Mirya Privacy Policy
Last updated: [date à définir]
This is a translation. The French version (Politique de confidentialité) prevails in case of difference.
1. Who we are
Mirya is an app published by [nom ou raison sociale à définir], [statut à définir], SIRET [SIRET à définir], [adresse professionnelle à définir], France. Contact for any question about your data: contact@mirya.app.
2. The principle
Mirya has no user account and no server. We receive no data about you: not your sources, not your credentials, not what you watch. Mirya includes no audience measurement, advertising or tracking tool on our behalf. Only the Google Cast library sends Google technical information about how it works (see 4 h).
3. What stays on your device
- Your profiles (name, color, kid profile).
- Your sources (addresses, credentials, TV guide addresses). Credentials and addresses are encrypted with Android secure storage, or with the iOS Keychain on iPhone.
- Catalogs downloaded from your sources, your watch history, your list, your preferences (audio tracks, subtitles, mini player position, online services).
This data stays on your device until you delete it in the app or remove Mirya.
- On Android: if Android backup is turned on, Android may include some of this data (credentials excluded) in the backup of your Google account; we have no access to it.
- On iPhone: if iCloud backup or computer backup is turned on, iOS may include this data, credentials included, in the encrypted backup of your iPhone; we have no access to it. Credentials stored in the Keychain may remain after the app is deleted: to erase them, first delete your sources in Mirya.
4. What leaves your device, and where it goes
To work, Mirya connects directly from your device to some services. As with any internet connection, these services receive your IP address and technical information (device type, app version).
- Your sources: the servers, playlists and streams you add receive what they need to play (address, username and password if any, headers you chose). You choose these services and they apply their own rules.
- TV guides: the guide addresses (XMLTV) given by your source or added by you.
- Images: posters, logos and thumbnails load from the addresses given by your source, often The Movie Database image servers (image.tmdb.org, United States).
- Actor search (optional): when you search for a name, that name is sent to Wikidata (Wikimedia Foundation, United States) to find the filmography, and the photo loads from Wikimedia Commons. Nothing else is sent. You can turn this off in Settings > Privacy.
- Intro detection (optional): when you start an episode or a movie that has a TMDB ID, that ID (and the season and episode number) is sent to TheIntroDB to know where the opening and the credits start and end. You can turn this off in Settings > Privacy.
- Purchases: if you buy Mirya Premium, payment is handled by Google Play (Android) or by Apple (App Store, iPhone), under their privacy rules. We receive neither your name, nor your email address, nor your payment details. The app only checks with Google Play or the App Store, on your device, whether a purchase exists.
- Your phone and your Mirya TV: while Mirya is open on an Android TV, the TV announces itself on your local network (TV name, Mirya version) so that your phone can find it. Pairing uses a 4-digit code shown on the TV. After that, what travels between your phone and your TV is: remote control commands, your searches, the link or video you send, what is playing on the TV (title, image, position) and, if you tap "Copier mon profil" (copy my profile), your profile with its sources and their credentials, your list and your resume positions. When you choose "Ajouter depuis mon téléphone" (add from my phone) on the TV, it also opens a small page on your local network to receive the link you type. Everything goes directly over your local network, not over the internet and not through us, and without encryption: only use these features on a trusted network.
- Playing on a TV: when you pick a TV or a Google Cast device on your network, Mirya sends it the video address and what it needs to play it (depending on your source, the address may contain your username). The TV then plays the video by itself or, when possible, through your phone, on your local network. For Google Cast devices, Mirya uses the Google Cast library: it sends Google technical information about how it works (device discovery, session start and end, information about your phone), which Google uses to measure its performance and fix defects. We do not receive this information.
- The demo: the demo videos load from the servers of the Blender Foundation (download.blender.org), test-videos.co.uk, Mux and Apple.
5. Legal bases
Connections a), b), c), f), g), h) and i) are necessary to provide the service you ask for (GDPR article 6.1.b). Features d) and e) rely on our legitimate interest in offering actor search and a "Skip intro" button (article 6.1.f), and you can turn them off at any time. The technical information of the Google Cast library relies on the legitimate interest in offering TV playback with Google's official library (article 6.1.f).
6. Transfers outside the European Union
Wikimedia Foundation and The Movie Database are based in the United States. TheIntroDB: [pays à préciser]. Google may process the Google Cast library information in the United States. Mux and Apple, which serve the demo test streams, are based in the United States. These services receive your requests directly from your device.
7. Retention
On your device: until you delete it. At third-party services: under their own policies (Wikimedia Foundation, The Movie Database, TheIntroDB, Google, Apple, the demo servers, your source).
8. Children
Mirya is meant for adults. The kid profile is a help for parents, not a certified parental control: it hides categories and titles whose name points to adult content.
9. Your rights
You have the right of access, rectification, erasure, objection and restriction. As we hold no data about you, you exercise them directly in the app: edit or delete a source or a profile, clear your history, or erase everything:
- On Android: Android Settings > Apps > Mirya > Storage > Clear data.
- On iPhone: first delete your sources in Mirya, then delete the app (touch and hold the icon > Remove App > Delete App). "Offload App" keeps your data.
For data received by third-party services, contact them. You can also lodge a complaint with the CNIL (www.cnil.fr) or the data protection authority of your country.
10. Security
Credentials are encrypted on your device. Exchanges with Wikidata, TheIntroDB, Google Cast, Google Play and the App Store are encrypted (HTTPS). Exchanges with your sources depend on their address: an http:// address is not encrypted, and Mirya tells you when you add one. On your local network, nothing between your phone and your TV is encrypted: pairing, the remote, "Copier mon profil" (credentials included) and playback through your phone.
11. Changes
We will publish any change on this page and in the app, with the date of the update.