personales en Posesión de los Particulares, this policy is our comprehensive privacy notice (aviso de privacidad integral) and the controller (responsable) is the company named in section 1, at the address given there. We process no sensitive personal data. The data processed is: the random identifiers and technical logs described in sections 5 to 7, and the data handled by the providers named in sections 8 to 10 (advertising identifier, purchase history, ad campaign measurement events, and usage recordings if you agree).
- Purposes. Primary purposes, necessary for the service: syncing your devices, setting up a TV, managing purchases and securing the service. Secondary purposes, which are not necessary: personalised advertising, ad campaign measurement and usage statistics. You can refuse or stop them at any time without losing access to the app: usage statistics stay off unless you turn them on in Settings › About, ad campaign measurement can be turned off there, and personalised advertising can be limited by resetting or deleting the advertising identifier in your device settings.
- ARCO rights. You can exercise your rights of access, rectification, cancellation and opposition (ARCO), revoke your consent, or limit the use or disclosure of your data by writing to focus.target.app@gmail.com and describing your request. We reply within 20 business days and, where the request is justified, act on it within the following 15 business days. Since we do not know your identity, deleting your account in the app remains the quickest way to erase your data. If you are not satisfied, you can turn to the Secretaría Anticorrupción y Buen Gobierno.
- Transfers and changes. The providers named in sections 8 to 10 may process data outside Mexico, as described in section 13; where your consent is required for these transfers, using the app after accepting this policy expresses it. Changes to this notice are announced as described in section 18.
17. Security
Synced data is encrypted end to end; passwords are kept in the device's secure storage; our database refuses any direct access and is reachable only through our server functions, which never see your encryption key. No system is perfectly secure, but we design Clarity Player so that a breach of our server would not reveal your data.
18. Changes
We may update this policy when the app changes. Any material change will be shown in the app, and the date at the top of this page shows the latest version.