Hectic TVApp Store

Privacy

Privacy Policy

Last updated: 31 October 2026

We do not collect personal data, and the apps have no accounts, analytics or advertising. The few cases where something passes through our servers are listed below. Hectic TV is owned by Hectic Software Ltd (company number 17514067, registered office: Unit 1c Sandown Road Industrial Estate, Watford WD24 7UB). Questions: support@hectictv.app. To delete your data, see Delete your account and data.

The Hectic TV app for iPhone, iPad, Mac, Apple TV, Apple Watch and Vision Pro

  • No accounts, analytics, advertising or tracking. Hectic TV contains no third-party SDKs. Its App Store privacy label is Data Not Collected.
  • Your library stays yours. Playlists, favourites and watch history are stored on your device. If you use iCloud sync (Hectic TV Pro), they are stored in your own private iCloud database through Apple’s CloudKit. This holds your playlist names and addresses, channel names, logos and stream addresses, favourites and watch history. Xtream Codes stream addresses are stored without your username and password; the app adds the login back from your Keychain only when it plays something. Unless you turn on Apple’s Advanced Data Protection, Apple holds the keys to this database. We, the developer, have no access to it.
  • Passwords for Xtream Codes logins are kept in your iCloud Keychain, which is end-to-end encrypted. Your Xtream username is stored with the playlist. If you choose “Open in VLC” or “Open in Infuse”, the full stream address, including your login, is passed to that app; Hectic TV tells you this before the first time for each playlist. For Jellyfin, Hectic TV keeps the server’s access token in the Keychain, not your password.
  • Network requests go to the addresses you add (playlist, TV guide, stream, logo and Jellyfin servers), to Apple (App Store, iCloud), and only when you use them: our storage for the free sample films and the speed test, the Internet Archive for Free Films & Cartoons, YouTube’s official embedded player for trailers and YouTube links, Wikipedia and TVmaze for film and series details (only the title and year are sent; you can turn this off in Settings → Privacy & History → Film & TV Details), and TMDB and OMDb only if you add your own keys there (your keys stay in your device’s Keychain). These services have their own privacy policies; none of them receive anything that identifies you from Hectic TV.
  • Local network: Hectic TV may ask for local network access to play streams from servers on your home network (for example a media server or TV tuner) and to act as a remote for Apple TV. Nothing is shared.
  • HomeKit (Cinema Mode) is off until you turn it on. It only changes the lights or scenes you choose, on your devices.
  • Ally, the in-app assistant, runs on your device using Apple’s on-device model, or on-device search where that isn’t available.
  • Translation of programme details happens on your device using Apple’s Translation framework.
  • Purchases are handled by Apple. We receive no payment details.

The Hectic TV app for Android and Google TV

  • No accounts, analytics or advertising. Playlists, logins, favourites and watch history are stored on your device.
  • Pairing a TV with your phone. When you set up a TV by scanning its code, the playlist details you enter on your phone (which can include a server address, username and password) pass through our Cloudflare Worker. They are held for at most 2 minutes, are deleted as soon as the TV collects them, and are sent over an encrypted (HTTPS) connection. An unused pairing code expires after 10 minutes.
  • Google Drive sync is off unless you turn it on. When it is on, your library, including logins, is encrypted on your device (AES-256-GCM) before it is saved to a hidden app folder in your own Google Drive. The encryption key is kept in Google’s Block Store on your account, not by us. Hectic TV can only see its own folder in your Drive.
  • Beta (test) reports. Test builds can send a crash or feedback report to our Cloudflare Worker. A report holds the app name and version, platform, device model, screen name, the message and the error details. Email addresses, phone numbers, long tokens and logins written into web addresses are removed before it is stored. No IP address, account, email or device ID is kept. Reports are deleted after 30 days.

This website

  • The website has no cookies, analytics or advertising. It is hosted on Cloudflare Pages, which processes standard request data (such as IP address) to serve and protect the site.
  • The Ally help assistant on this website sends the question you type to our Cloudflare function, which answers it with Cloudflare Workers AI using our help pages. We don’t store your questions or answers, and the assistant has no memory between questions. To prevent abuse, a counter keyed to a one-way hash of your IP address is kept for up to an hour. Please don’t type personal details; email addresses and phone numbers are removed before a question reaches the AI model.
  • If you use “Report this answer”, your email app opens with the question and answer filled in; nothing is sent unless you send that email.