Privacy

Effective date: 26 September 2026.

NxtGenTV Elite is a media player for live TV sources you supply. What you watch stays on your device. If you sign in or buy a plan, a small account service run by Jacob Carlson receives the information described below, and nothing more. This is the one privacy policy for the app, this website and the account service.

The service is operated by Jacob Carlson, doing business as Agentic Applications, Homer Glen, Illinois, United States.

The short version

• Your provider login details, what you watch, your recordings and your settings never leave your device. We cannot see them.
• The app has no analytics, no advertising and no tracking.
• If you sign in, we hold your email address and a short description of each device you sign in on. If you buy a plan, we hold the purchase record the store gives us. We never see your payment details.
• You can delete your account at any time at Delete account.

What stays on your device

Everything below lives only on your device, in the app's own private storage, and is never sent to us:

• Provider details you enter — server address, username, password, or portal and MAC details. The active login is encrypted with your device's hardware-backed keystore. These details go only to the provider you configured, never to us.
• Viewing state — watch history, favourites, resume positions, recordings, scheduled recordings and your settings.
• Playback diagnostics — a local file the app uses to adapt playback to your hardware. It is never uploaded; the app has no way to upload it.

Cloud and device backups are switched off for the app's data, including credentials. Uninstalling the app, or using Android's "Clear storage", removes all of it.

Connections the app makes on its own

• Your provider — to sign in, load channel and programme listings, and stream what you choose. Your credentials and requests go directly to the provider you configured, and that provider's own privacy practices apply.
• The Movie Database (TMDB) and public image hosts — to fetch artwork and details for titles in your listings. These requests carry title lookups only, never your identity or credentials.
• Encrypted DNS fallback — if your network's DNS fails, the app may resolve names through Google Public DNS or Cloudflare DNS over HTTPS. Only hostnames are sent, as with any DNS lookup.
• Google Play — the Google Play Billing library runs on your device to check and complete purchases. Google handles the payment; we never receive your card or Google account details.

What the account service receives

Only when you sign in (in the app, on a TV with a code, or on this website) or link a purchase:

• Your email address, to send you sign-in codes and account messages and to identify your account.
• A description of each signed-in device: a random identifier the app generates, the model and operating-system version, the app version, a name you give the device, and a keyed one-way hash of the device's Android ID, used to recognise a reinstall and to count devices against the limit. The Android ID itself is never stored.
• Your purchase record from Google Play or the Amazon Appstore: the store's purchase or receipt id, the order id, the plan, its dates and status, and for Amazon the user id Amazon assigns to your Amazon account. We confirm the record with the store. We do not receive your payment method.
• A previous-purchase claim, if you make one: the email address and order id you type in.
• Your answer to the marketing question and the date you gave it.
• Your IP address and country, as reported by Cloudflare: recorded with sign-in codes, TV activation codes and website sessions, used for rate limiting, and shown as a country on our admin page. Website sessions also record your browser's user-agent string.
• Whether a free trial has been used on the account.

Why we use it

• To sign you in and keep you signed in.
• To unlock the app on the devices you sign in on, within the device limit in the Terms.
• To confirm a purchase with the store that sold it and keep the app unlocked while it is valid.
• To send the account messages listed below.
• To protect the service: rate limits, one free trial per person, and flags for refunds and chargebacks.
• To keep tax and refund records.

Messages we send

Sign-in codes, TV activation notices, device added and removed notices, purchase confirmations, cancellation instructions, email-change confirmations, and the account-deletion code and confirmation. They are sent through Postmark. We do not send marketing messages. The sign-up form asks whether you would like product news; we store your answer only so we can honour it, and we will update this policy before we ever send one.

How long we keep it

• Your account (email address, devices, marketing answer): until you delete it.
• Sign-in and activation codes, and the IP address recorded with them: the code expires within minutes and the record is removed about a week later.
• Website sessions, with their IP address and user-agent string: a session ends after 30 days unused, or 180 days at the longest, and the record is removed about a week after that.
• Device credentials: 30 days after they are revoked.
• Rate-limit counters: 48 hours.
• Delivery records for messages (delivered, bounced, marked as spam): 1 year, with your address removed when your account is deleted. The content of queued messages: 30 days.
• Notifications from Google Play, Amazon and Postmark: the content is erased after 90 days.
• Purchase records, refund and chargeback flags, and the administrative audit log: 7 years, as tax and refund records.
• Application logs: 14 days. Email addresses appear in logs only as a one-way hash.
• The marker that a free trial was used: kept indefinitely, so deleting an account cannot start a second trial.

Who else handles it

• Cloudflare — every connection to this website and the account service passes through Cloudflare's network, which is how we learn your IP address and country. Cloudflare also runs the "are you a person" check (Turnstile) on the sign-in, activation and delete-account forms, and stores our encrypted database backups.
• Hetzner — hosts the server and its database in Germany.
• Google Play — handles payment for Play purchases, confirms them to us, and notifies us when a purchase changes.
• Amazon Appstore — the same for Amazon purchases.
• Postmark — delivers our email and reports whether each message was delivered, bounced or marked as spam.
• TMDB and public image hosts — contacted by the app directly for artwork, as described above.

We do not sell personal information, and we share it with no one else. There is no analytics or advertising service anywhere in the product.

Your rights

Wherever you live, you can ask us for a copy of your data, to correct it, or to delete it by writing to [email protected]. You can also complain to your local data-protection authority. Our server and its database are in Germany. Cloudflare, which carries traffic to this site and stores our encrypted database backups, and Postmark, which delivers our email, may process your data in other countries, including the United States.

Deleting your account

You can delete your account here: Delete account. You confirm with a code sent to your email address.

Deleting your account removes your devices, sessions, sign-in codes and previous-purchase claims immediately, and permanently revokes a lifetime purchase held on it. Your email address is replaced by a one-way hash, and your country and marketing answer are cleared. Purchase records, refund flags, the audit log and store notifications stay for 7 years, tied to the deleted account's id rather than to your address, for tax and accounting purposes.

Data on your device is separate: uninstalling the app or clearing its storage removes it.

Children

NxtGenTV Elite is not directed at children.

Changes to this policy

Changes are posted at this address with a new effective date.

Contact

Write to [email protected].