Privacy policy

Last updated: 2026-10-13. Contact: support@qanat.tech.

Qanat is an IPTV player. It has no analytics, no accounts, no advertising and no tracking. Everything below is what the app really does.

Data that stays on your TV

• Your playlists and credentials. Server addresses, usernames and passwords are stored encrypted in the device keystore and sent only to the IPTV provider you configured, so it can stream to you. They are never sent to us or anyone else, never logged, and redacted from every log, error message and diagnostic text.
• Watch state. Favourites, resume positions, watched marks, parental PIN (salted hash, never the PIN itself) and settings live in the app's private database. Nothing leaves the TV except the streams and guide downloads from your own provider.
• Crash log. If the app crashes, one redacted report (time, app version, device model, thread, stack trace — usernames, passwords, hosts and stream paths removed) is kept in app-private storage, the last 5 only. It is never uploaded anywhere; you can read it on the TV and optionally send it to your own phone over your local network.

Data sent over the network

• To your IPTV provider: login, channel/movie/series lists, streams, EPG and programme art — required for the app to work at all.
• To your backup DNS (optional, on by default): provider host names only, and only when the TV's own DNS fails.
• To no one else: there is no analytics endpoint, no crash-reporting service, no ad network.

Backups

Exported backups are encrypted with a passphrase you choose and leave the TV only where you send them (file download or your own phone over your LAN). We cannot read them.

Permissions

• INTERNET: your provider's streams, guide and art.
• ACCESS_NETWORK_STATE: offline handling and the connection meter.
• POST_NOTIFICATIONS: programme reminders you set. Nothing else notifies.
• WAKE_LOCK: lets a playlist or guide refresh finish in the background.
• RECEIVE_BOOT_COMPLETED: re-schedules refreshes and your reminders after the TV restarts.
• FOREGROUND_SERVICE: declared by Android's background-task library (WorkManager) for long refreshes. It shows no ads and sends nothing to us.

Children

Kids profiles see only the categories you allow and cannot open Settings, buy anything (there is nothing to buy) or contact anyone.