Privacy Policy - sTeVe

Last updated: September 27, 2026

1. Developer Information

sTeVe (Google Play package: steve.abb) is an IPTV application developed by AAAukcie s.r.o. & OSTV s.r.o., registered in the Slovak Republic. For any privacy-related inquiries, you can contact us at info@steveiptv.eu.

2. Application Purpose

sTeVe is an IPTV player for Android TV and Android mobile devices. It delivers live TV channels, EPG (electronic program guide) and video-on-demand content from the user's chosen IPTV provider. The application supports two server types: OneStream and TLS-based providers, and it additionally includes the integrated sTeVe Cam module for viewing IP cameras over RTSP within the user's local network.

2a. Apple devices (iPhone, iPad, Apple TV, Mac)

sTeVe is also available on the App Store (bundle ID: sk.ostv.steve) for iPhone, iPad, Apple TV and Mac, published by OSTV s.r.o. The Apple version processes data as described in this policy, with these differences:

3. Data Collection and Usage

sTeVe collects only the data necessary to provide the service. The application does NOT collect any analytics data, does NOT use Google Analytics, Firebase Analytics, Crashlytics or similar tools, and does NOT use any advertising identifiers (AAID).

Activation flow (QR + email + one-time code): on first start the application shows a QR code containing a link to our license server lic.isptv.sk. The URL includes the device identifier (Android ID), the platform (Android TV / Android mobile), the device model, the Android version and the application version. After you scan the QR code with your phone, you enter your email address on our website; the server sends a one-time activation code to that email. You then type the code into the Steve application. Once verified, the server issues an authentication token.

Email and authentication token: your email address is stored on the license server (linked to your account) and the authentication token is stored locally on the device so you don't have to sign in repeatedly. Sensitive credentials (e.g. the optional "own server" username and password) are stored on the device using EncryptedSharedPreferences (AES-256, key in Android Keystore).

Provider selection and provider credentials: the choice of IPTV provider (e.g. isptv, OneStream-based providers) and any provider-specific credentials (username, password, server URL) are entered by the user on our website (mobile browser), not inside the application. These credentials are bound to your account on the license server. The Steve application itself does not normally ask you to type provider usernames or passwords — it uses the authentication token to retrieve TV content for your account. An advanced "own server" mode (where the user types URL, username and password directly into the application) is available only when explicitly enabled by the license server.

Device and environment information: on every license request the application sends the Android ID (Settings.Secure.ANDROID_ID, generated by the Android system and not linked to your personal identity), the platform type (Android TV / Android mobile), the device model, the Android version and the application version. This information is used to verify the license, to bind the activation to a specific device, and for compatibility and abuse-prevention purposes.

Approximate location (city, country, IP address): to detect your preferred language and to display localized content, the application performs a GeoIP lookup against the third-party service ip-api.com. The lookup returns your approximate location (IP address, country code, city) which is then also included in license API requests to lic.isptv.sk for security and abuse-prevention purposes. No precise GPS or network location is collected.

The application does NOT collect: precise location (GPS or network), contacts, calendar, SMS, microphone, device camera, advertising identifier (AAID), photos or files outside the application's own storage, web browsing history, or any analytics about your in-app behavior.

4. Purpose of Processing

We process data exclusively for: license and activation verification (contract performance), delivery of TV content, streams and EPG (contract performance), security of API requests via HMAC signature (legitimate interest), and application updates via Google Play (contract performance).

5. Recipients of Data

Data is sent only to the following servers necessary for the service to operate:

Communication with lic.isptv.sk and the IPTV/EPG/VOD servers is encrypted using HTTPS (TLS 1.2+). License requests are additionally signed with HMAC-SHA256. The GeoIP lookup against ip-api.com is performed over HTTP. We do NOT share your data with any third party for advertising, analytics or other marketing purposes.

6. Integrated sTeVe Cam Camera Module

sTeVe includes the integrated sTeVe Cam module for viewing IP cameras over RTSP within the user's local network (LAN). All camera streams are processed locally on the device. No camera feeds, video streams, snapshots or recordings are ever transmitted to the developer, third parties or any external server. Camera settings (RTSP URLs, layout) are stored locally on the device only.

Optional local FTP server (for the user's own recordings): the embedded sTeVe Cam module includes an optional FTP server that operates exclusively inside the user's local network (LAN). Its only purpose is to let the user download their own RTSP camera recordings to another device on the same network (PC, phone, NAS). The FTP server is disabled by default, must be enabled manually by the user, can be protected with a PIN, and is never reachable from the public internet. While the FTP server is active, sTeVe runs an Android foreground service so that the user can see at all times that the sharing is on; the service serves only the user's own files and does not transmit any data outside of the LAN, does not contact the developer, and does not contact any third party.

7. Data Retention

On the device: your email address and authentication token are stored encrypted until you sign out or uninstall the application. On the servers: your email and any provider credentials you entered on the website are associated with your account and retained for the duration of the contractual relationship with your IPTV provider.

8. Your Rights (GDPR)

Under the GDPR you have the right to access your data, to rectify inaccurate data, to erasure ("right to be forgotten"), to restriction of processing, to data portability, to object to processing, and to lodge a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR).

Account deletion: send a request to delete your account and all associated data to info@steveiptv.eu. We will process the request within 30 days. Inside the application you can sign out at any time via Account → Sign out, which removes the login credentials from your device.

9. Children's Privacy

The application is not directed at children under the age of 13 and does not knowingly collect personal data from them.

10. Android Permissions

The application requires the following permissions for its core functionality: INTERNET (to access IPTV servers and RTSP camera streams), ACCESS_NETWORK_STATE (to detect network availability), WAKE_LOCK (to keep the screen active during playback), FOREGROUND_SERVICE (for continuous playback), REQUEST_INSTALL_PACKAGES (only for installing application updates downloaded from our update server). Each permission is used solely for the stated purpose and not for collecting user data.

11. Changes to This Policy

In case of significant changes to this policy we will notify you directly in the application and update the "Last updated" date at the top of this page. Continued use of the application after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or the application's data practices, please contact us at:

AAAukcie s.r.o. & OSTV s.r.o.
Email: info@steveiptv.eu
Web: steveiptv.eu