Privacy policy
Last updated
Iflissen is an app for a media server that a household runs for itself. This policy explains what the Iflissen app for Android and Android TV (dev.lyes.iflissen) does with information about you. The app is published by lyes.dev.
The short version. The app sends information only to the Iflissen server you connect it to, which is run by your household, not by us. We, the developer, receive nothing: no account, no usage data, no analytics, no crash reports. The app shows no ads.
What the app sends to your household’s server
To work, the app exchanges with the server you chose:
- your account: the name, username or email address and password you sign in or sign up with, the sign-in your household’s identity provider handles in your phone’s browser, or, with a passkey, the proof that you hold it (never the passkey itself);
- your profile: your display name, avatar, preferred languages and subtitle settings, and your email address if you turn on email notices;
- your activity in the app: what you search for, the titles you ask for, follow or add to your list, and where you stopped watching, so you can pick up again;
- your device: its name and an identifier the app creates, so the household can see which devices are signed in and sign one out.
That server belongs to your household. What it keeps, and for how long, is decided by whoever runs it. Iflissen has no access to it.
What stays on your device
The server’s address, your sign-in token (kept in Android’s encrypted storage), your settings for this device, and your recent searches. Signing out removes the sign-in token; uninstalling the app removes everything.
Other services the app talks to
- Artwork for films and series is loaded from The Movie Database’s image servers (
image.tmdb.org), which see your device’s IP address and which images it asks for. See TMDB’s privacy policy. - Google Play installs and updates the app under Google’s own terms.
- Passkeys, if you use one to sign in, are kept by the password manager you use on Android (Google Password Manager, for example), which may sync them to your other devices under its own terms. The app asks it, through Android, to sign in for you; your household’s server holds only a passkey’s public half.
Nothing else. The app contains no advertising, analytics or tracking SDKs.
Invitation links
An invitation to join a household can arrive as a link to iflissen.app/join. The household’s address and the invitation travel in the part of the link after the #, which browsers never send to a server, so iflissen.app never receives either of them.
- With the app installed, the link opens the app, which reads both on your phone and shows you the household’s address before contacting it.
- Otherwise, the page at
iflissen.app/joinreads them on your device and sends nothing on its own. Its button to Google Play carries the household’s address to Google, never the invitation. When you install the app that way, the app reads that address back from Google Play on its first launch and offers it as the server to connect to; the invitation itself still needs the link tapped again.
Camera and local network
The camera is used only to scan the codes the app shows for signing in, joining a household or setting up a television. Images are read on your device and never stored or sent. When you set up a television from your phone, the phone connects to the television over your home network to hand it your server’s address.
Security
The app connects to your household’s server over HTTPS, and your sign-in token is stored encrypted on your device.
Children
Iflissen is not directed at children. A household’s owner decides who may join and what each member may watch.
Your data, and deleting it
Your account and everything tied to it live on your household’s server. To have them deleted, see how to delete your Iflissen account.
Changes
If this policy changes, the new version is published at this address with a new date.