Privacy Policy

Last updated 16 September 2026

1. Who is responsible

QFlex, Amman, Jordan, is the controller of the data described here.

Contact: support@qflexplayer.comn.

2. What we store

Your device

An identifier the device derives for itself, a device key we issue, and the model, system version and app version it reports. This is what a subscription is attached to.

Your playlist

The address of the streaming service you enter, and where you sign in with a username and password, those too. They are encrypted before they are stored and are never displayed back in full in any screen, log or message. They are used only to fetch your own playlist on your behalf.

Your profiles and viewing position

Profile names, and where you stopped watching an item, so a programme begun on a television can be finished on a phone. This is a position and an item identifier, not a record of your habits, and we do not build a profile of your viewing or share it with anybody.

Payment

When card payment is enabled, the payment is handled by the payment provider and we never see or store your card number. We keep the fact of a subscription, its plan, its status and its expiry date.

Crash reports

If the app stops unexpectedly it may send us the technical trace, so the fault can be fixed. These are scrubbed of stream addresses on the device and again on arrival, because such an address can contain your provider password. They are kept only for as long as the fault is open.

3. What we deliberately do not store

• Your card number. It never reaches our servers.
• Any record of which channels or programmes you watch, beyond the resume position above.
• The video itself. Nothing you play passes through us for storage; QFlex plays from your provider.
• Advertising or tracking identifiers. There are none in the app and no third-party analytics.

4. Why we are allowed to hold it

To provide the service you asked for and to perform our contract with you; to meet legal obligations such as keeping records of payments; and, for crash reports, our legitimate interest in fixing faults in our own software.

5. Who else sees it

Our hosting provider, which runs the server the service is on, and our payment provider when you pay. Nobody else. We do not sell personal data, we do not share it for advertising, and we have no arrangement under which anyone receives it for their own purposes.

Your streaming provider necessarily sees the requests made with the credentials you supplied, exactly as they would if you used any other player.

6. How long it is kept

Account and playlist data is kept while your account exists. Delete a playlist and its stored credentials go with it. Close your account and everything attached to it is deleted, except records of payments where the law requires them to be retained.

7. Your rights

You may ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted. Write to support@qflexplayer.comn and we will answer within 30 days. Deletion is honoured unless a payment record must be kept by law, in which case we will tell you what is being retained and why.

Depending on where you live you may also have the right to complain to a data protection authority.

8. Children

QFlex is not directed at children and we do not knowingly collect data from a child. The kids profile feature is a filter applied on the device to content your own provider supplies; it involves no additional data about the child using it.

9. Security

Traffic is encrypted in transit. Playlist credentials are encrypted at rest with a key held separately from the database. Access to the administration tools is restricted and protected by its own password and rate limiting. No system is perfect, and if a breach ever affects you we will tell you.

10. Changes

The date at the top shows when this policy last changed. A change that materially affects you will be announced before it takes effect.