Privacy Policy

Effective date: April 3, 2026 · App: Tivolo · Developer: Vijay Murali

    Short version: Tivolo stores your server credentials locally in the iOS Keychain.
    Nothing is sent to us. We have no servers, no analytics, and no tracking of any kind.
  

1. Who We Are

Tivolo is a personal media player app for iOS and macOS, developed by Vijay Murali ("we", "our", "us"). This policy describes how the app handles your data.

2. Data Stored on Your Device

Tivolo stores the following data locally on your device only, never on our servers:

Server credentials (server URL, username, password) — stored in the iOS/macOS Keychain using Apple's secure storage APIs. This data never leaves your device to any server operated by us.
Channel cache — a local SQLite database of channel and category metadata fetched from the media server you configure. Cleared automatically on logout.
Recently watched history — stored locally on your device. Never shared.
App preferences (e.g. quality settings, buffer preferences) — stored in Apple's standard UserDefaults, on-device only.

3. Data We Do Not Collect

Tivolo does not collect, transmit, or store any of the following:

Personal identification information
Device identifiers or advertising identifiers (IDFA)
Usage analytics or behavioral data
Crash reports or diagnostics sent to external services
Location data
Contact information

We operate no backend servers and receive no data from the app. We have no way to identify who uses Tivolo, when they use it, or what they watch.

4. Third-Party Servers You Connect To

Tivolo connects directly to the media server whose URL you enter. That server is operated by you or a third party of your choice — not by us. We have no control over that server's data practices, privacy policy, or security posture. You are responsible for ensuring you have the rights to access the content available on your configured server.

5. Local Network Access

Tivolo requests access to your local network to discover AirPlay and Chromecast devices for media casting. This access is used solely to detect casting devices on your network. No network traffic data is collected or transmitted to us.

6. Third-Party Open-Source Libraries

Tivolo uses the following open-source libraries. All operate entirely on-device and do not transmit any data:

GRDB.swift — SQLite database library (MIT License)
KeychainAccess — Keychain access wrapper (MIT License)

7. Children's Privacy

Tivolo is not directed at children under the age of 13. We do not knowingly collect any personal information from children. Since the app collects no personal data at all, there is nothing to collect from any age group.

8. Your Rights (GDPR & CCPA)

Since we do not collect or store any personal data on our end, there is nothing for us to provide, correct, export, or delete. All app data exists solely on your device.

To delete all data associated with Tivolo:

Tap Settings → Sign Out in the app — this clears all credentials and cached channel data.
Delete the app from your device — this removes all remaining local data including the Keychain entry.

We do not sell personal information. We have no personal information to sell.

9. Security

Your server credentials are stored using Apple's Keychain, which encrypts data at rest using AES-256. On iOS, iCloud Keychain sync is used to securely carry credentials across your devices. Tivolo uses HTTPS for connections where the configured server supports it.

10. Changes to This Policy

If this privacy policy changes, the updated version will be posted at this URL with a revised effective date. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this privacy policy, please contact: opposer_widths9m@icloud.com