Privacy, without the fog.

We process only the information needed to pair your device, secure the setup portal, sync the sources and preferences you choose, run support, and protect the service. Current viewing progress and history stay on your device and are not synced to Astroza.

Astroza TV is operated by Boumora Labs. In this policy, “Astroza,” “we,” “us,” and “our” refer to Boumora Labs and the Astroza TV services we operate.

Questions and privacy requests can be sent to support@astrozatv.com.

Device identity and secure pairing

After you consent to connect a new device, the app creates a device record. Registration can include an installation identifier, a six-digit Device Key, a public security key, a server-assigned device identifier, platform information, and app version. The raw Android device identifier is hashed locally to derive a stable installation identity and is not sent as the raw value.

Playlist and provider configuration

If you choose to add a source, we process the source name and either an M3U URL or Xtream-compatible base URL, username, and password. We may also process provider expiry information, playlist revision data, category preferences, and favorites that you choose to sync. Playlist credentials are encrypted at rest.

Optional privacy passkey

If you set a privacy passkey, it is sent once over an encrypted HTTPS connection so the service can store a one-way verification value. The app does not retain the plaintext passkey after it is submitted.

Website, session, and security data

The setup portal uses secure session cookies. Our hosting and network providers may process standard request data—such as IP address, user agent, timestamps, and security events—to deliver the service, prevent abuse, and diagnose reliability issues. We do not use this website data for behavioral advertising.

Support communications

If you contact us, we process the details you provide, such as your email address, device type, app version, and message. Do not send us playlist passwords or provider credentials in a support request.

Current watch progress and viewing history are stored on your device and are not uploaded to the Astroza portal. Catalog data, provider credentials used by the player, artwork, and local history are also excluded from Android cloud backup or device transfer where supported.

The app contacts the provider or playlist endpoint you configure to retrieve catalogs and media. That traffic is governed by the privacy practices of your chosen provider. Boumora Labs is not responsible for a third-party provider’s handling of your data.

• Register, authenticate, pair, and manage your device.
• Sync the playlist settings, favorites, and preferences you choose.
• Protect the portal, rotate security credentials, and prevent abuse.
• Provide support and respond to data-rights or legal requests.
• Maintain reliability and comply with applicable law.

Where applicable, we rely on performance of our agreement with you, your consent, our legitimate interests in operating and securing the service, and compliance with legal obligations.

We do not sell or rent personal information. We do not share it for cross-context behavioral advertising. We may share limited information with infrastructure providers that host, secure, or deliver Astroza, including Cloudflare services used for application hosting and data storage. These providers process information under their own contractual and security obligations.

We may also disclose information when required by law, to protect users or the service, or as part of a business reorganization subject to appropriate safeguards and notice where required.

Device records, encrypted source configuration, and synced preferences are generally retained while the device remains connected and for a limited period needed for backups, security, dispute resolution, and legal obligations. Support correspondence and security logs are kept only as long as reasonably necessary for those purposes.

You can request deletion of your server-side Astroza device data by following the steps on our Data Deletion page. Deleting server data does not clear local app data; clear the app’s storage or uninstall it to remove data held only on your device.

Astroza uses encrypted HTTPS transport, signed device challenges, short-lived authentication tokens, secure session cookies, hashed Device Keys, and AES-256-GCM encryption for stored playlist credentials. No system is perfectly secure, so keep your Device Key, provider access, and device under your control.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of certain personal information. You may also withdraw consent where processing relies on it. We may need to verify that you control the relevant device before acting on a request.

To exercise a right, email support@astrozatv.com or use the support form. You may also have the right to complain to your local data-protection authority.

Astroza is not directed to children under 13, or the higher minimum age required in a particular country. We do not knowingly collect personal information from children. A parent or guardian who believes a child has provided information should contact us so we can investigate and delete it where appropriate.

Our providers may process information in countries other than your own. Where required, we use contractual or other recognized safeguards for international transfers while preserving any mandatory local rights.

We may update this policy as Astroza changes. The date at the top shows the latest revision. Material changes will be highlighted through the app, website, or another reasonable channel when required.

Contact: Boumora Labs, support@astrozatv.com.