Privacy
Neverlag is a player for playlists and credentials you enter yourself. The app has no user account, no tracking, no analytics, no advertising and no servers of its own. We do not see what you watch, which provider you use or who you are. This policy explains what happens on your device, which connections the app makes and what this website processes.
Data controller
axiena AG
Einsiedlerstrasse 535
8810 Horgen, Switzerland
info@axiena.ch
Privacy questions are answered at the same address or via support@neverlag.app.
In short
- No account, no sign-up, no e-mail address required.
- No tracking, no analytics SDKs, no advertising, no sale of data.
- No Neverlag servers: the app only talks to your IPTV provider, to Apple (App Store, iCloud) and — on request — to a neutral test host for the network test.
- Credentials live in your device's keychain; catalogues and programme guides in a local database.
- Demo mode works entirely offline with synthetic content.
What the app stores on your device
Credentials and playlists
Server addresses, usernames, passwords and M3U addresses of your providers are stored exclusively in your device's keychain. If iCloud Keychain is enabled on your Apple account, Apple syncs these entries end-to-end encrypted between your devices; neither Apple nor we can read them.
Catalogues, programme guide, search
Channel lists, movies, series and EPG data from your provider are kept in a local database so they load quickly and work offline. This data never leaves your device.
Your settings and usage data
Favourites, tags, channel groups, manual matches, series rules, scheduled recordings, playback positions ("Continue watching") and settings are stored locally. If you are signed in to iCloud, the app syncs this user data between your devices via iCloud (CloudKit private database and iCloud key-value storage). That storage belongs to your Apple account; we have no access to it. Without an iCloud account everything stays on the device.
Recordings
Recordings are saved locally on the device or to a location you choose (e.g. a network share). They are never uploaded.
Parental controls
The parental-control PIN is stored as a hash in the keychain; the lock lists locally. There is no age verification against third parties.
Diagnostics
The app keeps a local playback journal (connection paths, switches, errors) for the status view in Settings. It is never transmitted; you can export and share it yourself, for example with support. The network test opens a comparison connection to a neutral test host (www.apple.com) only when you tap the button.
Connections to third parties
Your IPTV provider
When loading catalogues and streaming, the app connects directly to the provider whose credentials you entered. As with any player, the provider receives your IP address, your credentials and the content you request. Neverlag is not part of that connection, does not deliver or broker any content and is not responsible for the provider's data processing. The provider's own privacy policy applies.
Apple
- App Store and subscription: purchase, renewal, Family Sharing and restore are handled by the App Store (StoreKit). Apple processes your payment details and Apple account under Apple's privacy policy. We receive no payment details, name or e-mail address — the app only knows the entitlement state (active, expired), which it stores locally. There is no purchase verification through third-party servers.
- iCloud: sync of user data and keychain as described above — only with a signed-in iCloud account.
- Device pairing: credentials are transferred from iPhone or Mac to Apple TV end-to-end encrypted over your local network. If no local connection can be established, a short-lived mailbox in your private iCloud storage serves as a fallback; it contains only encrypted data and is cleared after the transfer.
- Crash and diagnostic reports: only if you have allowed sharing with developers in your device's system settings (or via TestFlight). Apple provides these reports in anonymised form.
Nobody else
The app embeds no analytics, advertising or metadata services and calls no Neverlag servers.
This website
neverlag.app sets no cookies, uses no analytics and embeds no third-party content; your browser's local storage stays unused as well. When you visit, the web server processes technically necessary access data (IP address, time, requested address, browser identifier) in logs that serve secure operation and are deleted after a short time.
Legal basis and retention
We follow the Swiss Federal Act on Data Protection (FADP). For users in the EU/EEA the GDPR applies in addition; where personal data arises at all (server logs, support correspondence), we rely on performance of contract (Art. 6(1)(b) GDPR) and our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Support requests are kept for as long as needed to handle them. All app data lives on your device or in your iCloud account and is removed by deleting the app or via your iCloud settings.
Your rights
You have the right to access, rectification, erasure and restriction of processing, as well as data portability and objection. Since Neverlag stores no personal data about you, this in practice concerns only messages you send us. Contact info@axiena.ch. In Switzerland you may contact the Federal Data Protection and Information Commissioner (FDPIC); in the EU/EEA the supervisory authority of your place of residence.
Children
Neverlag collects no data from children or adults. Parental controls work entirely locally.
Changes
If the app or this website change in a way that affects privacy, we update this page and the date above.