Tuvora — Privacy Policy
Effective and last updated: August 13, 2026
This policy explains how Tuvora / paradox-kush (“Tuvora,” “we,” or “us”) handles personal data when you use Tuvora TV, the Tuvora mobile apps, Tuvora Desktop, tuvora.co, and related account, sync, pairing, support, and diagnostic services (collectively, the “Services”). Tuvora is a media player and does not provide, host, sell, or promote channels, movies, series, or subscriptions.
For privacy questions or requests, contact [email protected]. Tuvora is the controller of account, sync, website, and product-diagnostic data described here. Your playlist, media, and connected-service providers control their own handling of data sent directly to them.
Adults only (18+)
The Services are intended only for people who are at least 18 years old. You may not create an account or use the Services if you are under 18. Account creation records only your confirmation that you meet this requirement and the version of the terms you accepted; we do not ask for or store your date of birth. If we learn that a person under 18 provided personal data, we will disable the account and delete the data as reasonably required. A parent or guardian can contact [email protected].
Data you choose to provide
- Account data: email address, password hash, adult/terms confirmation, authentication sessions, and account/device-link records. An account is optional; it provides cross-device sync and web account management.
- Synced app data: profile names and avatars, watch progress and history, library and collections, home-screen and playback preferences, followed sports leagues and teams, installed addon or plugin addresses, and device-sync state.
- Playlist and connected-service data: playlist or portal URLs, usernames, passwords, MAC addresses, provider device identifiers, and tokens for services you choose to connect, such as Trakt, Simkl, debrid, subtitle, playlist, or media providers. These credentials are synced only when you choose account sync.
- Support and privacy requests: the messages and information you send us, including diagnostic files you deliberately attach. Please remove playlist credentials, authorization tokens, and full media URLs before sending a report.
Data processed locally or by your providers
Without an account, profiles, history, preferences, and provider configurations normally remain on your device. Your media requests go directly from your device to the source you configured; Tuvora does not proxy that traffic. The source can therefore receive your IP address, request details, and any credentials needed to serve the request. Some sources use unencrypted HTTP. You are responsible for selecting providers you trust and have a lawful right to use.
Data collected automatically
- Optional product and reliability diagnostics (PostHog): a random, persistent app-installation identifier; app name, version, build and platform; device model, operating-system version and device class; app launches, screens or privacy-safe route names, broad discovery-source categories (such as Google, Bing, ChatGPT, Perplexity, Copilot, another site, or direct), and selected feature interactions; and reliability information such as exceptions, crashes, Android ANRs and native/process exits, low-memory or resource exits, memory/process status, sanitized stack or trace excerpts, and aggregate Apple MetricKit crash, hang, CPU, and disk-write counts. Network requests to PostHog necessarily expose an IP address and may produce an approximate country/region unless IP processing is disabled at ingestion. Tuvora has configured PostHog to discard client IP data after any in-memory ingestion processing; the IP is not stored with the event. We do not send advertising identifiers or identify PostHog events with your Tuvora email or account ID.
- Recommendation activity: titles shown on a recommendation shelf, titles opened, playback milestones, the row where an item appeared, app/version, and active profile. Signed-out events use a random installation identifier; signed-in events may also be associated with the account so recommendations can work across devices.
- Service and security logs: our hosting, database, authentication, and edge-service providers may process IP address, user agent, timestamps, request route, response status, and security events to operate the Services, prevent abuse, and investigate failures. We do not intentionally place playlist credentials or media URLs in those logs.
We do not use session replay, advertising SDKs, cross-app tracking, or intentional capture of console contents, network request bodies, full deep links, authorization codes, or playlist credentials for analytics. Diagnostic filters remove common URLs, email addresses, credentials, and token patterns before sending stack and process-exit details.
Why we use data and our legal bases
- Provide the Services and perform our contract: create and secure an account, sync requested data, connect devices, and carry out your settings and requests.
- Your consent: optional diagnostics and recommendation analytics where consent is required. You can withdraw consent at any time without affecting prior lawful processing.
- Legitimate interests: keep the Services secure and reliable, understand failures, prevent abuse, and improve features, where those interests are not overridden by your rights. You may object to this processing.
- Legal obligations and claims: comply with applicable law and protect the rights, safety, and security of users, Tuvora, and others.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
When data is disclosed
We disclose data only as needed to:
- Service providers: Supabase provides authentication, database, sync, storage, and edge functions; PostHog provides optional analytics and error tracking; Cloudflare provides website and edge delivery. These providers process data for us under their contractual and security terms.
- Services you request: metadata and artwork providers such as TMDB, sports-data providers such as TheSportsDB, and any playlist, media, Trakt, Simkl, debrid, subtitle, addon, or plugin service you choose to use. Their own privacy policies apply to their services.
- Legal and safety matters: authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud or abuse, or establish and defend legal claims.
- Business changes: a successor or adviser involved in a merger, financing, reorganization, sale, or transfer, subject to appropriate confidentiality and continued protection.
We do not sell personal data. We do not share personal data for cross-context behavioral advertising or targeted advertising, and we do not use personal data to serve ads.
International processing
Tuvora and its service providers may process data in the United States and other countries where they operate. Those countries may have different privacy laws. Where required for transfers from the EEA, United Kingdom, Switzerland, Brazil, or another jurisdiction, we use an applicable recognized transfer mechanism, such as an adequacy decision, certified framework, standard contractual clauses, the UK Addendum, or another lawful safeguard. Contact [email protected] to request information about safeguards relevant to your data.
Retention
- Account and synced data are kept while your account exists and deleted when the account is deleted.
- Pairing and login codes expire quickly; stale pairing records are removed after they are no longer needed.
- Raw recommendation events are kept for no more than 18 months.
- PostHog product and diagnostic events are kept for no more than 12 months under our current retention setting.
- Routine security and service logs are normally kept for no more than 90 days unless needed to investigate abuse, comply with law, or resolve a specific incident.
- Support and privacy-request correspondence may be kept for up to 24 months after resolution to document the request and our response.
Data may remain for a limited time in protected backups or provider logs until their normal overwrite cycle completes. We may retain a minimal record longer when required by law or necessary to establish or defend legal claims. We delete or de-identify data when the applicable period ends.
Your choices and privacy rights
- Turn optional diagnostics or recommendation collection on or off in Settings → Advanced → Diagnostics. On the website, use the privacy choices page. Withdrawal stops future optional collection on that installation.
- Delete your account from Settings → Account → Delete account or follow the account-deletion instructions.
- Depending on where you live, you may request access, confirmation, a copy or portability, correction, deletion, restriction, or an explanation of processing; object to processing; withdraw consent; appeal a denied request; use an authorized agent; and complain to your local privacy or data-protection authority.
- You may opt out of sale, sharing for cross-context behavioral advertising, targeted advertising, or qualifying profiling. Tuvora does not perform those activities, so no separate sale or advertising opt-out is necessary. We will not discriminate against you for exercising a privacy right.
Send requests to [email protected]. We may ask for information reasonably necessary to verify the request and your authority. We respond within the period required by applicable law. Some PostHog diagnostics use only a random installation identifier and are not linked to your account; if we cannot reasonably identify those events from the information in a request, they remain subject to the retention limit above rather than being located by email.
Security
We use reasonable administrative, technical, and access-control safeguards appropriate to the data we handle. No service can guarantee absolute security. Protect your account, choose a unique password, keep provider credentials private, and prefer sources that use HTTPS. If you believe your account or data has been compromised, contact [email protected].
Changes
We may update this policy as the Services or law changes. We will publish the new version here with a revised date and provide additional notice when a change materially affects your rights or how personal data is used. The Terms of Use also apply to the Services.