IboMate Pro
Privacy policy
Who is responsible for your data
The data controller is [NAZWA FIRMY], [ADRES], VAT ID [NIP]. For anything about your data write to [E-MAIL].
IboMate Pro is a media player. We do not provide, sell or recommend any channels, lists or content — you add your own playlists.
What we collect
Device data: the MAC address (in the apps it is derived from the hardware identifier), the six-digit device key, a hashed app secret, the platform, model, system, app version and language. Without them the app cannot recognise the device or check its licence.
Connection data: the IP address and the time of the app's last contact with the server. We use them for security: spotting abuse, blocking password guessing and solving problems.
Playlists: what you enter yourself — list name, server address, the username and password for your video service, or an M3U link. We store them so the app can load your list on each of your devices. We do not inspect their content and have no access to your provider's material.
App settings: if you use cloud saving, we keep favourites, recently watched and app settings, so they survive an app update from the store. The parental PIN stays in the app and never reaches the server.
Account with a username and password: if you were given one, we keep the username, a hashed password, the device limit and the list of devices linked to the account.
Messages: the text of messages shown in the app and the fact that they were confirmed.
Why and on what basis
Device, playlist, settings and account data are processed to perform the contract — so that the app and the licence work (Art. 6(1)(b) GDPR). IP addresses, sign-in logs and abuse protection rest on our legitimate interest in the security of the service (Art. 6(1)(f) GDPR).
We run no advertising, we do not profile users and we sell data to nobody.
Who processes data for us
The server is hosted by OVH SAS (data centre in Germany). Beyond that we pass data to nobody unless the law requires it. We do not transfer data outside the European Economic Area.
How long we keep it
Device data and playlists — as long as the device uses the service. Sign-in logs and records of failed attempts — 90 days. Database backups — 30 days. The record of a purchased licence stays with the MAC address even after data deletion, because it is proof of purchase; it then contains no personal data.
How to delete your data
In the app choose "Delete device and data"; on this website sign in with the MAC address and key and use the same option. We then delete playlists, the link to an account, messages and the device's model, system and IP address. A step-by-step description is on the "Data deletion" page.
Cookies
We use only the necessary ones: being signed in on this site, the chosen language and the light or dark look. There are no advertising or analytics cookies here.
Your rights
You have the right to access your data, to rectify it, to have it erased, to restrict processing, to data portability and to object to processing based on legitimate interest. Write to [E-MAIL] — we answer within 30 days at the latest. You may also lodge a complaint with the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw).
Children
The service is not aimed at children under 13 and we do not knowingly collect their data.
Changes
When we change this policy we publish the new version on this page with the date of the change. Last updated: [DATA].