What MADPLAY does
MADPLAY plays media from an IPTV account you choose to add. It does not provide channels, movies, television shows or an IPTV subscription. MADPLAY does not operate a personal user-account or watch-history server.
Information kept on your device
Your IPTV sign-in is stored in the device Keychain. In version 1.0, an optional TMDB key or read access token you provide is also stored in the Keychain. Account display information, preferences, favourites, recent searches, navigation state, watched status and playback positions are stored locally. Catalogue and guide information, artwork and TMDB matching results are cached for browsing.
The app also keeps local technical diagnostics, such as playback state, loading time and memory measurements, for troubleshooting. It does not automatically send these diagnostics or your local watch history to the developer.
iCloud viewing sync
When your iPhone and Apple TV use the same iCloud account and IPTV subscription, MADPLAY syncs My List, watched status, playback progress and Continue Watching choices through your private Apple CloudKit database. It stores a one-way digest of the provider identity to keep subscriptions separate. IPTV passwords, stream URLs, catalogue data and local technical diagnostics are not uploaded for sync. Changes remain usable locally when iCloud is unavailable and may sync later. Apple operates iCloud under its own terms. The LG webOS version does not use this Apple-only sync.
Connections to your provider and image hosts
When you add an IPTV account, your credentials are sent to the server address you enter to authenticate and retrieve catalogue information, guide data and video streams. Your provider receives requests for the content you open. Image hosts receive requests for artwork.
These services can receive your IP address, request timing, client information and the content or image addresses requested, and may keep service logs under their own policies. Use a provider you trust and are authorised to access. HTTPS protects data in transit when your provider supports it; a plain HTTP server does not provide that protection.
TMDB artwork in version 1.0
Enhanced Artwork is optional in version 1.0. If you connect TMDB and enable it, MADPLAY sends your TMDB key or read access token to TMDB for authentication, and title search information to find matching artwork and metadata. It requests metadata and images for matched identifiers. Release-year information helps matching within the app. You can turn Enhanced Artwork off or disconnect TMDB in Settings. Provider images remain available when it is off.
TMDB and its image service receive these requests under TMDB’s privacy policy. Your IPTV username, password and stream URLs are not sent to TMDB.
Artwork in the upcoming version 1.0.1 beta
Version 1.0.1 beta will look up artwork automatically through the developer-hosted service at madplay-artwork.vercel.app. In that version, the app will send a public title and whether it is a movie or series to the service. The app will use release year locally to check matches. The service will send the lookup to TMDB using the developer’s credential, so you will not need your own TMDB API key. Matched images will load from TMDB’s image service at image.tmdb.org.
When that beta is installed, the artwork service will receive the lookup fields and ordinary request information such as your IP address. TMDB will receive the lookup from the service, while its image service will receive image requests from your device. Your IPTV username, password and stream URLs will not be sent to the artwork service or TMDB. TMDB processes its requests under TMDB’s privacy policy.
The artwork service’s application code does not log titles, IP addresses or credentials. As configured on 30 September 2026, it has no external log forwarding and uses Vercel’s Hobby plan, whose runtime logs are retained for one hour. That one-hour limit applies to runtime logs; it does not describe any separate technical or security records Vercel may keep, or records kept by TMDB and image hosts under their own policies. We will update this policy if the service’s logging or retention setup changes.
Advertising and analytics
MADPLAY contains no advertising or third-party analytics SDK. In version 1.0, optional TMDB requests occur as described above. In version 1.0.1 beta, the developer-hosted artwork service will receive title lookups, but not your IPTV password or local watch history. Requests to providers and image hosts also occur as described above. Apple may process platform diagnostics according to your device settings and its own policies.
Support correspondence and these pages
If you email us, we and our email service process your email address, message and attachments to respond and investigate your request. Do not send passwords, tokens or full stream URLs. We retain correspondence as needed to resolve your request and meet applicable obligations. You can request deletion by emailing the same address; records that must be kept for legal obligations may be excluded.
When you visit these support and privacy pages, the hosting service receives ordinary technical request information, including an IP address, to deliver and secure the pages. These pages do not include advertising, analytics scripts or a support tracking form.
Retention and your controls
Local information remains until you change or remove it. Caches can be rebuilt, cleared by the app or removed by the operating system. Local diagnostics can remain on the device; no automatic upload occurs. Keychain storage has different persistence from ordinary app files, so uninstalling alone is not a guarantee that every saved secret is removed.
- Clear Downloaded Data removes cached catalogue information and images while preserving favourites and progress.
- Clear Watch History removes playback positions and watched status while preserving My List. This change syncs to your other Apple devices when iCloud is available.
- Remove Account removes the saved sign-in. Viewing data and catalogue cache remain only while another saved account uses the same provider identity. Removing an account does not cancel your provider subscription. It does not delete records already synced to your private iCloud database, which other Apple devices may still hold.
- Disconnect TMDB in version 1.0 removes your saved TMDB credential separately.
To ask about information handled by the developer-hosted artwork service or request deletion of data we control, email Mad@beingmad.co. For data held independently by your provider, Vercel, an image host or TMDB, contact that service under its privacy and deletion process. MADPLAY’s local controls cannot erase those independent records.
Changes and contact
We will update this page and its effective date when our practices change. For questions about this policy, support correspondence or MADPLAY’s local data, email Mad@beingmad.co.