For support or privacy questions, contact Code For Broke, Inc. at support@vodar.io.
This policy covers Vodario for Apple TV, iPhone and iPad, this website, and Vodario support and beta feedback. Code For Broke, Inc. develops Vodario, operates in California, United States, and is responsible for this policy.
About Vodario
Vodario is a player for Apple TV, iPhone and iPad, for sources you provide. Vodario does not include a television subscription or content library.
Information on your devices
The app saves source settings, library data, favorites, playback progress, preferences, saved configurations, artwork caches, and source diagnostics on your Apple TV, iPhone or iPad. Connection details can include provider credentials and URLs. Credentials are used to access the sources you configure. Some information can also exist in cached stream URLs or saved configurations. On iPhone and iPad, reminders you set for programs are scheduled as notifications on the device and don’t leave it.
Requests to your providers
Your configured providers receive the requests and credentials needed to serve playlists, guide data, title information, and media. Artwork and streams may be served by additional hosts specified in the source. Those providers have their own privacy practices. HTTP connections do not encrypt traffic, so use HTTPS when your provider offers it.
Other apps
On iPhone and iPad, you can choose another app to play streams in Settings > Player. Vodario then hands each stream’s address to that app; for an Xtream source, the address includes your username and password. That app’s own privacy practices apply.
iCloud
Vodario can use your iCloud account in two ways. Apple stores this information under its own terms. Code For Broke, Inc. does not access it.
iCloud sync. If you turn on iCloud sync, by choosing Use My Setup, in Settings > iCloud Sync on Apple TV, or with Settings > Sync with iCloud on iPhone and iPad, Vodario keeps your sources, saved configurations, favorites and hidden categories in your private iCloud account so your devices can share them. On Apple TV, if you choose Everything, it keeps your preferences there too; on iPhone and iPad, sync always includes them. Sources and saved configurations, which can include provider credentials, are stored in iCloud’s encrypted fields. With Apple’s Advanced Data Protection turned on, they are also end-to-end encrypted. You can turn sync off in Settings on any of your devices.
Setup codes. When you get a setup code for a saved configuration, Vodario encrypts that configuration on your device, using the 8-character code as the key, and stores it in Vodario’s shared iCloud database. A configuration can include provider credentials and URLs. It’s stored under a name made from the code, where it can’t be listed, and encrypted with it. We don’t access it. A code works once, for 15 minutes, and the device that made it removes it from iCloud the next time it makes a code. Anyone with the code can load the configuration, so give a code only to the person it’s for.
Requests to the Vodario service
The app requests curated movie and TV lists and sports schedules from a feed operated by Code For Broke, Inc. The feed supplies information to the app without creating user profiles or storing your provider credentials, viewing history, favorites, or playback progress on the service.
The service records basic technical request information, including IP addresses, in access logs to operate, troubleshoot, and protect the service. These access logs are retained for seven days and then automatically deleted.
We do not sell personal information or use it for targeted advertising. The app does not include advertising or behavioral analytics.
This website
We use Cloudflare to deliver and protect this website and to understand its traffic and performance. Cloudflare processes network and request information, including IP addresses, to provide these services. Cloudflare is the website’s only analytics provider; we do not use website analytics to build advertising profiles.
Cloudflare’s security services may use cookies when needed to protect the site. Cloudflare retains service information according to its operational purposes and legal obligations, as described in its privacy policy. The seven-day access-log period described above applies to our feed’s access logs and does not describe Cloudflare’s separate records.
The website does not display advertising.
Support and beta testing
When you email the contact address above, we receive your email address and any name, message content, or attachments you choose to provide. Please do not send provider passwords or complete playlist or stream URLs.
You can also use the contact form on our support page. It sends the name, email address, and message you enter, and any app version or device details you add, to a form service operated by Code For Broke, Inc., along with your IP address and browser user agent. The form service uses your IP address and user agent to limit and screen out spam, stores your submission, and emails it to us so we can reply.
We use email service providers to receive, store, and respond to support messages. We use support correspondence to answer questions, troubleshoot problems, and improve the app. Access within Code For Broke, Inc. is limited to the developer and authorized support staff.
We retain support correspondence for 90 days after the issue is resolved, then delete the correspondence, form submissions, and attachments from our support records and other copies under our control. We may retain information longer when required by law or necessary to resolve a legal dispute.
During beta testing, Apple’s TestFlight service processes beta-test information under its own terms and privacy information. We use reports and feedback made available to us to investigate issues and improve Vodario. The same access limits and 90-day period after resolution apply to identifiable beta reports and feedback in our records. Apple’s retention of its own records is governed by its own policies.
Service providers
Service providers that process information for us, including our hosting, Cloudflare and email providers, may use it only to provide their services to us and must protect it at least as well as this policy describes.
Retention and your choices
You can remove a source in Settings > Sources, and saved configurations separately in Settings > Configurations on Apple TV or Settings > Sharing on iPhone and iPad. Removing a source does not clear every cache or local diagnostic entry, erase another saved configuration, or remove a provider’s records.
The retention periods above describe the records we maintain. Service providers may retain recovery copies or information needed for their own security and legal obligations under their policies. A deletion request to us covers information we control; we work with our service providers where required. Your source providers and Apple handle requests about records they independently control under their own processes.
Your rights
You can contact us at the email address above to ask about, access, correct, or delete personal information we hold about you. Depending on applicable law, you may have additional rights, including withdrawing consent where processing relies on consent. We may request information reasonably needed to verify your identity and protect other people’s information; do not send provider passwords.
We respond to privacy requests in accordance with applicable law, including any permitted exceptions and response periods. We will explain if we cannot fulfill a request, and you can reply to ask us to review the decision. We do not discriminate against you for exercising applicable privacy rights.
Children
Vodario is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us so we can review and delete it as appropriate.
International processing
Code For Broke, Inc. operates in the United States, where the Vodario feed is hosted. Information may also be processed in other countries where our hosting, website, and email service providers operate.
Changes to this policy
We will publish updates at the policy address above with an updated effective date. We will provide additional notice when required by applicable law.