Privacy Policy

Effective October 29, 2026

This policy explains how Mars Voyage LLC handles information in Awesome IPTV and its Meridian caption service. It applies to the iPhone, iPad, Apple TV, and Mac apps and to merid.live.

Who is responsible

Mars Voyage LLC is responsible for deciding why and how the information described in this policy is processed. Privacy questions and requests can be sent to privacy@merid.live.

What stays on your device

Your playlist URLs, provider usernames and passwords, favorites, profiles, and viewing library are stored by the app on your device. Sensitive playlist credentials are stored in Apple Keychain. Awesome IPTV connects to sources you choose; it does not upload those credentials or your complete playlist to Meridian.

Information used by Meridian

Cloud captions and translation

Cloud processing is off until you consent. If you request generated captions, the app sends short live-audio chunks to Meridian. If you request cloud translation for subtitle text, the app sends the subtitle text needed for that translation. Meridian routes the request to an enabled provider and returns caption text to the app.

Raw audio is processed as a live stream and is not stored in Meridian's database or diagnostic logs. Full source and translated caption text is not written to persistent Meridian diagnostics. A selected AI provider may process the request under the account terms listed on our AI Service Providers page.

App, purchase, and entitlement identifiers

The app creates a random app-instance identifier and uses Apple App Attest to help prevent abuse. Meridian verifies App Store transactions and may store hashed transaction, account, and device references, product identifiers, purchase state, AI usage balances, grants, reservations, and adjustments. These records support entitlement checks, synchronize credited AI Hours, prevent duplicate grants, meter AI Hours, and resolve support requests.

Operational and diagnostic information

When diagnostics are allowed, Meridian records route decisions, selected provider, language and confidence, timestamps, latency, result counts, failure reasons, freshness, and estimated provider cost. These events do not contain raw audio, full caption text, playlist credentials, stream URLs, or usernames. We do not intentionally add IP addresses to caption diagnostic events. Our hosting providers necessarily process network addresses to deliver and secure requests.

Website information

This public site does not use analytics cookies, third-party tracking pixels or persistent visitor profiles. The browser player automatically sends first-party usage and technical events when measurement is enabled for the service. These cover page opens, imports, playback attempts and confirmed starts, pauses, resumes, failures, guide requests, app-button clicks, active viewing time and reported buffering. Events can include the interface language, coarse browser family and major version, operating-system family, app destination layout, source type, imported channel count, startup time, exposed HTTP status, video dimensions, codec families and the basis for codec information. Unavailable details remain unknown.

Random page-session and playback identifiers join events within the current page. They are held in memory, replaced on a new page load and are not stored in an analytics cookie or browser storage. They do not identify a named person, account or a lasting visitor. For recognised channels from the public Free-TV preset, the service adds the public channel name and groups from its own catalog lookup. Other viewing events are recorded without private channel or programme names, source addresses, credentials, or persistent visitor identifiers. Unknown public entries remain unnamed. These records are private operational information, not a public viewing feed.

The web player automatically saves one playlist, its favorites, viewing history and any provider sign-in details in this browser. Remove playlist clears that saved library. On a shared device, remove it when you finish. If browser storage is unavailable, the player keeps the library only for the current session. The app can keep multiple playlists.

Playlist and Xtream provider-account imports first try your browser, subject to browser and provider access restrictions. If that connection fails, our catalog service attempts the import. Sources that cannot be requested directly by the browser use the catalog service. Provider-account programme guides also use the catalog service. Credentials and source addresses sent to that service are processed transiently for the request and are not included in player analytics. To limit abuse, the catalog service keeps bounded, in-memory request counters and temporary cooldowns for destination hostnames and IP addresses. These controls do not store account credentials or complete source URLs. Video is requested by your browser from the media provider; we do not relay or record it. Browser support and provider access restrictions can limit importing and playback.

We also use aggregate server-side counters for successful requests to known public pages, App Store buttons, and Synology download links. These are request counts, not unique visitors: repeat requests, automated crawlers, link scanners, and our own checks may be included, while browser-cached views may not reach the server. The counters use only fixed page and button codes, without IP addresses, browser strings, or visitor identifiers as metric labels. Google Cloud request logs used to operate and secure the site can contain a network address, requested URL, browser user-agent, timestamps, and technical request details. The protected admin site is for authorised Meridian operators and uses its own authentication and security records.

How information is used

• Provide playback-related captions, translation, purchases, balances, and support.
• Choose and recover between providers, measure quality, and control cost.
• Secure the service, prevent fraud, and comply with legal obligations.
• Diagnose failures without building advertising profiles or selling personal information.
• Understand public-site demand, player reliability and public-channel usage, and which pages or player actions lead to App Store or Synology download requests.

We do not sell personal information, use it for cross-app tracking, or serve targeted advertising.

Legal bases

Where law requires a legal basis, we process information as needed to provide the app or cloud feature you request and perform our contract with you; with your consent for optional cloud audio, cloud subtitle text, and diagnostic processing; for legitimate interests such as service security, fraud prevention, reliability, support, cost control, and understanding aggregate public-site demand; and to meet legal, tax, accounting, and payment-integrity obligations. We balance legitimate interests against the rights of the people affected.

You may withdraw consent at any time without affecting processing that was lawful before withdrawal. If you do not provide information needed for a requested Meridian cloud feature, that feature may be unavailable, but ordinary playback and native stream subtitles remain available.

Sharing

We share only what is needed with Apple for purchases and platform trust, Google Cloud for hosting, and an enabled caption or translation provider for a request you initiate. WorkOS authenticates authorized Meridian administrators and does not receive consumer caption content. We require service providers acting for us to protect information consistently with this policy and applicable law. Provider handling is also governed by each provider's terms and configured privacy controls; the current provider catalog is published on our AI Service Providers page.

Retention

Website request logs and detailed player events, including their temporary page/playback identifiers, are retained for up to 30 days. Detailed operator reports are restricted to authorised operators and follow the same retention period. Aggregate log-based metric time series are retained for six weeks. Authorized operators may keep aggregate daily reports without visitor identifiers for up to 13 months. App Store links can include a shared website campaign code; Apple reports campaign results subject to its privacy thresholds and reporting rules. We do not join those reports to individual website visitors or app devices.

Raw audio and complete caption text are not retained in Meridian's persistent diagnostics. Structured caption diagnostics are kept in a dedicated logging bucket for 24 hours. Limited copies of structured operational events may also remain in general service logs for up to 30 days. Limited admin session summaries are normally retained for seven days. Trust, security, purchase, ledger, and support records are kept only as long as needed to provide the service, prevent fraud, meet accounting obligations, and resolve disputes.

Your choices and rights

You can withdraw cloud-processing consent at any time in Awesome IPTV Settings. Turning cloud processing off stops new audio or subtitle text from being sent. Depending on where you live, you may also have rights to access, correct, delete, restrict, or object to processing; receive a portable copy of eligible information; withdraw consent; appeal a request decision; and complain to your local privacy or data-protection authority.

To make a request, email privacy@merid.live. Because Awesome IPTV does not require a consumer account, we may ask for the app's support identifier or limited purchase evidence to verify the request. Do not send playlist credentials or stream URLs. We may retain records that law, payment integrity, or security requires us to keep, and we will explain when a request cannot be fulfilled.

International processing

Meridian processing may occur in the United States and other locations where our service providers operate. Where applicable law requires safeguards for an international transfer, we rely on contractual or other recognized transfer mechanisms provided for that service. Contact privacy@merid.live for more information about the safeguards relevant to your request.

Children and security

Awesome IPTV is not directed to children under 13 or a higher minimum age where local law requires parental consent. We use encryption in transit, least-privilege cloud identities, secret storage, pseudonymous identifiers, bounded retention, and audited administrative access. No system can guarantee absolute security.

Changes and contact

We may update this policy as the product or law changes. When a material cloud-processing policy changes, the app can require consent again before sending new content. Questions may be sent to privacy@merid.live or support@merid.live.