Privacy Policy

Summary

Aurora IPTV is a media player only. It does not provide channels, playlists, IPTV subscriptions, movies, series, streams, or other media content. You add your own lawful sources (for example Xtream Codes, M3U URL, or M3U file) and Aurora plays what those sources return.

By default, provider credentials and most customisations stay on your device. Optional features — Aurora Extra cloud sync, Trakt, SIMKL, TMDB metadata, voluntary crash or diagnostic uploads, and APK downloads from this website — may involve Aurora's servers or third parties as described below.

Local provider connections

When you add a provider or playlist, Aurora stores the connection details on your device so the app can reach your server or source. Supported types include Xtream Codes (URL, username, password), M3U by URL, M3U from file, and optional XMLTV EPG URLs and catch-up offset settings.

Your provider server addresses, usernames, and passwords are never uploaded to Aurora's servers, even when Aurora Extra sync is enabled. They stay on your device.

On Android, connections are stored in encrypted preferences where the OS supports it. If Android Keystore is unavailable or broken on a device, the app may fall back to ordinary SharedPreferences, which is less protected.

User-supplied provider or playlist URLs may use HTTPas well as HTTPS, because the app allows cleartext for sources you configure. Requests to Aurora's own site, TMDB, Trakt, and SIMKL are restricted to HTTPS in the app's network security configuration.

Aurora Extra (optional account & sync)

Aurora Extra is an optional feature. If you create an Aurora account and sign in, Aurora stores your email address and password to manage your account, and registers your device (name, type, platform, and app version) so we can sync across your devices and apply device limits.

When sync is on, Aurora uploads profile names and avatar URLs, source display names and source type, channel names and logos, sort order, category names, EPG channel-to-programme mappings, and logo assets. Your provider server addresses, usernames, and passwords are never uploaded — they stay on your device.

You can use Aurora fully without an Aurora Extra account. Aurora Extra is currently free during a limited test period, and a paid subscription is planned for later.

Device registration and account data

When you use Aurora Extra, each Android device can register with a name, type (for example TV or phone), platform, and app version. Accounts are limited to 6 signed-in devices per user. We use this to enforce limits, show your device list in the dashboard, and operate sync.

Trakt and SIMKL

If you connect Trakt or SIMKL, the app uses the standard OAuth or device sign-in flows for those services. Access tokens and usernames are stored on your device. They may also be included in encrypted backup files you create if you select the scrobbling bucket when exporting a backup.

Trakt token exchange and refresh are sent through an Aurora proxy that holds the service secret at /api/trakt/token and /api/trakt/refresh before requests continue to Trakt. Aurora sees the token request during that exchange; we do not use it for advertising.

Watch history, progress, and scrobbling requests are sent to Trakt or SIMKL according to your settings. Those services have their own privacy policies. Aurora cannot delete data held only on Trakt or SIMKL.

The Movie Database (TMDB)

To show posters, descriptions, and artwork, Aurora sends title and search queries to TMDB. TMDB receives those queries and returns catalogue metadata. Aurora does not send your IPTV provider credentials to TMDB. See TMDB's privacy policy.

Diagnostics and crash reports

Crash reports

If Aurora closes unexpectedly, basic diagnostic information is sent automatically on app startup to /api/crash on auroraiptv.app to help us fix bugs. This includes app version, Android version, device manufacturer and model, thread name, and a technical stack trace. It does not include your account details or provider passwords.

Voluntary diagnostic reports

You can also choose to send a fuller diagnostic report from within the app. Manual reports are submitted to /api/diagnostics only when you choose to send them.

Notifications, reminders, and alarms

Aurora may request Android permissions needed for programme reminders and playback, including posting notifications, scheduling exact alarms, receiving boot completed (so reminders can reschedule), wake lock, and foreground service / media playback. Reminder data is stored locally on your device unless you use Aurora Extra sync (which can sync related organisation data you choose to upload).

Backup and restore exports

You can export encrypted .auroraiptv backup files under your control. Depending on the buckets you select, backups may include settings, provider accounts and credentials, favourites, hidden items, ordering, watch progress, reminders, EPG assignments, Trakt/SIMKL tokens, and TMDB match cache. Backups use a passphrase you choose; Aurora cannot recover a lost passphrase. Backup files are not uploaded to Aurora unless you send them elsewhere yourself.

Android and OS backup

The app manifest allows Android backup (allowBackup=true) with data extraction rules that exclude encrypted preferences and several caches from cloud backup and device transfer. Even so, uninstall behaviour and manufacturer backup tools vary; treat OS-level backup as outside Aurora's direct control.

Other app permissions and features

Aurora may use internet access, discovery of external video players, picture-in-picture, and related playback features. These are used to connect to sources you configure and to play media on your device or through a player you select.

Google Fonts

The app may download typefaces from Google Fonts at runtime. Those requests go to Google's servers and may include technical data such as your IP address. See Google's privacy policy.

APK downloads from this website

When you download an APK from auroraiptv.app, our servers may log a technical line for release adoption and abuse awareness (timestamp, filename, and client IP as seen by the site). We do not use these logs to link downloads to playlists or provider accounts or to sell the data.

Deleting your data

• On your device: Settings → About → Delete All Aurora Data, or uninstall the app (exact behaviour may depend on Android backup settings).
• Trakt / SIMKL: disconnect in the app and on trakt.tv/settings/connections and simkl.com/settings/account. Aurora cannot delete data held only by those services.
• Aurora Extra / cloud sync: request account and synced data deletion by emailing support@auroraiptv.app and include the sign-in email tied to your Aurora account.
• Crash or diagnostic reports already sent: deleting local app data does not remove server copies. Request deletion by emailing support@auroraiptv.app with the report id or diagnostic reference code shown in the app.

Step-by-step instructions are on our account and data deletion page.

Children

Aurora is not directed at children under 13, and we do not knowingly collect personal information from children for marketing. Parental guidance applies to content accessed through third-party providers you configure.

Contact

Questions about this policy or your data: support@auroraiptv.app.

Changes

We may update this page when the app or legal requirements change. The effective date at the top will be revised when we do.