Your library stays yours

Introduction

Gflix (the "App") is a player for iPhone, iPad, Mac and Apple TV. It is made by Enoch Abiodun, an independent developer ("we", "our" or "us"), who is responsible for the information described here. This policy explains what the App handles, where it goes, and what we can and cannot see.

The short version: there is no account, no advertising and no analytics. Your sources, credentials and watch history stay on your device, and in your own iCloud account if you turn sync on. The only thing that ever reaches a server we run is a bug report or feature request you choose to send.

About Gflix

Gflix is only a player. We do not provide, host or distribute any channels, films or series through the App. It plays the playlists and media servers you add yourself, and you are responsible for having the right to access anything you play through it.

Information we collect

You do not sign up for Gflix and you do not give us an email address. The App does not collect, store or send us personal information about you.

Everything you set up stays on your device: the playlists and media servers you add, any usernames, passwords or tokens they need, your watch history and resume positions, your favourites and hidden items, your downloads, and every setting you change. Deleting the App removes it.

The one exception is a report you choose to send, described under Reports and feature requests below.

Your sources and their credentials

When you add a playlist or connect a media server, your device contacts that provider directly, with the address and credentials you entered. Nothing is passed through us, and we never receive the address, the credentials or what the source contains.

Credentials are kept in the device keychain. What your provider does with the requests your device makes to it is covered by its own privacy policy, not this one.

Third-party services

The App talks to other services to do its job: to find a poster, look up a description, sync with a tracker you connected, or sync your own devices. Each request carries only what that job needs, plus your device's IP address, as any web request does. Here is who, and what each one sees.

• iCloud: Off until you turn on iCloud Sync. Then your sources, progress and what you are watching are stored in your own private iCloud database so your devices agree. We cannot read it. It is covered by Apple's iCloud privacy terms.
• TMDb: The main source of titles, descriptions, cast and artwork. Requests carry the title being looked up.
• TheTVDB, Fanart.tv, OMDb: Extra artwork and metadata where TMDb has a gap.
• MDBList, JustWatch, IMDb: Ratings, lists and where-to-watch information on a title's page.
• YouTube: Trailers, when you play one.
• TheIntroDB, IntroDB: Where an episode's intro and credits start and end, so they can be skipped.
• Trakt, SIMKL, MDBList, PublicMetaDB: Only if you connect them. You sign in with that service directly, and Gflix keeps its token on your device and sends it what you watched and the lists you keep there. Disconnecting in Settings stops that and deletes the token.
• Plex: Only to sign in to a Plex server when you connect one.
• Packs and guides you add: Only the ones you add: a channel logo set, a streaming-service art pack, a badge or rating icon pack, or a guide address. The App fetches each from the address you give, as it does a playlist, and that address's owner sees the request, as any web server would.
• Apple: TestFlight invitations, crash reports from TestFlight builds (stack traces, device model and OS version, never your sources or history), and App Attest, which lets a report prove it came from the real App.

Playback engines

Gflix plays video with its own engine, GPlayer, and with AetherEngine, an open-source engine you can choose instead in Settings › Playback. Both run entirely on your device: a stream goes straight from your source to the player, and neither sends anything to its authors or to us.

Gflix would not play half as well without AetherEngine. Thank you to the people who build it and give it away.

• AetherEngine: by superuser404notfound. FFmpeg-based playback with hardware decoding, HDR10, HDR10+ and Dolby Vision, live TV timeshift, and text, bitmap and teletext subtitles.

No analytics

Gflix has no analytics or advertising SDK: no Google Analytics, no Firebase, no Mixpanel, nothing like them. We do not measure what you watch, what you tap or how long you stay.

Reports and feature requests

Settings › Help & Feedback sends a bug report or a feature request to support.gflixhub.app, a small service we run on Cloudflare. It carries what you typed, the App version, your device model and iOS version, and, only if you switch it on, a diagnostics report you can read before sending. That report describes the App's state and holds no playlists, credentials or watch history.

Instead of an account, your device proves the report came from the real App using Apple's App Attest. That gives us a random key for this install. It is not your name, your Apple ID or anything that can be tied back to you. We keep it, with the time of each report, to limit how many one install can send in a day.

Bug reports become issues in our private GitHub repository, seen only by the people building the App. Feature requests join a public queue where their title and description are shown so others can vote for them, so leave personal details out of them. Cloudflare sees your IP address as it does for any website, and we do not store it.

Notifications

If you allow notifications, reminders for upcoming episodes and releases are scheduled on your device from data already there. They are not sent from a server of ours, and allowing them tells us nothing about you.

Content disclaimer

To be completely clear:

• Gflix is only a media player.
• We do not provide, host or distribute any content.
• We have no control over the content you choose to access.
• You are responsible for making sure you have the right to access anything you play.
• You must follow the laws on accessing content where you live.

Data security

Credentials live in the device keychain, connections to our support service and to the services above use HTTPS, and reports are accepted only from installs Apple has attested. The little we hold, reports and install keys, is kept on Cloudflare and GitHub with access limited to the people building the App.

Changes to content access

If the law requires it, we may change what the App can do with the sources you add, for example by blocking certain kinds of content, adding verification, or adding content filtering.

Children

Gflix is not directed at children, and we do not knowingly collect anything from children.

International users

Gflix is available worldwide. Reports you send are processed by Cloudflare and GitHub, which may be outside your country. By using the App, you agree to the practices in this policy.

Changes to this policy

If what the App does changes, this page changes with it and the date at the top moves. Anything that would newly collect or share your data will be described here before it ships.

Contact us

Enoch Abiodun is responsible for this information. Questions about any of this, including a request to see or delete what we hold, go to support@gflixhub.app. What we can hold is small: the reports you sent and the install key they came with. We will delete it on request.

Your legal rights

Nothing in this policy limits any right or remedy you have under the law where you live. The terms you use the App under are in the Terms of Use.