Privacy Policy

Last updated: 7 October 2026

This Privacy Policy explains how Al Sadq IT Solutions LLC ("we", "us", or "our"), the provider of Vireo, handles information in connection with the Vireo mobile and TV application (the "App"), a media player application, and its website.

1. The App is a player only

The App is only a media player. It does not host, provide, or supply any channels, streams, playlists, or servers, and it ships with no preloaded content. To watch anything, you supply your own IPTV/media service details (a playlist URL, or a provider login made up of a server address, username and password) that you obtain independently from a provider of your own choosing. You are responsible for the legality of the sources and content you connect to.

2. Information we collect through the App

• Device & app information — device model, operating system version, app version, language, and time zone.
• Device identifiers — a device ID and device fingerprint generated by the App, and the device code and PIN shown on its start screen, used to register and activate your device and to enforce per-account device limits.
• Push notification tokens — messaging tokens from Google Firebase Cloud Messaging and OneSignal, used to deliver notifications.
• Network/technical data — IP address and related request data, used for security, rate limiting, abuse prevention, and diagnostics.
• Phone number — if you sign in with a phone number, it is used to find the subscription lines linked to it and to authenticate you.
• Provider details for lines set up through us — when a subscription line is created for you by us, by a reseller, or in the account portal, its details (server address, username, password, playlist URL and guide URL) are stored on our servers so the App can retrieve them for your device. Usernames and passwords are encrypted at rest.
• What is playing now — while you watch, the App reports the current item (its type, ID, title, episode, playback position and whether it is playing or paused) for that device. Each report replaces the previous one; it lets you continue watching on another of your devices.
• Error and crash reports — when playback fails or the App closes unexpectedly, the App sends a report: the error or exit reason, a technical trace, memory use, stream and provider type, network type, device model, and app and OS versions.
• Account PIN — when you enter or change your account PIN, it is checked against the PIN held for your account on our servers.

Provider details you type into the App yourself are stored on your device in encrypted storage. Except as described in section 4 for the web player, they are used on your device to connect directly to your provider.

3. Information we collect through the website

• Cookies — a session cookie and a security (anti-forgery) cookie that the site needs to work, for example to carry you through activation. We do not use analytics or advertising cookies.
• Activation — the device code and PIN you enter, the plan you choose, and the payment reference and status.
• Payments — you enter your card details on the payment provider's own checkout page (Stripe). We receive the payment's status and reference, not your card number.
• Contact and support — what you send us through a contact form or by email, including the contact details you give. Some forms are protected by Cloudflare Turnstile, which processes technical signals from your browser to tell people from automated traffic. If you contact us on WhatsApp, WhatsApp's own terms apply to that conversation.

4. Optional and platform-specific features

• Web player in a browser — browsers block many provider connections, so the browser version of the player sends your provider requests and streams through our servers, which forward them to your provider. The current web player sends your provider address and login to us in the body of a request and then uses an encrypted, expiring reference, so they do not appear in web addresses. Older copies of the web player put them in web addresses, which can appear in our server logs.
• Built-in connection proxy — where this option is offered and you turn it on, the App sends your phone number to check that it has an active line, receives proxy server details, and then routes its connections through those proxy servers.

5. Information we do not collect

• We do not keep a history of everything you watch; for each device we keep only the latest playback state described in section 2.
• We do not use third-party advertising networks or analytics tools in the App, and we do not sell your personal information.

6. How we use information

• To operate and provide the App (device registration and activation, subscription linking, continuing playback on another device, delivering notifications).
• To process payments and answer support requests.
• To secure the App and website and prevent abuse (rate limiting, device-limit enforcement, bot protection).
• To diagnose and fix technical problems and improve stability.
• To comply with legal obligations and enforce our Terms of Use.

7. Third-party services

We use a limited set of service providers that process data under their own terms:

• Google Firebase Cloud Messaging and OneSignal — push notifications (push token and basic device data).
• Stripe — payment processing, when you pay on the website.
• Cloudflare Turnstile — bot protection on some website forms.
• Hosting and network providers — the providers that run our servers process the data described in this policy on our behalf.

We are not responsible for the privacy practices of the third-party IPTV/media servers you choose to connect to; those are governed by their operators' own terms.

8. Data retention

We keep information only as long as needed for the purposes above. Device registration and security logs are kept for as long as necessary to operate and secure the service, then deleted or anonymized. The playback state for a device is replaced by each new report. Information stored on your device (including provider details you entered) is removed when you delete it in the App or uninstall the App.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information, and to withdraw consent. To make a request, contact us at support@vireoplayer.com or on WhatsApp. You may also request deletion of your account data by contacting that address.

10. Security

We use technical and organizational measures to protect information, including encryption in transit (TLS), encryption at rest for provider usernames and passwords held on our servers, and encrypted on-device storage for sensitive values. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children's privacy

The App is not directed to children and is not intended for use by anyone under the age required in their jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us at support@vireoplayer.com or on WhatsApp and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date above. Your continued use of the App after changes take effect constitutes acceptance.

13. Contact us

Al Sadq IT Solutions LLC
Email: support@vireoplayer.com
Support: WhatsApp
Postal address: 403, Onyx Building, Al Khabisi Road, Deira, Dubai, United Arab Emirates