Privacy Policy
Last updated: 2 November 2026
Teleya is a media player. It does not provide, host or sell any channels or content. You can use Teleya on one device without an account; in that case everything stays on your device and nothing is sent to us.
Who we are
Teleya is operated by [company legal name and address] (“we”). Contact: privacy@teleya.app.
What we store when you create an account
| Data | Why |
|---|---|
| Email address (if you sign in with email) | To send sign-in codes and, on request, your recovery passphrase hint. |
| Phone number — stored only as a one-way keyed hash plus a masked form (for example +90***12) | To recognise your account when you sign in with your phone. We never store the number itself. |
| Apple or Google account identifier | To recognise your account when you sign in with Apple or Google. |
| Device name, type and platform, and when it was last seen | To show your devices, enforce the five-device limit and let you remove a device. |
| Your recovery passphrase hint (text you choose) | To remind you of your passphrase if you ask for it. |
| Encrypted sync records | Your sources and their credentials, lists, favourites, progress, profiles and settings are encrypted on your device with a key only you hold. We store ciphertext we cannot read. |
| IP address | Kept in server logs and, in shortened form for up to 24 hours, to limit abuse of sign-in codes. |
We do not use your data for advertising, we do not sell it, and Teleya contains no third-party ads or ad tracking.
Services we use
- Google Firebase Authentication verifies your phone number by SMS when you choose phone sign-in. Google processes the number for that purpose.
- Sign in with Apple and Google Sign-In when you choose them.
- Cloudflare delivers our email (sign-in codes, hints), serves this website and stores our encrypted backups in the European Union.
- Trakt (optional, per profile): if you link Trakt, the app talks to Trakt directly with your Trakt token, which is kept in your device’s secure storage and synced only in encrypted form.
- TMDB (optional): titles are looked up to show posters and details.
Where your data lives
The sync server runs in Türkiye. Encrypted database backups are stored with Cloudflare in Western Europe. Where data leaves the country it was collected in, we rely on the transfer safeguards required by the applicable law (including KVKK and GDPR).
Your choices and rights
- Delete your account at any time in the app (Account & sync → Delete account). This removes everything we hold about the account, deletes the Firebase user for phone sign-in and revokes Sign in with Apple.
- Remove a device, sign out, or reset sync whenever you like.
- You may ask us for access, correction or deletion at privacy@teleya.app, and complain to your data protection authority.
Children
Kids profiles and the parental PIN are features for parents. Accounts are meant to be created by adults.
Changes
We will update this page when our practices change and show the date above.