Astro PlayerPrivacy Policy
1. Who we are
Astro Player is a personal media player for TVs, TV boxes, phones and other devices. It only plays content that users access themselves with the access code they received from a provider. Astro Player does not sell, host or provide any content.
Contact for any privacy matter: through the Support page.
2. Summary
- The app does not ask for your name, email, phone number, ID document or payment details.
- Your password stays on your device only: it is not sent to the Astro Player system.
- To enforce the number of devices allowed per code, the app sends technical device data to our system, described in section 4.
- The provider of your access code sees this technical data in their dashboard (section 5).
- Current versions of the app use Google Analytics for usage statistics (section 6).
- We do not sell data to anyone.
3. What stays on your device only
The following are stored only in the app's storage on your device: the access code, the username and password for the content server, favorites, recently viewed items, playback positions, a temporary copy of the content list and the device identifier (section 4). Uninstalling the app or clearing its data deletes all of it.
4. What the app sends to the Astro Player system
When you sign in, and while the app is in use, it sends to our system:
- The access code you entered.
- A device identifier: a random code created by the app when it is installed (on Roku, the channel client identifier provided by the Roku system). It is not the device's serial number or IMEI.
- Your username on the content server. The password is not sent.
- The device type (for example, Android phone or Android TV), device model, operating system version and app version.
- The expiry date of your access, as reported by the content server.
This data is sent when you sign in, in a short check every 90 seconds while the app is in use, and in a query when the app opens and every 15 minutes. On Roku, the app sends only the access code, the identifier and the device type.
Approximate location: the network that protects our system (Cloudflare) tells us the state or region the connection came from, derived from the IP address. We keep only the state or region. The Astro Player system does not store your IP address.
5. Who sees this data
The provider that issued your access code, and the accounts that manage that provider in the Astro Player dashboard, can see for each device: the identifier, username, type, model, operating system and app versions, access expiry date, whether it is connected, last connection, activation date, state or region, notes written by the provider and, if applicable, a block. They also see daily usage counts by state and device type, which do not identify anyone.
6. Google Analytics
The versions of the app published up to this date use Google Analytics, a Google service, to measure usage statistically (for example, how many times the app was opened and on which types of device). For this, Google receives its own random Analytics identifier, technical device information (such as language and screen size), the screens opened and the approximate location derived from the IP address. Google processes this data under the Google Privacy Policy and explains it in how Google uses information from sites or apps that use its services. The next version of the app stops using Google Analytics; this policy will be updated when it is published.
7. The content server you use
Your username, password and playback requests go directly from your device to the content server chosen by your provider. That server does not belong to Astro Player and follows the rules of whoever operates it.
8. What we do not collect
Through the app, we do not collect names, email addresses, phone numbers, ID numbers, payment data, GPS location, contacts, photos, personal files, microphone or camera. On Android, the app requests only internet access and network state permissions.
9. How we use the data
- Check that the access code is valid and active.
- Enforce the device limit of each code and let the provider release or block a device.
- Announce maintenance and mandatory app updates.
- Fix technical problems and provide support.
- Produce usage statistics that do not identify people.
The legal bases are the performance of the service you request and our legitimate interest in keeping the service running securely, under the Brazilian General Data Protection Law (Law No. 13,709/2018).
10. Who we share data with
We do not sell or rent data. It only reaches:
- the provider of your access code, as described in section 5;
- Cloudflare, which protects and delivers connections to our system;
- the hosting company of our server, located in Europe;
- Google, through Google Analytics, in the versions that use it (section 6);
- authorities, when required by law.
Because the server is outside Brazil, the data in section 4 is transferred abroad, with the protections described in section 12.
11. How long we keep data
Each device record is kept while the device is linked to the access code. Daily counts are aggregated and do not identify devices. To delete your device record from our system, ask through the Support page with your access code and username. We reply within 15 days.
12. Security
All communication between the app and our system is encrypted (HTTPS). The dashboard requires a username and password, and each provider sees only the devices in their own network.
13. Your rights
You can ask us to confirm whether we process data about your device, and to access, correct or delete it, or to tell you who it was shared with, through the Support page.
14. Children
Astro Player is not directed at children and does not knowingly collect data from children.
15. Changes to this policy
When this policy changes, the new version will be published on this page with an updated date. If the Portuguese and English versions differ, the Portuguese version prevails.