Privacy Policy

WatchHub and Watch Hub Player identify our media player application and associated account services. This Policy applies to the Samsung Smart TV (Tizen) application, Android TV, Fire TV devices, and the WatchHub web panel.

WatchHub does not sell content subscriptions, provide channel lists, or host or distribute media. The application plays content made available through a compatible service that the user is already authorized to access.

Depending on the features used, we may process the following categories:

• Account and access data: activation code, account and session identifiers, configured service address, and technical credentials required for authentication and playback.
• Profile data: profile name, avatar, child-profile status, and associated preferences.
• Application usage: favorites, viewing history, watched content, playback position, duration, completion, and continue-watching data.
• Device and operational data: random installation identifier, platform, application version, limited TV/browser information, IP address, and technical or security records generated by our servers.
• Web panel data: where applicable, name, email, country, and authentication or support information provided by the user.

WatchHub does not request bank or payment card details within the TV application and does not use playback data for behavioral advertising.

We process data to:

• validate access and maintain the application session;
• connect the user to the compatible service they configure;
• play media and display catalog information;
• synchronize profiles, favorites, viewing history, and playback progress;
• apply preferences and parental controls;
• protect accounts, revoke sessions, and prevent abuse;
• diagnose failures, provide support, and improve stability and performance;
• comply with legal obligations and respond to lawful requests.

Depending on the context, processing is based on performance of the requested service, legitimate interests in security and operation, compliance with legal obligations, or consent where required by applicable law.

On Android TV and Fire TV, credentials and session data are saved only in storage protected by Android Keystore; catalog data, profiles, favorites, viewing history, playback progress, and preferences use the application's local storage. The parental PIN uses protected storage when available and may remain in local application storage on devices that are incompatible with that secure vault. On Samsung Smart TV (Tizen), data uses the embedded browser's storage and the protection capabilities available on the TV model. Parental control settings and PIN remain on the device.

When synchronization is available for the account, profiles, favorites, viewing history, and progress are sent to WatchHub infrastructure to maintain the experience between sessions and devices. Communications with WatchHub infrastructure use HTTPS. Connections to an external service configured by the user follow the protocol and security measures offered by that service, which are not controlled by WatchHub.

We use data minimization, access controls, credential protection when supported by the platform, and logs that exclude passwords and complete tokens. No system is completely risk-free, and security capabilities can vary between TV models.

We do not sell or rent personal data. We may share the minimum necessary with:

• Supabase: authentication, database, and backend functions;
• Vercel: website hosting, technical metrics, and web performance;
• metadata and image providers, including TMDB: to retrieve visual and descriptive information requested by the application;
• the media service selected by the user: for authentication, catalog retrieval, and playback;
• authorities or providers bound by confidentiality where necessary to comply with law, protect rights, or maintain service security.

These third parties may process IP addresses and technical request data under their own policies. We limit sharing to the purpose for which it is necessary.

Some infrastructure providers may process data outside Brazil. Where this occurs, we use established providers and contractual, technical, and organizational safeguards consistent with the Brazilian General Data Protection Law (LGPD) and the purpose of processing.

Local data remains on the device while needed for operation or until the user signs out, resets application data, or removes the application, subject to the capabilities offered by the TV. The installation identifier and some caches may remain until application data is cleared.

Synchronized data is retained while the account or access remains active and for the period necessary for security, support, and legal obligations. Following a valid deletion request, we delete or anonymize applicable data, subject to temporary backups and retention required by law.

Under the LGPD, data subjects may request confirmation of processing, access, correction, information about sharing, portability where applicable, anonymization, restriction, deletion, withdrawal of consent, and objection where provided by law. Users may also request deletion of their account and synchronized data through the contact email.

We may request sufficient information to verify the requester's identity and protect the account against fraudulent requests.

Account creation and administration are intended for adults. Child profiles and parental controls must be configured and supervised by the adult account holder. We do not knowingly seek to collect children's data without the participation of a legal guardian.

Users must be authorized to access and play content made available by the service they configure. WatchHub does not control that catalog and may restrict or terminate access associated with illegal use, abuse, or infringement of rights.

We may update this Policy to reflect changes to the product, infrastructure, or law. The updated version will be published on this page with a revised date and, where necessary, an additional notice will be provided through the application or contact channels.

For questions, privacy requests, or to exercise your rights, contact the WatchHub data controller at suporte@watchhub.me.