Decleb Privacy Policy

Last updated: 4 November 2026.

Publisher and data controller: Novalis LTD. Privacy and support: apps@novalisltd.com.

Your library stays on your device

Decleb is a player. We do not provide video content or content-provider subscriptions. No Decleb account is required. Sources, provider credentials, favorites, profiles, settings, reminders and playback positions are stored in the app’s private device storage. We do not upload this library to a Decleb library server or send it to AdMob. We do not sell your viewing history.

The private document containing the catalogue and provider credentials is encrypted, with its key kept in system secure storage. Some preferences and cached artwork are not individually encrypted. An app PIN restricts access within the app; it cannot guarantee the security of a compromised device.

Backups you control

Plus lets you export and restore a password-protected encrypted file. You select its destination: local storage or an available document provider, such as Google Drive. Decleb does not automatically synchronize backups. Your selected provider may process file names, sizes, dates and technical metadata under its own terms. We do not receive and cannot recover your backup password. Restoring replaces the local library.

Content providers, artwork and casting

Your device contacts your configured content and artwork servers to import catalogues and play media. These services receive the required requests, IP address and, where applicable, provider credentials. HTTP sources do not encrypt those exchanges in transit; use HTTPS when offered. We do not control these services or their content.

When you use Chromecast or AirPlay, the chosen receiver receives the playback information, including a stream URL that may contain provider credentials. Chromecast displays a disclosure before transfer. Use a trusted receiver. Casting components may process technical information under their providers’ terms.

Advertising in the free plan

When ads are enabled, we use Google AdMob and its User Messaging Platform (UMP). We request non-personalized ads; this does not mean no data is processed. The SDK may process IP addresses, device identifiers, ad interactions and diagnostic information for ad delivery, measurement, security and fraud prevention.

We do not supply your IPTV credentials, catalogue, favorites or viewing history to the advertising SDK. Applicable privacy messages are presented and ads are requested only when UMP permits them. Where required, privacy options are available in settings. Google processes data under its own policies and your choices. While Plus is active, no new ads are requested and advertising placements are removed. Decleb ads do not interrupt playback.

Google information: https://policies.google.com/privacy and https://policies.google.com/technologies/ads.

Purchases and Plus verification

Google Play handles payments, renewals, cancellations and refunds. Decleb does not receive bank or card details. Our verification service on Google Cloud Run receives purchase proof, a product identifier and a Play Integrity token, and checks authenticity, plan and validity with Google. Connectivity and hosting also process technical information, including IP addresses and information needed for security.

The service does not receive your sources, provider credentials, favorites or viewing history. It has no central Decleb account or library database. Purchase tokens are processed for verification and are not deliberately written to application logs. Google Play notifications are used to check subscription changes. Logs may include technical outcomes and product identifiers, without IPTV content or purchase proof. Your device securely stores purchase proof and an expiry date for bounded offline access.

Information website and support

Decleb’s information website is hosted by Netlify. Visiting the pages sends the host the technical information needed to serve and secure them, including the IP address and request information. The pages supplied by Novalis LTD add no audience analytics tool or advertising tracker. The host’s policies are available at https://www.netlify.com/privacy/.

If you contact us by email, we use your address and message to handle your request and follow-up. Do not send source passwords, backup passwords or PINs to support.

Purposes and legal grounds

Local storage and purchase verification provide the features and subscription you request. Integrity checks and technical logs protect the service and prevent fraud. Advertising processing is subject to required consent and applicable regional rules. Google, content providers and any document provider also apply their own obligations and policies.

Retention, deletion and recipients

Local library data and caches remain until removed in the app, cleared through device settings or uninstalled. Exported backups remain at your chosen location until you delete them. Uninstalling does not cancel a Google Play subscription.

Routine technical logs from the verification service are retained for 30 days in Google Cloud Logging. Certain mandatory infrastructure audit logs are retained for 400 days by Google Cloud; this service-imposed period does not mean your viewing history is stored. These periods were observed in the project on 4 November 2026. Queued billing messages may be retained by Pub/Sub according to its configuration; the deployment specifies seven days. Technical data processed by Netlify, advertising services or providers you choose follows those providers’ retention periods and criteria as described in their policies. Support messages are used to handle the request and follow-up; additional retention may be necessary for a dispute or legal obligation.

Recipients include the necessary technical providers: Google for advertising, consent, billing, verification, casting and hosting; Netlify for the information website; configured content/artwork providers; and a document provider if you choose one. Some providers may process data internationally. Their policies and terms describe processing locations and applicable protection mechanisms. The Decleb verification service runs in europe-west1; this does not guarantee that all third-party processing stays in the European Union.

Your choices and rights

Manage local data and advertising choices in the app, subscriptions in Google Play and exported backups with your selected storage provider. Contact apps@novalisltd.com for technical-data questions or requests. Include information relevant to your request without disclosing provider credentials; no Decleb account exists through which we could retrieve a local library. Applicable law may provide access, correction, deletion, restriction, objection and portability rights and the right to complain to a supervisory authority. We cannot retrieve a library stored only on your device or recover a lost backup password.

Changes

The public policy will show its update date and will be revised when features or data processing change.

Authorized evaluation access

If you enter an evaluation code supplied by Novalis LTD, the code and a Play Integrity attestation are sent over HTTPS to the verification service to authorize Plus features without a purchase. The code and grant are stored in device secure storage, outside library backups. The server holds a code digest, not a user account; application logs do not contain the code. Each authorization lasts at most 24 hours before renewal. Deactivating evaluation access in settings removes it from the device. The manually imported review source contains only an openly licensed short film and explicitly labelled sample metadata. Its hosting providers may receive the IP addresses and requests necessary to access it.