Privacy
Last updated: 15 October 2026
1. Contact and data controller
For any question about your personal data or to exercise your rights, you can write to:
Website and support: https://baolplayer.app/contact
2. How your data is used
Baol Player uses the data described in this policy only to let you sign in to the application, to make it work, to manage your subscription, to synchronise your devices and to handle the support requests you choose to send.
Your data is neither sold nor rented, and is not used for advertising, commercial prospecting or advertising profiling.
Your email address is used only for authentication and for operations needed to access your account, such as confirming your address or recovering your access. It is not used to send you commercial offers. On PC, when you subscribe through our payment provider, it is passed to that provider to link the payment to your account.
The application shows no advertising and contains no advertising tracking tool.
3. Content and providers
Baol Player is a video player. It does not provide, host or sell any audiovisual content or any subscription to content providers.
Sources are added by the user, who chooses the services they want to access.
4. Data stored on your device
Depending on the features you use, the application keeps locally:
- Your profiles, favourites and lists.
- Your playback progress and settings.
- Hidden channels.
- The sources you add.
- A fingerprint of your parental code, not the code itself.
The passwords and links of your sources are protected using your system’s secure keychain, such as Keychain or DPAPI, when it is available.
A cache of catalogues, programme guides and images is kept to speed up the application and limit repeated downloads. You can clear it in Settings → Sources.
5. Account and synchronisation
An account is required to use the application.
Your email address and the data needed for synchronisation — profiles, sources and their credentials, favourites and settings — are stored on servers hosted by Supabase.
The credentials of your sources, in particular the server address, user name and password, are stored in encrypted form on the server side.
This encryption is not end-to-end encryption: it is managed by the server, and your account password is not its key.
Access to your synchronisation data by the application is subject to authentication of your account and to the access controls set up on the service.
6. Reports and support
When you send a report from the application, your message, attachments and the technical information you choose to include are sent to us to handle your request.
This technical information may include your device model, the application version and the type of source used.
The technical information attached automatically must not include the credentials or addresses of your sources. Before sending, still check that your message and attachments, in particular screenshots, do not contain a password or other confidential information.
Support contact: [email protected].
7. Connections to third-party services
To play your content and display related information, the application contacts:
- The servers of the providers behind the sources you add.
- The image servers named by those sources, for logos and posters.
- The services needed to authenticate and synchronise your account.
These connections send the services concerned the information needed for the requests, in particular your IP address and, where the source requires it, the credentials used to access it.
Content and image providers apply their own privacy policies. Downloaded images may be kept in the application’s local cache.
8. Hosting and recipients
Supabase acts as a hosting provider and manages the server-side features described in this policy.
Hosting location: Ireland (European Union).
Purchases and subscriptions are processed by the app store used (Apple App Store, Google Play) or, on PC, by our payment provider, whose privacy policies apply.
9. Legal bases and retention
Processing needed to create the account, authenticate you and synchronise your data is based on performance of the contract under which the application is provided.
Local data is kept until you delete it with the functions provided in the application or with your system’s tools.
10. Deleting your account
You can request deletion of your account from Settings → Account, or by writing to [email protected].
This procedure deletes, on our servers, the data associated with the account: profiles, sources and their credentials, favourites and settings.
Deleting the account does not necessarily erase data kept locally on your other devices.
11. Your rights
Under the conditions set by the regulations, you have in particular rights of access, rectification, erasure, restriction of processing and portability. The right to object applies depending on the legal basis of the processing concerned.
To exercise your rights, contact:
You can also lodge a complaint with the French data protection authority, the CNIL.
Back to home