Privacy Policy

1. Who is responsible

LeyTV is provided by Kerem Demirkol ("we", "us"). Contact: info@leytv.app. This policy describes the current LeyTV iPhone/iPad app, its broadcast extension, and the LeyTV information pages on leytv.app. Our other apps have their own policies.

LeyTV is a media player and browsing tool for sources you choose, with maps, navigation, and optional group-drive features. It does not provide an IPTV subscription, channel package, or media account. This policy is a notice about data handling, not a request for blanket consent or a waiver of your rights.

2. At a glance

• No separate LeyTV account is required. Group trips require an available iCloud account and use Apple CloudKit. The app has no developer-operated media-upload backend, advertising SDK, or third-party usage-analytics SDK.
• Your library, settings, and browser data are primarily held on your device. Websites and media providers still receive the requests you make to them.
• Screen broadcasting sends the content you authorize to the selected playback/display path; it is not uploaded to a LeyTV developer server.
• Apple handles purchases. Support emails and reports reach us only when you choose to send them, apart from information Apple makes available under its own services and your settings.
• Joining a group does not start location sharing. When you separately start sharing, group participants can see your current/last-known position and, if selected, your speed. The group data is not device-only.

3. Information on your device

Device storage uses the protections available in iOS; it is not a guarantee that data cannot be accessed on a compromised or unlocked device. The media-library directory is marked to be excluded from device backups. Other settings, website data, or system-managed records may be backed up or restored according to Apple and your device settings.

4. Websites, media servers, and other recipients

When you load a playlist, stream, artwork, subtitle, or website, your device contacts the addresses you select and the resources those services use. Those recipients can receive your IP address, technical request details, the requested content or search query, and credentials/tokens or cookies needed for that service. They may log activity, display advertising, or set cookies under their own policies. An address-bar search that is not treated as a URL is sent to Google Search.

If you link Plex, the app communicates with Plex's sign-in service using a generated client identifier and a temporary linking code, and receives an authorization token when you approve access. Other configured servers, including Jellyfin, Emby, and Xtream-compatible services, receive the authentication and playback requests needed to serve you. These providers are not operated by us.

Other recipients include Apple for platform/purchase services, the hosting and email providers used for our website and support, people/apps you select in the sharing sheet, and competent authorities where disclosure of information we hold is legally required. We do not sell or rent your personal information or use app data for cross-company advertising measurement.

Use trusted sources and networks. Some user-configured HTTP streams and local-network protocols are unencrypted; another party on the network may be able to observe or interfere with them. LeyTV is not a VPN, anonymity service, or guarantee of third-party website security.

Map searches, place suggestions, map content, and directions use Apple MapKit services. Requests can include the search terms, visible/search area, route origin and destination, and location needed for the feature. They do not require sending your media library to Apple Maps. Apple handles its services under its own privacy terms; see Apple Maps & Privacy and Location Services & Privacy. Group-drive data is also processed through Apple iCloud/CloudKit as described below.

5. Screen broadcasting and local sharing

A broadcast starts through Apple's system screen-broadcast controls after you choose it. The authorized screen can contain other apps, notifications, messages, or personal information. It is processed to show the broadcast on the playback/display destination you select. Stop sharing through the app/system broadcast controls when finished and hide sensitive information before you start.

The current ReplayKit relay discards app-audio and microphone samples; it does not implement a microphone recording or upload feature. Media you play separately can still contain audio. Temporary media processing is distinct from intentionally importing a file into your library.

The optional local-network receiver exposes a receiver identifier, device-service details, and playback/control information to compatible devices on the network. It is not an authenticated private-cloud service. Enable it only on a trusted network, and turn it off when not needed.

6. Maps, navigation, and device location

With your iOS location permission, LeyTV uses Core Location to obtain location, accuracy, timestamp, direction of travel, and available speed information. This supports the current-position marker, route guidance, rerouting, and arrival checks. A speed estimate is not a vehicle-certified speedometer. You can search for a place without enabling group location sharing.

While a map is visible or navigation is active, the app may keep receiving location updates. Active navigation, group guidance, or location sharing can continue using location in the background, including while the screen is locked, subject to iOS permission and delivery rules. iOS may show its location-use indicator. When no map is visible and neither navigation nor group sharing/guidance is active, the app stops its continuous location updates. Stopping group sharing does not itself stop location needed for an active personal route.

Changing a map tab, completing a route, or reaching a destination is not the same as withdrawing group-sharing consent. Use the dedicated Stop sharing control to stop publishing your position, and stop navigation separately when finished.

7. Group trips and optional live sharing

Cloud storage and identity: creating or accepting a group uses your signed-in iCloud account. CloudKit provides an app-specific account record identifier and sharing-participant identity/name when available. LeyTV derives a stable member identifier from that account record and uses the display name/initials and role to show who is in the group. We do not receive your Apple Account password. Group plans and shared positions are held in founder-owned CloudKit private/shared record zones, not a LeyTV-operated public media server.

Group data: records include the group name, founder/member identifiers, membership and sharing metadata, trip state/expiry, route revision, ordered stop names/coordinates, destination, planned break durations, notes, and route preferences. The founder controls the shared plan. Joining lets you view the plan and other participants; it does not itself publish your device location.

Location sharing is a separate choice: use Start sharing after reviewing the sharing controls. A published position includes your member identifier/name, latitude/longitude, measurement time, horizontal accuracy, direction/course and accuracy, and an update sequence. Speed and speed accuracy are included as usable values only if you select speed sharing. You can turn that choice off before starting sharing. The app updates the latest position for each member rather than creating a developer-maintained travel-history track.

Who can see it: the current group mode makes the plan and shared member positions visible to accepted group participants, including on connected CarPlay maps. An iCloud share link can be accepted by another person who obtains it; forwarding or publicly posting it can give unintended people access. Share invitations only with people you trust. A group invitation is not a private message to a guaranteed single recipient. We do not promise that an invitation expires after a fixed number of hours or uses.

Stopping and access: Stop sharing stops new local publication immediately and requests deletion of your last position from CloudKit. A failed network cleanup is shown for retry; do not assume that an old cloud record was erased while offline. Leaving removes your participation, subject to successful CloudKit operations. The founder must finish the trip before leaving; ownership is not automatically transferred. A successfully completed Finish trip operation deletes the shared position zone and revokes the route share. This ends shared access but is not a promise that every founder-owned trip record, Apple backup, or copy already made by another participant is erased. See Retention and deletion.

Group creation requires verified Pro access; accepting an invitation, joining, and participating do not require the participant to buy Pro. Your local Pro/access check does not grant others access to your Apple payment details. Membership, location consent, and Pro access are separate choices.

8. Purchases and Apple services

Apple processes payment and maintains the App Store transaction record. LeyTV uses verified StoreKit information, such as product identifiers, purchase/access status, expiration or revocation information, and Family Sharing eligibility, to unlock or restore Pro. We do not receive your full payment-card details or Apple Account password.

Apple may provide us with sales summaries, app analytics, crash information, and TestFlight feedback under Apple's policies and your Apple/device settings. These platform services are separate from a LeyTV-installed analytics SDK. Apple's records and a purchase are not erased merely by deleting the app. See Apple's privacy information.

9. Support and diagnostics

If you email us, we receive the email address, message, and attachments you send. If you voluntarily share a connection report, it can describe the iOS/app version, display/connection state, playback metrics, and basic audio-route categories. Release builds do not write the detailed development connection-history log or offer the development trial recorder.

We do not automatically receive your library, browser history, screen, or connection report through a developer diagnostics endpoint. Review any report, screenshot, link, or attachment before sending it. Do not send passwords, full token-bearing playlist URLs, payment information, or another person's private material. We use support information to answer requests, diagnose issues, handle rights requests, and, where necessary, protect legal rights.

10. Permissions and your choices

• Camera: used when you open the QR scanner to add a source. The scanner decodes frames on device rather than creating a developer camera-upload service.
• Files/photos: the system picker gives access to files or media you select for import; the app does not require unrestricted access to all your photos.
• Local network: needed for compatible receivers and servers on your network.
• Screen broadcasting: started through Apple's controls; you can stop it through the system controls.
• Microphone and speech recognition: requested only when you explicitly start voice search. Recognition requires supported on-device processing; LeyTV does not send your voice to its own server or save the captured audio as a recording. You review and confirm the recognized text before using it. If you use that text for a website search or other selected service, the text is sent to that service as part of your request.
• Location: requested when you use location-dependent map/navigation features or start group sharing. You control permission and precise/approximate access in iOS Settings. Group participation does not require you to publish your location. Stopping publication in LeyTV is separate from revoking system location access.

The app does not request advertising-tracking or contact-book access. Maps, navigation, and optional live group sharing use location permission; the accuracy available depends on your iOS Precise Location setting. Group trips also require an available iCloud account. Optional permissions are controlled in iOS Settings; declining a permission can prevent the feature that needs it, rather than authorizing unrelated processing.

11. This website

Opening these pages necessarily sends your IP address and request information (such as the page address, time, browser details, and potentially a referrer) to the hosting/network providers serving them. Ordinary access/security logs can be used to operate the site, investigate abuse, and maintain availability.

The supplied LeyTV pages do not include analytics pixels, advertising scripts, third-party fonts, or a newsletter form. Fonts and the app icon are served locally or supplied by your device. Clicking an external link or emailing us brings the selected provider's services and policies into use. A third-party website opened inside the LeyTV browser may have its own cookie-consent obligations and controls.

When you submit a creator application, we receive your name, contact email, platform, username, audience size, and the profile and publication links you supply. We use this information to verify eligibility, review the submission, contact you about the application, and send the promo code if approved. The form sends your submission to our creator mailbox using our hosting and email providers. We retain the correspondence as needed to administer the program and address related requests. You may contact us at info@leytv.app.

12. Purposes, legal grounds, and international processing

For information we control, the applicable grounds depend on the activity and your location: providing requested app/support functionality; legitimate interests in reliable operation, security, and handling genuine claims where permitted and balanced against your rights; legal duties; and consent where a specific optional activity requires it. iOS permissions are not blanket consent to all data use.

For Türkiye, relevant statutory grounds can include performance of a contract, a legal obligation, establishment or protection of a right, or a permitted legitimate interest; explicit consent is sought where legally required. For the EEA/UK, the corresponding grounds can include contract, legal obligation, legitimate interests, or consent, as applicable.

Apple, your chosen websites/media services, and email/hosting providers may process information in countries other than yours. Each independent provider explains its own processing. For transfers we initiate, applicable data-transfer requirements and any required safeguards must be respected; contact us for recipient/location and safeguards information concerning data we hold. Using the app does not itself waive transfer protections.

Providing the map/group service you request is distinct from your optional decision to disclose live location and speed to participants. Joining a group or buying Pro is not consent to live sharing. You can withdraw that choice with Stop sharing without leaving the group; where a specific legal consent is required, the relevant consent must be obtained separately.

13. Retention and deletion

• Library recovery copies: LeyTV keeps a protected backup of the current catalog on this device. Removing a source updates the active catalog and its normal backup. If a catalog cannot be read, recovery or an explicitly confirmed new-library action may preserve the original catalog files in a protected local recovery folder. Those copies can contain source addresses and token-bearing media links; they are not uploaded to the developer. They may remain until the app’s local data is removed. Revoke provider tokens separately when appropriate. Starting a new library does not delete imported media files.
• Remove a source to remove its library records and dedicated Keychain credential through LeyTV; revoke server/Plex tokens with that provider when appropriate.
• Remove bookmarks individually. Browser controls let you clear history or clear website data; clearing site data may sign you out. It does not delete records held by the websites.
• Local preferences, bounded histories, and imported files remain until you remove/reset them or remove the relevant app data. Temporary caches/relay files are replaced or cleaned as playback and the operating system manage them; not every cache is erased at the exact moment a video stops.
• Deleting the app removes its ordinary local container, but Keychain entries can survive uninstallation. Remove sources and revoke credentials before uninstalling if you want those removed. Apple purchases, external accounts, and separately managed backups are not deleted by uninstalling.
• We keep support correspondence for as long as needed to resolve the request and related follow-up, then only where reasonably needed for a dispute, security issue, or legal retention duty. Hosting/security records follow the provider's operational retention and any required preservation. We do not need or receive your local library to action a support-data deletion request.
• Latest group positions: a member normally has one current position record that is replaced by the next accepted update. The current display query excludes measurements older than 10 minutes. This freshness cutoff is not a scheduled physical deletion rule; an old record can remain in CloudKit until overwritten or successfully deleted.
• Sharing and trip limits: the current client limits a sharing session to up to 8 hours and no later than the trip expiry; new trips currently have a 12-hour expiry. Expiry stops normal live use/publication and hides expired data in the app. It does not itself guarantee a server-side deletion at that exact time.
• CloudKit cleanup: Stop sharing requests deletion of your latest position. Leaving removes the participant's shared-zone access. Finishing a trip deletes its shared position zone and revokes the route share when the operations succeed; errors can require retry. The founder's trip/plan record can remain in the founder's private CloudKit database after Finish trip or leaving. No automatic deletion period for that remaining record is implemented. Contact us for a deletion request concerning remaining group records; we will explain the available owner/Apple controls and assist where we can, without promising remote access we do not have. Deleting LeyTV alone does not delete iCloud records or copies another participant has already saved.

14. Your rights

Depending on applicable law, you can ask about information we hold, access or correct it, request deletion or restriction, object to certain processing, request portability where available, and withdraw consent for processing based on consent. Withdrawal does not undo earlier lawful processing. You can complain to the competent data-protection authority.

Türkiye residents can exercise applicable rights under KVKK, including learning about processing, purposes and recipients, correction/deletion where conditions are met, notification of those actions to recipients, objections to adverse solely automated results, and compensation where legally available. We do not use developer-held app data for solely automated decisions with legal or similarly significant effects.

Write to info@leytv.app with “LeyTV Privacy Request”. We may request proportionate information to verify identity and locate records, and respond within the applicable legal time limits. Do not send identity documents unless genuinely necessary through an agreed method. We cannot retrieve or delete device-only information remotely, or delete a third party's independent records. For iCloud group data, use Stop sharing and the group leave/finish controls and tell us which remaining group record your request concerns. We may need the group owner's or Apple's cooperation for records outside our access. Your request will not be rejected solely because LeyTV has no separate developer account system.

15. Children

LeyTV is not directed to children under 13 or a higher minimum age required locally. We do not knowingly seek personal information from children. Parents/guardians should supervise access to third-party content, browsers, and purchases. If you believe a child has sent us personal information, contact us so we can investigate and delete information we control where required. Third-party content is not pre-screened or guaranteed suitable for minors.

16. Changes and contact

We will update the date and version when this policy changes. Material changes will be communicated where required, and any new activity requiring consent must obtain it separately. New features or SDKs can require an updated policy; this document does not pre-authorize undisclosed future collection.

Responsible provider: Kerem Demirkol
Email: info@leytv.app
Website: leytv.app