Companion Privacy Policy

Last Updated: June 24, 2026

This Privacy Policy applies to the Streamiflow Companion mobile application ("Companion," "we," "us," or "our"), published by SK Softwares. It describes how we collect, use, and share information when you use Companion to create an account, purchase or restore Premium, and link Streamiflow on other devices.

The Short Version:

• We collect your email address and password to create and manage your account (via Firebase Authentication).
• We use Google Play Billing (through RevenueCat) to process Premium purchases on Android.
• We send authentication tokens and device-linking requests to our backend to sync Premium and manage linked devices.
• We store Premium status locally on your device for app functionality.
• We do not show ads, do not collect location, and do not access your camera, microphone, contacts, or photo library.
• We do not collect or store your IPTV playlists, watch history, or streaming activity.

1. App Scope

Streamiflow Companion is separate from the main Streamiflow Media Player app. Companion is designed for phones and tablets and provides:

• Email-based account sign-up and sign-in
• Purchase, restore, and management of Streamiflow Premium (Monthly, Yearly, or Lifetime)
• Linking Streamiflow on a TV or non-GMS Android device using an 8-character pairing code
• Viewing and unlinking connected devices (up to 5 by default)

Learn more about Companion at streamiflow.com/companion.html.

2. Data We Collect

Account Data

• Email address — used to create your account, sign in, verify your email, and send password-reset messages.
• Password — used to authenticate your account. Passwords are handled by Firebase Authentication; we do not store plain-text passwords in Companion app code.
• Firebase user ID — a unique identifier assigned to your account, used to link purchases and device records.

Purchase Data

• Subscription and purchase information — processed by Google Play Billing through RevenueCat, including product identifiers (e.g. monthly, yearly, lifetime), entitlement status, and subscription management URLs.
• Purchase data is associated with your Firebase user ID.

Device Linking Data

• Pairing codes — when you enter an 8-character code from your TV or target device, that code is sent to our backend to link the device to your account.
• Linked device records — our backend returns and stores in session information such as device label, platform (if available), link date, and last-seen date.

Technical Data

• Firebase ID tokens — sent in the Authorization header when Companion communicates with our backend API.
• Standard network data — such as IP address and request metadata, which may be processed by our hosting and third-party providers as part of normal internet communication.

3. Data We Do NOT Collect

• No advertising data: Companion does not display ads and does not integrate an advertising SDK in its application code.
• No location data: We do not request or collect GPS or precise location.
• No media or playlist data: We do not collect M3U URLs, Xtream credentials, watch history, favorites, or streaming activity.
• No camera, microphone, contacts, or photos: Companion does not request these permissions.
• No deliberate in-app analytics events: Companion's application code does not call Firebase Analytics APIs. See Section 5 for notes on bundled SDK dependencies.

4. How We Use Your Data

We use the data described above to:

• Create and authenticate your account
• Send email verification and password-reset messages
• Process, restore, and validate Premium purchases
• Sync Premium entitlement between RevenueCat, Google Play, and our backend
• Link and unlink Streamiflow on your other devices
• Display your linked devices and subscription status in the app
• Open subscription management pages in Google Play or via RevenueCat-provided URLs
• Respond to support requests

5. Third-Party Services

Companion relies on the following third-party services:

Firebase Authentication (Google)

Handles account creation, sign-in, email verification, password reset, and session management. See Firebase Privacy.

RevenueCat

Manages in-app subscriptions and entitlements, linked to your Firebase user ID. See RevenueCat Privacy Policy.

Google Play Billing

Processes payments for Premium purchases on Android devices with Google Play. See Google Privacy Policy.

Streamiflow Backend API

Our server API (hosted on Google Cloud) receives authenticated requests to manage your account's Premium entitlement and linked devices. Endpoints used by Companion include:

• GET /me/devices — list linked devices
• POST /pairing-codes/redeem — redeem an 8-character pairing code
• POST /me/devices/unlink — remove a linked device
• POST /me/entitlement/refresh — sync Premium status with your account

Bundled SDK Dependencies

The Companion app may include Firebase-related libraries (such as Firebase Analytics and Cloud Firestore) as bundled native dependencies. Companion's application code does not use these libraries for analytics or cloud database features. If you have questions about data detected in app store privacy questionnaires, contact us and we will help clarify what Companion actively uses versus what is present only as an unused dependency.

6. Local Storage on Your Device

Companion stores the following data locally using SharedPreferences and SDK storage:

• Premium status flags (companion_is_premium, companion_backend_is_premium)
• Active product identifier (companion_active_product_id)
• Subscription management URL (companion_management_url)
• Firebase Authentication session (managed by the Firebase SDK)
• RevenueCat customer state (managed by the RevenueCat SDK)

Linked device lists shown in the app are fetched from our backend and held in memory; they are cleared when you sign out. Uninstalling Companion removes local cached data.

7. Permissions

Companion requires an internet connection to function. On Android, the app requests:

• Internet access — required for authentication, purchases, and device linking.

Companion's main Android manifest does not request location, camera, microphone, contacts, or storage permissions. Additional permissions such as ACCESS_NETWORK_STATE or WAKE_LOCK may be merged from bundled Firebase or billing libraries at build time.

Platform note: Premium purchases in Companion currently use Google Play Billing on Android. iOS support may be added in the future with separate platform billing.

8. Data Sharing

We share data only as needed to operate Companion:

• Google (Firebase Authentication, Google Play) — account and payment processing
• RevenueCat — subscription and entitlement management
• Streamiflow backend — Premium sync and device linking

We do not sell your personal information.

9. Data Retention and Deletion

Local data: Signing out clears in-app linked device state. Uninstalling Companion removes locally cached Premium flags and SDK session data on your device.

Account and server data: To request deletion of your Companion account, linked device records, and backend entitlement data, follow the steps at Data Deletion — Streamiflow Companion or email support@streamiflow.com from the email address associated with your account.

Google Play purchase history is managed by Google. To cancel an active subscription, use Google Play subscription settings or the management link shown in Companion.

10. Children's Privacy

Companion is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at support@streamiflow.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post changes on this page and update the "Last Updated" date. Please review this page periodically.

12. Contact Us

If you have questions about this Privacy Policy or your data:

• Email: support@streamiflow.com
• Companion overview: companion.html
• Main app privacy policy: privacy.html