Condwell — Privacy Policy

Last updated: October 9, 2026 · Version 1

Condwell ("app", "we") is a media player application for Smart TVs that plays playlists in the Xtream Codes format. It is licensed per device. The app does not provide, distribute or host any audiovisual content, TV channels, movies, series or third-party playlists: you register a media source you already own, and the content is your responsibility. This policy explains which personal data the app processes, why, for how long, with whom it is shared and how you can exercise your rights.

1. Controller and contact

Condwell (operated by Rheider Abe, Brazil). Support and privacy requests: suporte@condwell.com.br. Website: condwell.com.br.

2. Consent before any collection

On first launch the app shows a privacy notice and asks for your consent. Nothing is sent to our server before you accept. If you decline, the app closes and no data is collected. You can withdraw consent at any time in Settings → Privacy policy → Withdraw consent; the app then deletes its local data and stops communicating with the server until you consent again.

3. Data we collect, purpose and retention

DataPurposeRetention
Device identifier (the TV's MAC address where the platform provides it, otherwise a random identifier generated on the device), TV model and platform, app version, system languageActivate and license the device, enforce the device limits of your provider's code, show the provider's visual themeWhile the device is active and up to 12 months after the last access
IP addressNetwork connection, abuse prevention, country-level statisticsServer logs: up to 30 days
Playlist credentials (server URL, username, password) you registerReconnect to your media source without asking again. Stored encrypted (AES-256-GCM)Until you remove the playlist or the device, or 12 months after the last access
Presence signal every 60 seconds: whether playback is in progress and the numeric item identifier in your playlistShow the provider how many devices are online and keep the license status current. We do not send titles, browsing history or what you watchedOnly the latest value is kept; not stored as history
Parental-control PIN and local preferencesHide adult categories on this TVStored only on the TV; never sent to the server

We do not collect names, e-mail addresses, dates of birth, payment data, location, voice, images, viewing history or any sensitive personal data (health, biometrics, government identification numbers).

4. Sharing with third parties and processors

RecipientWhatPurposeRetention
The provider that issued your access code (the "DNS code")Device identifier, model, platform, license status, last time onlineManage the devices covered by its code (activate, block, remove)Same as section 3
Hostinger International Ltd. (hosting of our server, data center in Brazil)All data in section 3, on our behalf, under a data-processing agreementInfrastructureSame as section 3

We do not sell personal data. The app contains no advertising, no analytics SDKs and no third-party trackers. Video is fetched by the TV directly from your media source; it never passes through our server. Data may be transferred to the country where our hosting provider operates; we require contractual safeguards for such transfers.

5. Your rights

You may request access to, correction of, portability of or deletion of your data, and object to or restrict its processing, by e-mailing suporte@condwell.com.br. We answer within 15 days. On the TV you can view your device identifier in Settings, delete local data with Clear data, remove playlists in Playlist and withdraw consent as described in section 2. Your provider can also remove your device from its panel. Residents of Brazil have the rights of the LGPD (Law 13.709/2018); residents of the EEA/UK the rights of the GDPR; residents of California the rights of the CCPA; residents of Korea the rights of the PIPA.

6. Deletion

When the retention period ends, when you withdraw consent and request deletion, or when the service is discontinued, data is deleted from our database and backups are overwritten within 30 days, in a way that prevents recovery.

7. Children

The app is not directed at people under 18 and is rated 18+ in the TV app store. We do not knowingly collect personal data from minors. If a minor's data was provided, a legal guardian may contact us to have it deleted. The app includes a PIN-protected parental control that hides adult categories of the user's playlist.

8. Security

All communication between the TV and our server uses TLS (HTTPS). Playlist credentials are stored encrypted with a key that is not in the database. Access to the server is restricted to the operator with key-based authentication; the database is not reachable from the Internet; backups are kept for 30 days. Access to personal data is limited to the minimum necessary.

9. Changes

If we change this policy in a way that affects your data, the app will ask for your consent again on the next launch. The version number and date at the top identify the current policy.