Privacy Policy

Last updated: 21 September 2026

This policy describes what data is processed by the HiTVip application for Smart TV platforms - including Samsung Smart TV (Tizen), LG Smart TV (webOS), and Hisense Smart TV (VIDAA) - and its associated activation server, how we use that data, and what rights you have in relation to it.

The HiTVip application itself does not contain any media content, playlists (e.g. M3U) or channel lists, and cannot be used on its own. To function, it requires a TV operator ("the Operator") who provides the television service through their own infrastructure (portal) and supplies access to the content.

The application is provided to end users by a TV operator ("the Operator"), who uses HiTVip as a client emulating a set-top box (STB) device connected to their own IPTV platform. This policy covers only the data processing carried out by HInteractive Ltd., the developer of HiTVip (Dimitar Blagov — developer) ("we", "us"), which owns and maintains the application and its central activation server (app.hinteractive.eu). The Operator from whom you have a subscription for the television service may apply its own, separate privacy policy in relation to your service contract — we recommend that you also review that policy.

1. What data we process

The application is designed to work with a minimal amount of data and does not require registration with a name, email address or phone number. We process the following:

• Device identifiers — on Smart TV platforms, a MAC address derived from the TV's real hardware MAC address (in a MAG-compatible format: a fixed vendor prefix plus the last three bytes of the device's actual network adapter MAC address), the device serial number, and values derived from them (hashes), used so that the TV portals (Stalker/Ministra) and the activation server can recognize the specific device on each load.
• Device key — generated automatically and randomly the first time the application is launched, stored locally on the device, and used solely to link the device to its approved subscription profile on our activation server.
• Technical device data — device name/model, operating system type and version — transmitted once during activation registration so that we can provide technical support if an issue arises.
• Activation PIN code — a temporary code generated on first launch, through which the Operator confirms and approves the specific device for the service. The code is not linked to any personal data of the user.
• Parental control setting — a parental-control PIN that the user may set locally on the device to restrict access to certain channels. Stored on the device itself.
• Data required for the service to function — requests to the TV portal for the channel list, electronic programme guide (EPG), access to archive/catch-up recordings, and periodic requests that keep an active viewing session alive.

The application does not request or require access to contacts, location, camera, microphone, photos or files on the device. The only system permissions the application requests are: internet access, launch on device boot (for automatic start-up on STB boxes), running a background service, and displaying notifications — all related solely to the core functionality of delivering television content.

The identifiers listed above (MAC address, serial number, device key, PIN codes) are linked only to the specific device, not to a name, email address, phone number or other direct identifier of the user, and are generated and used only for the application's own purposes — we do not use them for profiling, advertising, or identifying the person behind the device.

2. Purposes for which we use the data

• to activate and link the specific device to the subscription profile approved by the Operator;
• to authenticate the device with the TV portal and provide access to channels, the electronic programme guide, and the TV archive, where available;
• to apply the Operator's individual settings (portal address, archive server address, operator logos, default language settings, etc.);
• for parental controls set locally by the user;
• to troubleshoot technical issues and ensure the application runs reliably.

We do not use the data for profiling or advertising, and we do not provide or sell it to third parties.

3. Legal basis for processing

We process the data described above on the basis of performance of the contract for provision of the service (Article 6(1)(b) of Regulation (EU) 2016/679 — GDPR), insofar as device identification is technically necessary to give you access to your subscribed television service, and on the basis of our legitimate interest in maintaining a secure and functioning service (Article 6(1)(f) GDPR).

4. Sharing data with third parties

• The TV service Operator — the MAC address, serial number, and the requests generated by viewing (channel, EPG, archive) reach the Stalker/Ministra portal operated by the Operator, since it is the Operator that supplies the television content.
• Hosting infrastructure providers — the activation server and its associated data are stored with a hosting provider bound by contractual data-protection obligations.

We do not share data with third-party advertising networks or analytics platforms.

5. Data retention

Device identifiers and activation data are retained for as long as the device remains actively connected to the service, plus a reasonable period thereafter for technical support and dispute-resolution purposes, unless applicable law requires otherwise. Data stored locally on the device itself (device key, parental-control PIN) is automatically deleted when the application is uninstalled.

6. Your rights

Under the GDPR, you have the right to:

• access the data we process about your device;
• correct inaccurate data;
• erasure of data ("the right to be forgotten"), including by having the device deactivated by the Operator;
• restrict or object to processing;
• data portability, where technically feasible;
• lodge a complaint with the Commission for Personal Data Protection (CPDP) in Bulgaria or another competent authority.

To exercise these rights, please contact us using the details below.

7. Data security

We apply appropriate technical and organizational measures to protect the data — including restricted access to the activation server and encrypted (HTTPS) communication between the application and the server. However, no method of data transmission or storage is 100% secure.

8. Children

The application is not specifically directed at children and does not knowingly collect data from minors. The parental-control feature exists precisely to help parents restrict children's access to inappropriate content.

9. Changes to this policy

We may update this policy from time to time. In the event of material changes, we will update the date at the top of the document. We recommend that you review this page periodically.

10. Contact

If you have any questions about this policy or about the processing of your data, you can reach us at:

Email: office@hinteractive.eu