CouchPotato SuiteEffective from 2026-10-29 for CouchPotatoPlayer.
1. Controller and contact
- Legal controller: BW-Tech GmbH IT-Service für Systemintegration und Datensicherheit
- Postal address: Albert-Bassermann-Straße 31, 68782 Brühl, Deutschland
- Privacy email: info@bw-tech.de
- Support email: info@bw-tech.de
CouchPotatoPlayer is a player only. It contains, provides, sells, or recommends no channels, films, series, playlists, provider access, or subscriptions. You add your own lawfully obtained source and are responsible for the necessary rights.
Privacy enquiries: info@bw-tech.de or the company postal address.
2. Data stored on your device
The app stores provider configuration (including URLs, usernames, passwords and tokens), M3U/EPG addresses, local library indexes, favorites, viewing progress/history, selected tracks, parental-control and appearance settings. Depending on the record, storage uses Android SecureStore, SQLite or app files. These local records are needed for the functions you request. BW-Tech does not receive them merely because they remain on your device.
3. Communication with sources you choose
The app connects directly to provider and media endpoints that you configure. Those operators receive the network information technically necessary for a connection, such as your IP address, request time, requested endpoint, device/network headers, and the credentials or tokens required by that source. Their privacy terms and retention practices apply independently. The controller of CouchPotatoPlayer neither selects those providers nor receives a copy merely because the app makes the connection.
Legacy providers may use unencrypted HTTP. The app permits this for compatibility, but HTTP can expose credentials and viewing traffic to networks between you and the provider. Prefer HTTPS and only add a service you trust.
Provider artwork and external trailer links can contact their respective operators, which receive IP and request data. These operators apply their own privacy terms; this is not a BW-Tech content catalogue.
4. Optional synchronization
Google Drive synchronization is optional and available only in a build with a configured Google OAuth client. If the app reports that sync is not configured, no working Google authorization flow is promised. Where enabled, you explicitly authorize the Google account and app-data scope before using sync. The backup can contain complete provider configuration, credentials and library/settings data. It is encrypted locally before upload to Google Drive’s hidden application-data folder. Google receives OAuth/account and network information plus the encrypted envelope and technical sync metadata. OAuth tokens and local encryption material are kept through Android secure storage. This is separate from Apple synchronization. Turning sync off or disconnecting does not by itself remove an existing cloud backup; use the explicit delete-backup action and Google account controls separately. Google retention/account rules apply.
5. Voice search
On supported Android phones/tablets, optional voice search requests microphone permission and uses the speech-recognition service installed or selected on the device. Audio and transcription can be processed by that service’s provider, including remotely; on-device processing is not required by the app. Android TV has no app microphone-search function. Deny or revoke permission to continue with text search.
6. Local network and Google Cast
On supported Android phones/tablets, an explicitly selected Google Cast receiver receives the media URL and title and retrieves media from the source. A URL can itself contain provider credentials or tokens; share only with a receiver and network you trust. The receiver, source and Cast service process the connection data under their own terms. This is separate from Apple AirPlay. System Picture in Picture depends on device/OS/backend and is not promised on every Android TV device.
7. Photos and media selection
When you choose a file or use a system picker/sharing action, the operating system controls access to the selected items and destination. Permissions depend on the action and OS version. The app does not automatically scan or upload your photo library to BW-Tech.
8. Diagnostics, support, and updates
Playback observations stay in a bounded local history unless you explicitly submit a diagnostic report. Submitted reports contain app/build/runtime, platform/device class, selected backend, technical stream and capability information, failure classification and bounded observations. The exporter is designed to reject URLs, query strings, credentials, tokens and secret-like text. Review the report scope and never add secrets to support messages. BW-Tech receives the report; the service infrastructure also receives connection data such as IP address and request time.
Diagnostic reports are retained for 30 days; access/error logs for 90 days. Backups are retained for up to 90 days. Hosting operation: BW-Tech GmbH – self-operated infrastructure. No particular hosting country or certification is asserted here.
Google Play builds, including the Google-signed APKs currently supplied on our website, use Google Play for app updates. They do not contact our self-distribution update service or request permission to install APKs. Only builds explicitly configured for self-distribution use our own update service. In those builds, automatic checks are enabled by default and can be disabled in Settings; manual checks remain available. Requests to couchpotatosuite.com/couchpotatoplayer/updates include platform, runtime, update channel, Mobile/TV target and current update ID, as well as IP and ordinary HTTP metadata. Compatible JavaScript updates and base APKs are offered for user confirmation; APK installation may require Android’s permission to install from this source. Update requests do not send your provider credentials or viewing history.
Contact enquiries and related correspondence are handled on BW-Tech’s own Exchange server and retained for up to 90 days, unless mandatory retention or necessary legal claims require longer storage.
9. Third-party software
The Android app uses React Native/Expo, SQLite/SecureStore, Media3/ExoPlayer and CPPlayerKit/libmpv with FFmpeg-related native components. Google Cast and the installed speech-recognition service are used only on supported mobile surfaces. CPPlayerKit original code is proprietary; third-party components retain their own licenses.
10. Purposes, legal basis, and disclosure
Processing provides requested playback, library, sync, search, casting, update, support and diagnostic functions. Article 6(1)(b) GDPR applies where necessary for the agreed service, Article 6(1)(a) where optional processing relies on consent, and Article 6(1)(f) to legitimate interests in secure operation, fault resolution and answering enquiries. Necessary device storage for an expressly requested function is covered by section 25(2)(2) TDDDG. Permission dialogs do not replace this information. BW-Tech does not sell personal data or use it for advertising or cross-app tracking. Recipients are the sources you choose, Google services you authorize, the speech service/receiver you select and BW-Tech for the described self-operated service infrastructure. External services have their own rules and may process data outside your country. Disclosure can also be legally required or necessary for legal claims.
11. Retention and deletion
Local records remain until removed in the app, cleared, uninstalled or removed by Android; operating-system backup/restore rules can also apply. Remove providers and clear the relevant data in the app. Use the explicit Google Drive delete-backup action before disconnecting if you want to remove that backup; disconnecting, disabling sync or uninstalling does not automatically delete it. Google account controls and retention rules apply independently. Diagnostic reports are retained 30 days, service/access logs 90 days, backups and contact requests up to 90 days, subject to applicable mandatory retention or necessary legal claims. Revoke microphone, account, Cast or other optional access through app/system/account controls. Deleting local app data does not delete records held independently by your provider.
12. Your rights
Subject to the legal conditions, you may request access, rectification, erasure, restriction, portability and object to processing based on legitimate interests for reasons concerning your particular situation (Articles 15–21 GDPR). You may withdraw consent for future processing. Contact info@bw-tech.de or the company postal address. You may complain to a supervisory authority, including https://www.baden-wuerttemberg.datenschutz.de/ . We do not use automated decision-making with legal or similarly significant effects.
13. Children and changes
The app is not Made for Kids. User-configured sources can contain material unsuitable for children; use the available parental controls and supervise source selection. Material changes to data handling will be reflected in an updated policy and App Store disclosure before release.
14. Optional TV weather
Only Android TV offer optional weather. At first start after setup, choose Enter location or Skip. Before searching, read the provider disclosure: explicit city/postcode searches send your query and IP address directly to Photon (komoot/OpenStreetMap); enabled weather sends the selected coordinates and IP address directly to MET Norway. No GPS permission is requested. Confirm a location to show its forecast symbol and temperature in the upper fullscreen player bar. In Settings → General → Weather, disable requests or change location. Skipping does not ask again; setup remains available in Settings. Weather can be temporarily unavailable.
Photon: https://photon.komoot.io/ · https://www.openstreetmap.org/copyright
MET Norway: https://docs.api.met.no/doc/TermsOfService.html · https://docs.api.met.no/doc/License.html
15. Optional Pro in-app purchase
Where Pro is offered in Google Play and billing is available on the device, you can unlock Pro through a one-time, non-consumable in-app purchase. Google processes checkout, the store account and required payment details under its own terms. Through expo-iap/OpenIAP and Google Play Billing, the app queries products and current purchase entitlements, acknowledges completed purchases and handles restoration and redeemed promotional codes. On your device it processes product identifiers, purchase tokens, signed purchase data and purchase status. The app does not receive credit-card or bank details from the payment form.
Purchase signatures are verified locally; the app does not send purchase data or purchase tokens to a BW-Tech billing server for this purpose. It does not persist its own Pro activation flag or include purchase evidence in provider backups. Current access is derived from store entitlements. Deleting local app data does not remove purchase records held by Google; Google’s rules govern their processing and retention.
Last updated: 2026-10-29.