Back to Home

Privacy Policy

Oxi+ Player — Media Player Application Version: 1.0 Last Updated: May 24, 2026 Effective Date: May 24, 2026

This is a template for informational purposes. Consult with a qualified attorney for legal advice specific to your situation.

1. Introduction

Welcome to Oxi+ Player (the "App"), operated by IoxTech GmbH ("we," "us," or "our"). This Privacy Policy explains how we collect, use, store, and protect information when you use our App on Android TV, Apple TV, and mobile devices.

By installing or using Oxi+ Player, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

2. Data Controller

IoxTech GmbH IoxTech GmbH, Germany Germany Email: support@oxi.plus

For users in Turkey: Data controller registered under KVKK (Law No. 6698). For users in the EU/EEA: Data controller under GDPR (Regulation (EU) 2016/679).

3. Information We Collect

3.1 Information Collected Automatically — Activation & Licensing

When you activate Oxi+ Player or start a trial, our activation server collects the following information from your device:

| Data | Purpose | Legal Basis | |------|---------|-------------| | Device UUID (unique device identifier) | License assignment and anti-fraud | Legitimate interest / Contract performance | | Device model (e.g., "Xiaomi Mi Box") | Technical support and compatibility | Legitimate interest | | Platform (e.g., "Android TV", "Apple TV") | License enforcement | Contract performance | | OS version | Technical support and compatibility | Legitimate interest | | App ID | Linking license to device | Contract performance | | Activation code (if entered) | License verification | Contract performance |

This data is sent to our activation server at https://api.oxi.plus.

3.2 Information You Provide — Playlist Configuration

The following information is stored locally on your device only and is never transmitted to our servers:

| Data | Storage Location | |------|----------------| | Xtream Codes server URL | Local SQLite database (encrypted) | | Xtream Codes username | Local SQLite database (encrypted) | | Xtream Codes password | Local SQLite database (encrypted) | | M3U playlist URLs | Local SQLite database (encrypted) | | Playlist source names | Local SQLite database (encrypted) |

Important: Your provider credentials are transmitted only to the server address you configure. We never receive, log, or store your provider credentials on our servers.

3.3 User Preferences (Local Storage Only)

The following settings are stored exclusively on your device:

  • App language preference
  • Theme and accent color
  • Video quality preference
  • Weather city and unit preference
  • Sports and favorite team preferences
  • Sync interval settings
  • Clock display preference

These preferences are never transmitted to our servers.

3.4 Weather Service

If you enable weather display and enter a city name, that city name is sent to a third-party weather API (OpenWeatherMap) to retrieve weather data. This is the only preference data transmitted externally. Please review the weather provider's privacy policy at https://openweathermap.org/privacy-policy.

3.5 Sports Data

Sports scores and fixture data are retrieved from a third-party sports data API (Sportradar). No personal information is sent with these requests beyond standard HTTP request headers (IP address, user agent). Please review the sports provider's privacy policy at https://sportradar.com/privacy-policy.

3.6 Content Metadata

When you browse content in the App, we may fetch artwork and metadata from TMDB and Fanart.tv (e.g., TMDB/Fanart). These requests may include the content ID and your language preference. No personally identifiable information is included.

3.7 Data We Do NOT Collect

We explicitly do not collect:

  • Your name, email address, or contact information (unless you contact support)
  • Payment information (activation codes are purchased through separate channels)
  • Browsing or watch history
  • Content of streams you access
  • Location data beyond the city you voluntarily enter for weather
  • Usage analytics, crash reports, or telemetry (beyond activation events)

4. How We Use Your Information

We use the device information collected during activation solely for:

  1. License management — assigning and verifying your activation or trial status
  2. Fraud prevention — detecting unauthorized use or sharing of activation codes
  3. Technical support — diagnosing compatibility issues when you contact us
  4. License renewal — checking whether your subscription is still valid

We do not use your information for advertising, profiling, or any purpose beyond those listed above.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to any third party.

We may share device information with:

| Recipient | Purpose | Safeguard | |-----------|---------|-----------| | Hosting/Cloud provider | Server infrastructure for activation API | Data processing agreement in place | | Legal authorities | If required by applicable law or court order | Only as legally required |

We do not share your data with advertisers, data brokers, or analytics companies.

6. Data Retention

| Data Type | Retention Period | |-----------|----------------| | Device registration data (UUID, model, platform, OS) | Duration of your license + 12 months | | Activation code usage records | 24 months (fraud prevention) | | Local app preferences and credentials | Until you uninstall the App or clear data |

You may request deletion of your activation data at any time (see Section 9 — Your Rights).

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Activation server data is stored in an encrypted database
  • Provider credentials are stored in encrypted local storage on your device (using platform secure storage APIs)
  • All communication with our activation server uses HTTPS/TLS encryption
  • Access to server data is restricted to authorized personnel only

8. International Data Transfers

Our activation server may be located outside your country of residence. If you are in the EU/EEA or Turkey, data transferred outside these regions is subject to appropriate safeguards (Standard Contractual Clauses or equivalent mechanisms).

9. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

For all users:

  • Access — Request a copy of data we hold about your device
  • Deletion — Request deletion of your device's activation data
  • Correction — Request correction of inaccurate data

For EU/EEA users (GDPR):

  • Portability — Receive your data in a machine-readable format
  • Objection — Object to processing based on legitimate interest
  • Restriction — Request restriction of processing
  • Complaint — Lodge a complaint with your national Data Protection Authority

For California users (CCPA/CPRA):

  • Know — Know what personal information we collect and how it is used
  • Delete — Request deletion of your personal information
  • Opt-out of sale — We do not sell personal information
  • Non-discrimination — We will not discriminate for exercising your rights

For Turkish users (KVKK):

  • Rights under Article 11 of Law No. 6698, including access, correction, deletion, and objection rights

To exercise any of these rights, contact us at: support@oxi.plus We will respond within 30 days (GDPR) or 45 days (CCPA) of your request.

10. Children's Privacy

Oxi+ Player is not directed to children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us immediately at support@oxi.plus and we will delete that information.

11. Third-Party Media Services

Oxi+ Player connects to third-party media servers and M3U sources that you configure. These third-party services have their own privacy policies and data practices. We are not responsible for the privacy practices of any content provider. Please review the privacy policy of any media service you use.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

  • Displaying a notice in the App on next launch
  • Updating the "Last Updated" date at the top of this document

Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or requests:

IoxTech GmbH Email: support@oxi.plus IoxTech GmbH, Germany

For EU users, our Data Protection Representative (if applicable): dpo@oxi.plus

This Privacy Policy is provided in English. In case of conflict with a translated version, the English version shall prevail.