Privacy Policy for Sarva TV
Last Updated: July 31, 2026 • Sarva Capital
Sarva TV ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how information is handled in the Sarva TV mobile and TV applications (the "App").
1. Local-First Data Storage & Playlists
Sarva TV operates primarily as a local media player client:
- User-Provided Content: The App does not host, preload, or distribute any streaming media. All M3U playlists, URLs, and streaming credentials you load are stored locally on your device in secure encrypted storage or local databases.
- No Remote Sync of Playlists: Your personal playlist links and favorites never leave your device and are never transmitted to our servers.
2. Consent-Gated Analytics & Diagnostics
To help us maintain stability, fix crashes, eliminate buffering stalls, and improve performance, Sarva TV can collect anonymous usage metrics, crash reports, and performance traces via Google Firebase (Analytics, Crashlytics, and Performance Monitoring).
- Explicit Consent Required: Data collection is disabled by default. Firebase SDK data collection does not occur unless you explicitly grant consent during first-run setup.
- Right to Withdraw: You can change your preference at any time in the app Settings > Privacy & Diagnostics by toggling analytics collection on or off.
- What is Collected (when consented): Anonymous app performance metrics, time-to-first-frame (TTFF) load times, playback error codes, and crash stack traces. We never collect channel names, watch histories, search queries, or personal identifying information.
3. Security & Anti-Abuse Verification (Play Integrity)
To protect the app ecosystem against unauthorized tampering and fake clients, Sarva TV uses the Google Play Integrity API.
- Channel Request Hashing: When loading a stream, the App evaluates device integrity. A one-way SHA-256 hash of the channel ID is bound to the integrity token and verified via a secure Cloudflare Worker backend and Firebase Cloud Function.
- Telemetry Logging: Decoded integrity verdicts are logged in a secure database for security monitoring. These logs contain device recognition verdicts and hashed request identifiers, exempt from consent requirements as permitted under Google Play User Data policies for security and anti-fraud purposes.
4. Third-Party Streams
When you play a stream, your device connects directly to the third-party server hosting that stream. External streaming providers may log your IP address or collect connection data independently. Sarva TV is not responsible for the privacy practices of external stream hosts.
5. Contact Us
If you have any questions or feedback regarding this Privacy Policy, please contact us at:
- Email: contact@sarvacapital.in
- GitHub Issues: sarva-tv-feedback/issues