Privacy

Summary

• Hakapiri has no accounts and no server that receives your data.
• Playlists, passwords, favourites, progress and settings stay on your device.
• We use no usage analytics, ads or tracking.
• Only for purchases are Apple or Google involved, together with RevenueCat, the service that checks your subscription.

Data controller

UAB Cosmic Brokkoli, J. Savickio g. 4-7, LT-01108 Vilnius, Lithuania. Company code (įmonės kodas) 307504828, VAT LT100020251514.
Contact: privacy@cosmicbrokkoli.com.

Data stored on your device

To work, Hakapiri stores on the device you use:

• the sources you add: name, playlist or server address, server username and password, User-Agent;
• the downloaded catalogue and guide, as a local copy;
• favourites, recents, last channel and resume points for movies and episodes;
• settings, and the parental control PIN stored as a hash, not in plain text.

This data lives in the app’s storage. We do not receive it. You delete it by removing the source, with Settings › Data › Clear cache, or by uninstalling the app.

The addresses you enter

Hakapiri connects directly to the addresses you enter, to download playlists, guides and video. The server hosting them therefore sees your IP address, the chosen User-Agent and the credentials you entered, as with any other player. Whoever runs that server is an independent controller: its own privacy policy applies to its processing. Hakapiri does not choose or know your sources.

Local network

Hakapiri may look on the Wi-Fi network you are connected to for other devices running Hakapiri, to sync favourites and Continue watching for the same playlist. The exchange stays on the local network, does not go through the internet or through us, and does not include passwords or playlist addresses. Your system may ask for permission to access the local network: if you refuse, the app still works.

In-app purchases

The yearly subscription and the lifetime purchase go through the Apple App Store or Google Play. Payment is handled entirely by the store: we never see your card, name or billing address.

To check whether your subscription is active we use RevenueCat (RevenueCat, Inc., USA) as our data processor. RevenueCat receives:

• a random identifier generated by the app, not linked to your name or email;
• transaction data supplied by the store (product, dates, trial and renewal status, country);
• technical device data (operating system, app version) and IP address.

RevenueCat processes data in the United States under the European Commission’s Standard Contractual Clauses and/or the EU‑U.S. Data Privacy Framework. Policy: revenuecat.com/privacy. Data processed by Apple and Google is covered by their own policies.

Demo room

The Demo room videos are public test streams hosted by third parties (for example Apple, Mux, Bitmovin, Unified Streaming). When you play them, those servers see your IP address, as with any video on the web.

This website

This website uses no cookies, analytics or external services: fonts and images are served from our own server. The hosting service, Vercel Inc. (USA, certified under the EU-US Data Privacy Framework), logs technical request data (IP address, date, page, browser) for security and keeps it for a limited time. Legal basis: legitimate interest in the security of the website (Art. 6(1)(f) GDPR).

Support

If you write to us, we use your email address and the content of your message only to reply, and keep them for up to 24 months after the request is closed. Do not send us playlist links or passwords: we don’t need them.

Your rights

You can ask us for access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interest, by writing to privacy@cosmicbrokkoli.com. For purchase data, include the user ID shown in Hakapiri › Settings › Subscription, because we have no other way to link it to you.

You can lodge a complaint with the Lithuanian data protection authority, the State Data Protection Inspectorate (vdai.lrv.lt), or with the supervisory authority of your EU country.

Children

Hakapiri is not intended for children under 14 and does not knowingly collect their data. Parental control helps restrict access to adult groups, but it depends on the group names in the playlist.

Changes

If we change this policy we update the date at the top. For important changes we also mention it in the app’s release notes.