Privacy Policy

1. Who processes your data

SK PLAYER, the party responsible for the player app. Contact details at the end.

This policy applies to the SK PLAYER and BagPlay apps, which have the same responsible party; what is specific to BagPlay is in section 14.

This policy covers the app. Your channel list is a separate relationship, with whoever provides it to you, and subject to the data processing of that person or company.

2. What the app collects

Data	Purpose
Activation code	to identify the device activation
Device identifier	to distinguish devices whose short codes coincide
Device model and name	support and diagnostics
Platform and app version	to know whether you are on a version with a known defect
Usage record (the day the device signed in through managed access, the platform and the version)	to count the devices in use on the administrator’s account, which is the basis for billing the management service, and for support
Reseller ID, username and password for the access (only if you sign in through “Reseller ID” or “I already have a login”)	to verify the access and unlock your playlist, over HTTPS; they stay in the registration the administrator keeps in the panel and are not used for anything else
Playlist address (with the server username and password), with managed access	to deliver the playlist to your device; it is registered by the administrator, or by you, under “Manage playlist” on the website
Apple purchase receipt (iPhone, iPad and Mac, only if you subscribe)	to validate the subscription — see section 7-A
Error report (when the app fails)	to fix failures; it carries the error text, version, system, model and device code, without addresses, usernames or passwords (they are removed before sending); on iPhone, iPad and Mac it includes the subscription status (for example, active or expired), never the receipt

About the identifiers: they are not a serial number, they are not a MAC address and they do not identify you as a person — they identify the installation. On Android and TVs, they are derived from a value that the platform provides to the app, specific to that device.

On iPhone, iPad and Mac, the identifier is a random code created by the app itself at installation and stored in the device’s Keychain. It is not Apple’s advertising identifier and cannot be used to track you. It remains in the Keychain even if the app is uninstalled — that is why the device code comes back the same when you reinstall.

The app’s sign-in screen checks the panel with the device code and identifier to know whether it has already been registered, even for those who only use their own playlist.

3. What the app does NOT collect

• name, CPF (Brazilian individual taxpayer number), RG (Brazilian identity card number), date of birth, address or phone number
• email
• payment data
• sensitive data (racial origin, religion, political opinion, health, biometrics)
• history of what you watch
• content of your playlist

Content does not pass through us. The app connects directly to the playlist server to play it. With managed access, the playlist address stays in the panel (section 2). With your own playlist on iPhone, iPad and Mac, the address, username and password stay only on the device and are not sent to the panel.

4. What stays only on your device

Stored locally, without leaving the device:

• favorites
• playback history (“continue watching”) and recent channels
• preferences (audio language, time format)
• parental PIN, stored as a salted hash — never in plain text
• the activated session (if you signed in through Reseller ID, it includes the username and password for that access)
• your own playlist on iPhone, iPad and Mac (address, username and password)

When you uninstall. The system deletes the app’s files, with these exceptions. On iPhone, iPad and Mac, what is in the Keychain may remain stored: the device identifier, the last known subscription status and, if you did not use Sign out first, passwords from old sessions, which are no longer used. On Android, the device code comes back the same when you reinstall, because it comes from a system identifier, and recordings saved in a folder you chose stay there. Uninstalling does not delete what is on our server: for that, see Account and data deletion.

Deleting without uninstalling. Under Settings → Privacy, “Clear viewing history” deletes the history, “continue watching” and recents (favorites stay). The larger cleanup is under Settings → Maintenance and varies by device:

• iPhone, iPad and Mac — “Clear app data” (the same as Sign out) deletes the session, the playlists, the stored passwords and the device key. What stays: the device identifier, the remembered ID and username (without the password), the language, the terms acceptance and the last known subscription status.
• SK PLAYER on Android — “Clear data and cache” deletes the catalog, favorites, history and preferences, but keeps the activation and the access (including the password) so you can keep signing in; “Reset app” also deletes the activation. The parental PIN and some preferences are only removed when you uninstall.
• BagPlay on Android — “Clear app data” deletes favorites, progress, PIN, session, playlists and the stored login.

On other platforms, the options are in the app’s Settings; if you are unsure what each one deletes, write to support.

5. Incognito mode

The app has an incognito mode. When it is on, no history or recent channels are recorded — not even locally. It is an option that does what it promises: it does not record “just a little bit”.

6. Legal basis (LGPD — Brazil's General Data Protection Law)

• Performance of a contract (art. 7, V) — the activation code and identifier, without which there is no way to activate the device
• Legitimate interest (art. 7, IX) — device model, version and error report, for support and fixes, always to the minimum necessary

7. Sharing

We do not sell your data. We share only:

• with Google or Cloudflare, the name of your playlist's server (the address, without username or password) — only if you choose that option in Settings → Network → Network DNS. It is the question “what is this server's number?” sent to the DNS-over-HTTPS service (dns.google or cloudflare-dns.com). As with any connection over the internet, the service also sees the public IP address of your connection and the app's identification (version, model and operating system of the device), and processes this data under the privacy policy of each of them. In Automatic mode (the default) none of this is sent;
• by legal or court order.

7-A. Purchases and subscription (iPhone, iPad and Mac)

Payment is processed by Apple: we do not receive card data, your name or your Apple ID. The app reads the subscription state on the device through StoreKit. To verify the right of access, the app may send our panel the Apple-signed receipt of the transaction (product identifier, transaction and original-transaction identifiers, dates, environment and state: active, expired or refunded), and Apple may notify us of renewals, cancellations and refunds.

Purpose: to validate access, avoid duplicates and handle support requests. We keep this data for as long as needed for those purposes, using 12 months after the subscription ends as the reference period, unless a legal obligation or an authority's order requires otherwise. Because we do not store your name or email for this subscription, a deletion request should include the transaction identifier shown with the purchase. People who access the app by device code or by ID continue to be handled as described in the other sections.

7-B. Support form (optional)

If you write to us through the site, we store your email, your name (optional) and your message and, if you provide them, the platform, version and device code, only to reply to your request. Do not send passwords: the form rejects messages containing a password or a link with a username and password. The IP address is used only temporarily to limit repeated submissions and is not stored with the request. Only authorized support staff have access. We keep it for as long as needed to handle the request, using 12 months after it is closed as the reference period, and you can ask for deletion at any time.

Responsible party: Jônatan Luis Godinho. Requests for access, correction or deletion: suporte@skplayer.app.

8. How long we keep data

The activation code and status, for as long as the activation exists, plus the legal retention period. The managed-access registration (customer, devices and playlists) stays for as long as the administrator keeps it in the panel; when they remove it, it goes to the Trash and is deleted at the end of the Trash period (usually 30 days). The devices’ usage record is kept for as long as needed to bill the management service and to meet legal obligations. Error reports are deleted automatically 30 days after the last occurrence. Apple receipts and support form messages follow sections 7-A and 7-B.

9. Where your data is stored

Activation data (device code, TV identifier and error reports) is stored on a server abroad, in the United States. By using the app you agree to this international transfer, carried out solely to keep your access working and to provide support. This data is not sold or shared with other companies.

10. Security

Data is kept on a restricted-access server. The app does not transmit banking data or documents. What travels to us is the device code and identifier, the activation status and — only if you sign in through Reseller ID — the reseller ID, the username and the password for that access, over HTTPS, solely to verify the access. On iPhone, iPad and Mac, if you subscribe, also the Apple purchase receipt (section 7-A).

11. Your rights (LGPD, art. 18)

You may request, at any time: confirmation and access, correction, anonymization or deletion, portability, information about sharing, and withdrawal of consent. Just write to the contact below.

You can handle much of this yourself: local data is removed through the options in section 4 (Privacy and Maintenance) or by uninstalling the app, with the exceptions described there. To request deletion of your record from our servers, see the page Account and data deletion.

12. Minors

The app is not intended for persons under 18 years of age and does not knowingly collect data from children or adolescents.

13. Changes

We will always publish the current version at this same URL, with the date at the top.

14. The BagPlay app

BagPlay is a media player from the same responsible party. Like SK PLAYER, it does not provide, host or recommend content: it plays the playlist you received from whoever provided you with access. Everything above applies to it, with these particulars:

Data	What happens
Activation code, identifier, model and version	sent to the activation service (server in the United States), over HTTPS, to activate the device and provide support
Reseller ID, username and password (only if you sign in through “Reseller ID”)	sent to the activation service, over HTTPS, solely to verify the access and unlock your playlist; not used for anything else
Address, username and password of your playlist	stored only on your device; the app connects directly to your playlist's server, which processes your data under the policy of whoever operates it
Favorites, history, parental PIN and preferences	stored only on your device; the PIN is kept as a salted hash
Messages from your reseller	the app queries the activation service, using the device code, to display your reseller's notices

BagPlay does not collect name, CPF, email, phone number, payment data, history of what you watch or the content of your playlist, does not track you and does not sell or share data with third parties. To delete your data, see Account and data deletion.

15. Contact

Data subject service channel: suporte@skplayer.app
This is the address through which you exercise the rights under art. 18 of the LGPD. We respond within 15 days.

SK PLAYER is operated by a small-scale processing agent and is exempt from appointing a data protection officer (encarregado), under art. 11 of Resolução CD/ANPD nº 2 (ANPD: Brazil's National Data Protection Authority), of January 27, 2022, while maintaining the communication channel above.