Privacy Policy

Last updated: 19 October 2026

Scope

This policy covers the Haun Player app for iPhone, iPad, Mac and Apple TV ("the app") and the haun.app website. The developer and data controller is Mümtaz Uğur Karadeniz ("we").

What we don't collect

Haun Player does not:

• collect, sell or share your personal information;
• use an advertising identifier or show ads;
• contain analytics, attribution or tracking tools;
• send your IPTV account details, playlists, watch history or favorites to any server of ours.

The app's privacy manifest submitted to Apple declares no tracking and no collected data.

What is stored on your device

To work, the app stores on your device:

• Provider details: the Xtream Codes server address, username and password, or the M3U link. Passwords are kept in Apple's Keychain.
• Profiles, favorites, watchlist, watched marks and resume positions: in the app's own storage.
• Cache: channel and content lists, the guide and images, temporarily so the app opens quickly; it refreshes and clears itself.
• Preferences: the active profile, language, subtitle and player settings, the Home layout, hidden categories.
• Parental lock: not the PIN itself but a salted hash of it, in the Keychain.
• Apple TV Top Shelf: where you left off and recent additions shown on the Home Screen, in a shared area on the device.

This information stays on your device unless you turn on iCloud sync. Deleting the app removes it from your device.

iCloud and Sign in with Apple

Sign in with Apple is optional and only used to sync between your devices. If you turn it on, the app uses Apple's iCloud key-value store and CloudKit's private database: your profiles, favorites, watch history, hidden categories and some settings are stored in your own iCloud account.

Provider passwords and parental lock settings are kept in CloudKit's end-to-end encrypted fields; the key exists only on your devices. We have no access to your iCloud content. This data is governed by Apple's Privacy Policy.

Sign in with Apple gives the app only a private, unguessable identifier. If you choose to share your name or email, they are stored only on your device and never sent to us.

Services the app connects to

To do its job, the app connects directly to these services. They can see your IP address and are governed by their own privacy policies.

• Your IPTV provider: the app connects directly to the server or M3U address you add and loads lists, the guide and streams from there. When you sign in, your username and password go straight to that provider, not to us. How your provider handles your data is governed by its own privacy policy and terms; we are not affiliated with any provider.
• TMDB (The Movie Database): to fill in missing posters, backdrops and plots, the title, year, TMDB id if known, and your interface language are sent to TMDB, and images load from TMDB's servers. Your account details and watch history are never sent. TMDB privacy policy.
• YouTube: only when you tap a trailer, it opens in the YouTube app or your browser.
• Apple: App Store purchases, iCloud, Sign in with Apple, AirPlay, and Siri and Shortcuts (Apple processes what you say to Siri). Apple privacy policy.

Phone setup on Apple TV: when you choose it, your Apple TV opens a page on your local network for 10 minutes, at a random one-time address. What you type on your phone goes straight to your Apple TV without passing through the internet, and the page closes when the time is up.

Permissions

On iPhone and iPad the app may ask for local network access if you add a server on your local network, and on Apple TV if you use phone setup. On Mac it uses the network inside Apple's app sandbox. The app does not ask for location, contacts, photos, camera or microphone access.

Purchases

The trial and the purchase run through Apple's App Store. Apple handles payment and refunds; your payment details never reach us. The app checks your purchase on the device with Apple's StoreKit.

Diagnostic logs

For troubleshooting, the app keeps short technical logs in memory only while it runs. They are never exported or sent anywhere.

If you have chosen to share analytics with app developers in your device settings, Apple may provide us with crash reports and general usage statistics that do not identify you. You can turn this on or off in your device's Privacy & Security › Analytics & Improvements settings.

Deleting your data

In Settings › Delete Account you can delete the profiles on this device or your Haun Player data in iCloud. Removing the app deletes the data on the device. You can also manage iCloud data in your device's iCloud settings.

Children

Haun Player is a general-audience media player. It is not directed at children under 13 and does not knowingly collect personal information from children. The parental lock lets you hide chosen categories until a PIN is entered.

The haun.app website

This website uses no cookies, analytics or tracking tools and has no forms. It is hosted on Cloudflare Pages; to deliver the pages and protect them from attacks, Cloudflare may process your IP address and browser details in short-lived server logs. Cloudflare privacy policy.

Your rights

Because we neither collect nor process your personal data, requests under the GDPR or Turkey's KVKK for access, correction or deletion mostly concern the data on your devices and in your iCloud, which you can manage yourself as described above. You are welcome to write to us with any question.

Changes

We may update this policy as the app evolves. Material changes are published on this page with a new date. Continued use of the app after an update means you accept the revised policy.

Contact

Questions about privacy: [email protected]