Tuner by LumaNest TV

Privacy policy

Last updated

This policy explains what the Tuner app and this website store, what they send and to whom, how long it is kept, and how to delete it.

Summary

  • Tuner has no ads, no analytics and no tracking. It doesn’t use advertising IDs and doesn’t access your location, contacts, camera or microphone.
  • Tuner has no account of its own. It uses your LumaNest TV line login (the username and password for watching), which it keeps on your TV.
  • Tuner connects to lumanest.tv to pair your TV with your phone, and to the LumaNest TV streaming service to load and play your channels, guide, movies and series.
  • Favorites, viewing history and settings stay on your TV. Tuner doesn’t upload them.
  • We don’t sell your information or share it for advertising.

Who we are

Tuner by LumaNest TV (“Tuner”) is published by LumaNest TV, which also runs lumanest.tv and sells LumaNest TV subscriptions. In this policy, “we” and “us” mean LumaNest TV. For any privacy question or request, email support@lumanest.tv.

This policy covers the Tuner apps for Android TV, Google TV and Fire TV; Samsung TVs; LG TVs; and Roku, and this website, tunertv.app. The Apple TV version isn’t released yet; if it handles data differently from the apps described here, we’ll update this policy before it’s released.

Buying or renewing a subscription, your customer hub and the lumanest.tv web player are covered by the LumaNest TV privacy policy.

What Tuner stores on your TV

Tuner saves the following in its own private storage on your TV. Tuner doesn’t upload it; your login is sent only to sign in to your streaming service, as described below.

  • Your line login

    The server address, username and password of your LumaNest TV line, or a playlist address that contains them. Tuner needs it to connect to your subscription. You get it by pairing with your phone, or by typing it in Settings.

    All apps. On Android TV, Google TV and Fire TV, a password saved with a server address is encrypted with a key held in the Android Keystore (on a TV where the Keystore doesn’t work, it’s saved unencrypted). Playlist links and saved stream addresses (for Continue Watching and in saved catalogues) are kept unencrypted in Tuner’s private storage; for LumaNest TV, these include your username and password. On Samsung, LG and Roku, your login is kept in the app’s private storage on the TV.

  • Your settings

    Choices such as theme, subtitles, the “USA channels only” filter, category order, the local stations market you pick, and guide options.

    All apps. The options differ by platform.

  • Favorites and viewing history

    Your favorite channels, movies and episodes you started (with where you stopped, so you can continue watching), and how often you opened each live channel, which powers Most Watched. Tuner also remembers the last channel you watched, and the Android app hides channels that failed to play for three days.

    Android TV, Google TV and Fire TV; Samsung; LG. Kept separately for each playlist. The Roku app doesn’t keep favorites or history.

  • Saved catalogue, guide and images

    Copies of your channel list, movies, series, TV guide listings and artwork, so Tuner starts quickly and uses less data. They refresh automatically.

    Android TV, Google TV and Fire TV (files in the app’s storage, including an image cache); Samsung and LG (the app’s own storage). The Roku app keeps them in memory only while it’s open.

  • Content lock passcode

    If your version of Tuner has a passcode lock and you set one, Tuner stores only a random value and a one-way hash of the passcode, plus a count of wrong attempts, never the passcode itself.

    Apps that offer the lock.

What Tuner sends, and to whom

Pairing with your phone, through lumanest.tv

When you open pairing, Tuner asks lumanest.tv for a code over HTTPS. The request says which kind of TV app is asking (Android, Samsung, LG or Roku). Tuner then checks every few seconds whether you’ve approved the code. You approve it on your phone at lumanest.tv/pair after signing in with your line login, and lumanest.tv hands your line login to the TV once.

For each pairing, lumanest.tv stores the short code, a one-way hash of the TV’s secret device code, the kind of TV app, a hashed (pseudonymised) form of your network’s IP address (used only to limit how many codes one network can request), the status and times, and, after you approve, your line login encrypted with a server key until the TV collects it. Like any website, lumanest.tv also sees your TV’s IP address when it connects.

Your channels, guide, movies, series and playback

To show your lineup, guide, movies and series, and to play them, Tuner connects directly to the servers named in your line login and playlist: for example, the playlist link on LumaNest TV’s customer portal, and the stream and guide servers that playlist lists. These servers are run for LumaNest TV by its streaming service provider. Requests to them include your line login, because the service uses it to check your subscription, and the servers see your TV’s IP address, your line username and what you ask to watch, as with any streaming service.

Logos, posters and artwork

Channel logos, posters and artwork come from web addresses listed in your catalogue and guide, or in the iptv-org logo list (Android). Tuner loads each image directly from wherever it’s hosted, which can be a third-party image server. That server sees your TV’s IP address and which image was requested. Tuner doesn’t add your login to these requests.

Extra guide and logo sources (Android TV, Google TV and Fire TV)

  • Free guide fallback. When your service’s guide has no listings for some channels, the Android app can download free regional guide files from epgshare01.online. In the version downloaded from lumanest.tv it’s on by default, with the United States national and sports guides; in the Google Play and Amazon Appstore version it’s off until you choose a guide. You can change it in Tuner’s Settings under Free guide fallback; unticking every guide turns it off.
  • Channel logo list. To fill in missing channel logos, the Android app downloads the open logo list published by the iptv-org project at iptv-org.github.io, at most about once a week.

These downloads don’t include your login or anything about you beyond what any web request reveals, such as your TV’s IP address.

Typing a playlist on your phone (Android TV, Google TV and Fire TV)

While you add or edit a playlist, the Android app runs a small setup page on your home network, so you can type the details on a phone or computer instead of the remote. The Google Play and Amazon Appstore version runs it only while you edit a playlist, where the page’s address is shown. What you type goes straight from that device to your TV over your local network; it doesn’t pass through our servers. The page stops when you leave that screen.

If you add a playlist that isn’t from LumaNest TV

Tuner connects to that playlist’s servers instead, which handle your requests under their operator’s own policies. We don’t receive that playlist or its login.

Diagnostics

Tuner contains no analytics, advertising or crash-reporting software, and it doesn’t send us diagnostics. The Android app writes playback timing notes (for example, how long a channel took to start, with the stream’s ID number) to the TV’s own system log, which stays on the TV. These notes don’t include your login.

The app stores and TV makers (such as Google, Amazon, Samsung, LG, Roku and Apple) may collect information about app installs, usage or crashes under their own privacy policies. We don’t control that collection.

What Tuner doesn’t do

  • No ads, advertising IDs, analytics or tracking across apps and websites.
  • No location. The local stations setting is a market you choose, not your device’s location.
  • No access to contacts, photos, files, camera or microphone. On Android, Tuner asks only for internet and network-status access.
  • No in-app purchases and no payment details. Subscriptions are bought on lumanest.tv.
  • No selling or renting of your information, and no sharing for advertising.

How we use information

  • To pair your TV and deliver your line login to it.
  • To provide your subscription: your lineup, guide, movies, series and playback.
  • To protect pairing from abuse, with short-lived rate limits.
  • To answer you when you email support.

We use this information only to provide Tuner and the subscription you asked for.

Who we share it with

  • LumaNest TV’s streaming service provider, which runs the servers Tuner connects to for your channels, guide, movies and series, as described above.
  • Cloudflare, which hosts lumanest.tv and this website and processes requests to deliver and protect them.
  • Image and guide hosts, which receive only ordinary web requests from your TV, as described above.
  • Authorities, where the law requires us to disclose information.

We require our service providers, LumaNest TV’s streaming service provider and Cloudflare, to use the information only to provide their service to us and to protect it at least as well as this policy describes. Image and guide hosts aren’t our providers: Tuner contacts them directly, the way a web browser would, and their own policies apply.

How long it’s kept

  • On your TV: until you clear Tuner’s data in your TV’s settings or uninstall Tuner. Saved catalogues and guide listings are replaced as they refresh. Deleting a playlist in Tuner removes the playlist from Tuner; on Android TV, Google TV and Fire TV, the favorites, history and Continue Watching kept for it stay until you clear Tuner’s data (see Delete your data).
  • Pairing records on lumanest.tv: deleted as soon as your TV collects its login. Codes expire after 10 minutes. An expired record, including an approved login the TV never collected (which stays encrypted), is deleted the next time any TV starts pairing.
  • Pairing rate limits on lumanest.tv: counters keyed by a hashed (pseudonymised) form of your network’s IP address. They expire after 30 minutes and are then removed by routine clean-up.
  • Streaming requests: the streaming servers receive your IP address, line username and what you watch, as described above. Our streaming service provider keeps this only as long as needed to run the service and prevent abuse. Email us to ask for deletion.
  • Web requests to lumanest.tv and this website: Cloudflare processes them, including your IP address, and request logs are kept only as long as needed to run and protect the sites. Email us to ask for deletion.
  • Support emails: kept as long as we need them to help you. You can ask us to delete them.
  • Your LumaNest TV account and subscription records: see the LumaNest TV privacy policy.

Deleting data and your choices

  • To remove what Tuner saved on your TV, or to ask us to delete your LumaNest TV account data, follow Delete your data.
  • You can ask us what information we hold about you, or ask us to correct or delete it, by emailing support@lumanest.tv. Depending on where you live, you may have further rights under local law; we’ll respond to requests as that law requires. We may need to keep payment records where the law requires it.
  • On Android TV, Google TV and Fire TV, you can turn the free guide fallback on or off in Settings.

Security

  • Pairing with lumanest.tv uses HTTPS. lumanest.tv stores only a hash of the TV’s secret device code, keeps your line login encrypted until the TV collects it, and hands it out only once.
  • On Android TV, Google TV and Fire TV, a separately saved password is encrypted with an Android Keystore key, but playlist links and saved stream addresses, which contain your login, are kept unencrypted in Tuner’s private storage. Tuner’s data isn’t included in Android cloud backups. Its settings, including saved logins, playlist links and Continue Watching, are left out of device-to-device transfers to a new device; saved catalogue files, which contain stream addresses, can be copied in such a transfer. The app doesn’t trust user-installed security certificates.
  • On every platform, Tuner’s data is kept in the app’s own storage, which other apps can’t read.
  • LumaNest TV’s video streams use plain HTTP rather than HTTPS, which is common for TV streaming, and each stream address contains your line login. Those requests, including the login, aren’t encrypted on the way. Other playlists’ servers may also use plain HTTP. The Android setup page for typing a playlist on your phone is also plain HTTP on your home network. Use Tuner on a network you trust.
  • Keep your line login private, and only approve a pairing code that’s on your own TV screen.

No system is perfectly secure, but we work to protect the information described here.

Children

Tuner is intended for LumaNest TV subscribers aged 18 and over, and isn’t directed to children. We don’t knowingly collect personal information from children. If you think a child has sent us personal information, email us and we’ll delete it.

This website

tunertv.app is a static website. It uses no cookies, no analytics, no trackers and no third-party scripts or fonts. Cloudflare hosts it and processes each request, including your IP address, to deliver and protect the site.

Changes to this policy

When Tuner or our practices change, we’ll update this page and the “last updated” date at the top. If a change is significant, we’ll say so on this page.

Contact

Questions or requests about privacy? Email LumaNest TV at support@lumanest.tv.