Privacy policy
Last updated: 7 November 2026
In short
- Couchzap is a player. The app contains no channels, movies or series; you use your own subscription.
- Your login details (Xtream, M3U, Jellyfin) are stored only on your own device, encrypted in its secure storage. They are never sent to us.
- Your watch history, progress, profiles and favourites are stored only on your device.
- We don’t need an account, show no ads and don’t track you. This website uses no cookies and no analytics.
- If you get Couchzap Pro, we only store a device code and the status of your subscription. No name, email address or payment details: payment goes through the App Store or Google Play.
Who is responsible?
ITBO, Dutch Chamber of Commerce (KvK) 88987892. Contact: support@couchzap.com.
What data does the app process?
- Your subscription details (server, username, password, playlist URL): only on your device, encrypted.
- Your provider’s catalogue and guide: only on your device, to browse, search and continue watching.
- Profiles, progress and favourites: only on your device. A PIN is only stored as an encrypted hash.
Which services does the app connect to?
- Your own provider or server: directly from your device, with your details.
- YouTube: only to show trailers.
- Expo (our processor): when it starts, the app checks whether there is a new version of the app code and downloads it. This sends your IP address, the platform, the app version and a random installation number; no login details, nothing about your source and nothing about what you watch.
- Transfers to your TV go directly over your own network, encrypted with a key from the QR code. We see nothing.
- Only with Couchzap Pro: RevenueCat (our processor) and the App Store or Google Play, for the offer and the status of your purchase; and our own server (api.couchzap.com, in the EU) for the devices on your subscription.
Couchzap Pro: what we store
- Without Pro, the app sends us nothing. Only when you open the Pro screen does the app ask RevenueCat for the offer and the status of your purchase, using this device’s device code.
- After a purchase, restore or link we store on our server: the device code (a random code, not a MAC address or other hardware ID), the kind of device (e.g. iPhone or Samsung TV), which devices belong to which subscription, the status and end date of the subscription, and the date (without time) on which the device last checked in.
- We do not store your name, email address, address, IP address or payment details, and never the details of your IPTV source. Apple and Google handle the payment; they only pass the subscription status on to us (via RevenueCat).
- Why: to deliver the subscription you bought, on the right number of devices (performance of the contract).
- RevenueCat (USA) processes the purchase status on our behalf, under a data processing agreement and the EU standard contractual clauses.
Retention and deletion
Everything about your source, profiles and watch history is stored on your device. Remove a subscription or profile in the app and that data is gone. Delete the app and the rest is gone; only on iPhone, iPad and Apple TV the encrypted login details remain in the Keychain until you remove them in the app (only Couchzap can read them). We keep Couchzap Pro data while the device uses Pro. “Deactivate this device” (Settings › Couchzap Pro) erases it immediately; backups are gone after 14 days. Cancel a running subscription in the App Store or Google Play.
Your rights
You have the right to access, correct and delete personal data. Without Pro, we store nothing about you. With Pro, it only concerns the data above: email us with your device code (Settings › Couchzap Pro) for access, or erase everything with “Deactivate this device”. If you have a question or complaint, email us; you can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
If we later introduce an account with extra features (such as sync between devices), we will update this policy beforehand. Subscription details would then only be synced end-to-end encrypted, with a key that only you hold.