Privacy policy
1. Data controller
Clarity is published by FOCUS TESTING LTD, a private limited company registered in England and Wales under number 15429929, whose registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom ("we", "us").
Contact for any privacy question: focus.target.app@gmail.com.
2. What we never see
We never receive, in readable form: your playlist links, servers, usernames and passwords, the channels, films and series you watch, your favourites, history, resume points, profiles or settings. Clarity does not sell personal data and does not share it with data brokers.
3. Data stored on your device
To work, Clarity stores the following on your device only:
- the sources you add (M3U links, Xtream Codes servers and usernames) and the catalogues they provide (channels, films, series, programme guide);
- passwords, stored in your device's secure storage (Android Keystore or Apple Keychain), never in the app database;
- your profiles, favourites, viewing history, resume points, reminders and downloads;
- your settings, including the parental control PIN, stored as a salted hash.
This data is erased when you uninstall the app or clear its data.
4. Your sources and providers
Clarity connects directly from your device to the servers of the sources you add (your IPTV provider, programme guide servers, image servers). These third parties receive your IP address and the requests needed to play content. They act under their own responsibility and their own privacy policies; we have no control over them and receive no data from them.
5. Sync between devices (optional)
If you create a Clarity account, a secret key is generated on your device and shown as a recovery key. No email, name or phone number is requested.
- Your sources (including credentials), profiles, settings and deleted sources are compressed and then encrypted on your device (AES-256-GCM) with a key derived from this secret. We never receive this key.
- Our server stores only: a random account identifier, a hash of an access token, the encrypted data block, a version number and the date of the last update.
- Retention: until you delete your account from the app. Deletion is immediate and permanent. See how to delete your account.
- Legal basis: performance of the service you request (Article 6(1)(b) UK GDPR / GDPR).
- Anyone who holds your recovery key can access your synced data. Keep it private. We cannot recover it for you.
6. Setting up a TV from your phone
When you set up a TV by scanning its QR code, the message sent by your phone is encrypted for that TV only. It passes through our server in unreadable form and is deleted as soon as the TV reads it, and at the latest after 10 minutes.
On the same Wi-Fi network, the TV can also receive your configuration directly over your local network, without going through our server.
7. Technical data
To protect the sync service against abuse, each installation that uses it receives an anonymous random identifier (Firebase Authentication, Google). Like any server, our host may record technical logs (IP address, date, function called), kept for up to 30 days. These logs never contain your synced data, which is encrypted.
Hosting: Google Cloud / Firebase, in the European Union (Belgium and the Europe multi-region). Legal basis: our legitimate interest in securing the service (Article 6(1)(f)).
8. Advertising (Google AdMob)
The free version shows ads on phones and tablets, before playback and at most once every 3 minutes. There are no ads on Android TV or for Clarity Premium subscribers.
- Ads are provided by Google AdMob (Google LLC / Google Ireland Limited). Google may collect your device's advertising identifier, IP address, device information and ad interactions to show, measure and personalise ads and to prevent fraud.
- In the UK, the European Economic Area and Switzerland, your consent is requested first through Google's consent form. Without consent, only non-personalised ads (or no ads) are shown. You can change your choice at any time in the app settings (Paramètres › À propos › Confidentialité des publicités).
- You can also reset or delete your advertising ID in your device settings.
- Legal basis: your consent for personalised ads; our legitimate interest in funding the free version for non-personalised ads.
- See how Google uses data from partner apps.
9. Purchases (RevenueCat)
Clarity Premium is purchased through Google Play or the App Store. RevenueCat, Inc. manages subscription status with an anonymous identifier (linked to your Clarity account identifier if you have one), together with your purchase history sent by the store (product, date, price, renewal status). We never see your name, email or payment details.
Legal basis: performance of the contract. Retention: as long as needed to provide Premium and meet our accounting obligations. See the RevenueCat privacy policy.
10. Usage statistics (Microsoft Clarity)
Only if you agree (the option is off by default), and never on Android TV, Microsoft Clarity records how you navigate in the app (screens viewed, taps, scrolls, session replays and heatmaps), with technical information about your device. It helps us find where the app is confusing.
- Fields showing links, servers, usernames, passwords and PIN codes are masked and never recorded. Screen names never include the identifiers of what you watch. Video is not captured.
- You can withdraw your consent at any time in the app settings (Paramètres › À propos › Statistiques d'utilisation).
- Legal basis: your consent (Article 6(1)(a)).
- See the Microsoft privacy statement.
11. Device permissions
| Permission | Why |
|---|---|
| Internet and network state | Play your sources, sync, ads. |
| Camera | Only to scan a TV's QR code. Images are processed on the device and never stored or sent. |
| Local network, Wi-Fi multicast | Find Chromecast and smart TVs, and send your setup to a TV on the same network. |
| Notifications | Programme reminders, new episodes of series in your list, download progress. |
| Run at startup | Restore your scheduled programme reminders after the device restarts. |
You can withdraw any permission in your device settings; only the related feature will stop working.
12. Summary table
| Data | Where | Shared with | Retention |
|---|---|---|---|
| Sources, credentials, history, settings | Your device | Nobody | Until uninstall |
| Encrypted sync data (optional) | Firebase, EU | Google (host), unreadable | Until you delete the account |
| TV setup message | Firebase, EU | Google (host), unreadable | Read once, 10 min max |
| Anonymous ID, server logs | Firebase, EU | Up to 30 days (logs) | |
| Advertising ID, ad data | Google AdMob | Google and its ad partners (with consent) | Per Google's policy |
| Purchase status | RevenueCat | RevenueCat, Google Play / App Store | While needed, plus legal obligations |
| Usage recordings (opt-in) | Microsoft Clarity | Microsoft | Per Microsoft's policy (recordings about 30 days) |
13. International transfers
Google, Microsoft and RevenueCat may process data outside the UK and the European Economic Area, in particular in the United States. These transfers rely on the EU-US Data Privacy Framework and its UK extension, or on standard contractual clauses (and the UK addendum).
14. Your rights
Under the UK GDPR and the EU GDPR, you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time.
Because we do not know who you are, the simplest way to exercise these rights is the app itself: deleting your account erases your data from our server, and uninstalling the app erases the data on your device. For anything else, write to focus.target.app@gmail.com; we answer within one month.
You can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority of the EU country where you live (in France, the CNIL).
15. Children
Clarity is not intended for children under 15. A PIN-protected parental control is available in the settings.
16. Security
Synced data is encrypted end to end; passwords are kept in the device's secure storage; our database refuses any direct access and is reachable only through our server functions, which never see your encryption key. No system is perfectly secure, but we design Clarity so that a breach of our server would not reveal your data.
17. Changes
We may update this policy when the app changes. Any material change will be shown in the app, and the date at the top of this page shows the latest version.