Privacy policy
This is a translation for your convenience. Only the German version is legally binding.
1. Controller
Fatih Gürbüz, Z|F Labs
E-mail: support@zf-labs.de
You will find the full postal address in the legal notice.
2. In brief
TiviOne is an IPTV player app for LG TVs. It contains no advertising, no tracking and no usage analytics.
Your provider details, channel lists, favourites, profiles and history stay on your TV. We do not receive them.
We only process the data needed to check licences and to sell TiviOne Premium.
3. Data on your TV
The app stores the login details of your IPTV provider (server, user name, password, portal or playlist address), channel lists, programme guide, favourites, profiles, PIN, reminders and settings only locally on the TV.
The app fetches channel lists, programme data and streams directly from the provider you entered yourself, through a local service running on the TV. This data does not pass through our servers. Processing by your IPTV provider is governed by its own privacy policy.
You delete this data by removing the source in the settings or by uninstalling the app.
4. Entering details on your phone
You can optionally enter login details on your phone. The TV shows a QR code that points to a form served by the TV itself. The transfer only takes place within your home network. The link works once and expires after 15 minutes. We receive no data in the process.
5. Licence check
To unlock TiviOne Premium and check the licence, the app sends the following data to our licence server: the TV's device ID (LGUDID), a public key generated by the app and the app version. For technical reasons, your IP address is transmitted as well.
This happens when you open the purchase page or the "TiviOne Premium" page in the settings, when you restore a purchase, on the first start of a new app version and then about every three days, and daily shortly before a yearly plan ends.
The legal basis is Art. 6 (1) (b) GDPR (performance of the contract for the Premium licence or pre-contractual measures). Premium cannot be unlocked without this data. The free version sends no data to us as long as you open none of these pages.
If a TV without a licence makes a request, we store its device ID for 30 days. This lets us move a licence to that device at your request, for example when you get a new TV.
The licence server is operated by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (processing on our behalf under Art. 28 GDPR). Cloudflare briefly processes connection data such as the IP address to provide the service and protect it against abuse.
6. Purchases through Paddle
TiviOne Premium is sold through Paddle (Paddle.com Market Limited, Judd House, 18-29 Mora Street, London EC1V 8BT, United Kingdom). Paddle is the reseller ("Merchant of Record"): your purchase contract is concluded with Paddle, which handles payment, invoicing, sales tax, withdrawal and refunds. Paddle is independently responsible for the data you enter there: https://www.paddle.com/legal/privacy
From Paddle we receive the order number, your e-mail address, the device ID of the TV you bought for and, for a yearly plan, the subscription number, its status and the end of the paid period. We store this in our licence database (at Cloudflare) to assign the licence, take refunds into account and help you in support, for example when moving the licence to a new device. We do not receive payment details.
The legal basis is Art. 6 (1) (b) GDPR. We keep this data as long as the licence exists and beyond that only where statutory retention periods require it.
7. Contact by e-mail
When you write to us at support@zf-labs.de, we process your details to answer your request (Art. 6 (1) (b) or (f) GDPR). We delete them once the request is settled and no retention obligations apply.
8. This website
The website https://tivione.zf-labs.de is hosted by Cloudflare. When you visit it, Cloudflare processes technically necessary connection data such as IP address, time and page requested to deliver the site and protect it against attacks (Art. 6 (1) (f) GDPR). The website sets no cookies, loads no external fonts and uses no analytics tools.
Only the payment page (/pay), which you reach through the QR code on the TV, loads Paddle's checkout (paddle.js). Paddle processes the data needed for the payment and may set its own technically necessary cookies for this (Art. 6 (1) (b) GDPR).
9. Transfers to third countries
Cloudflare is based in the USA. The transfer is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on the EU Standard Contractual Clauses.
Paddle is based in the United Kingdom, for which an adequacy decision of the European Commission exists. Where Paddle uses service providers in other third countries, Paddle states that it secures these transfers with the EU Standard Contractual Clauses.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR).
To exercise them, contact support@zf-labs.de. For questions about a licence, please quote the TV code the app shows under Settings → TiviOne Premium.
You may also lodge a complaint with a data protection supervisory authority, in particular in the member state where you live.
Last updated
24.10.2026