Privacy policy
Draft: to be reviewed by a lawyer before launch. Items in [brackets] must be filled in. Version [date].
1. Who we are
Moko Player is published by [AE name], auto-entrepreneur, ICE [number], [address], Morocco ("we"). Contact: privacy@mokoplayer.com. CNDP declaration no. [number].
2. What Moko Player is
A media player. We provide no channels, playlists or content. You add your own sources.
3. Data that stays on your device
- Playlists you type in the app: M3U links, Xtream server address, username and password. These are stored only in the app's storage on your TV, phone or browser.
- Favourites, history, TV guide cache, PIN and settings.
- To delete all of it, use Settings > Reset, or uninstall the app.
4. Data we process on our servers
- Device and licence data: a random Device ID generated by the app (not your MAC address), a Device Key, device model and OS version, trial start date, licence type and dates, and activation codes.
- Playlists sent from our website (only if you use the playlist page): the playlist name and link or Xtream login, encrypted. We keep them only until your device downloads them, and for at most 24 hours. Then they are deleted. We never open, check or share them. [Confirm once the backend is built.]
- Payments: handled by our payment provider [CMI / Payzone, to be confirmed]. We receive the payment status, amount, a reference and the email you give us. We never receive your card number.
- Crash reports, opt-in only: error type, app version, device model and OS version, and a scrubbed log. Links, server names, usernames and passwords are removed on your device before anything is sent.
- Usage statistics, opt-in only: counts of playback errors by stream type and platform. No links, no channel names and no viewing history.
- Resellers: account email, business details, credit purchases and the Device IDs they activate, with their own notes.
- Support: the messages and diagnostics you choose to send us.
Crash reports and statistics are off by default. You can turn them on or off at any time in Settings > Privacy.
5. Why we use it (legal basis)
Licences, playlist delivery and payments: to provide the service you ask for (contract). Crash reports and statistics: your consent, which you can withdraw at any time. Fraud prevention and tax records: legitimate interest and legal obligation. This follows Moroccan law 09-08 and, for users in the EU, the GDPR.
6. Service providers and transfers
Hosting: [provider, country]. Crash reporting: [provider, region or self-hosted]. Payments: [CMI / Payzone]. Where data leaves Morocco, we make the required CNDP filing and use standard contractual clauses for EU users where needed.
7. How long we keep it
Licence data: the licence period plus 2 years. Website playlists: up to 24 hours. Invoices: as required by Moroccan tax law. Crash reports: 90 days. Statistics: 13 months. Support messages: 12 months.
8. Your rights
Access, correction, objection and, where the GDPR applies, erasure, restriction, portability and withdrawal of consent. Write to privacy@mokoplayer.com. We reply within 30 days. You can also complain to the CNDP (www.cndp.ma) or to your EU data protection authority.
9. Children
Moko Player is not directed at children under 16. A parental PIN is available.
10. Security
HTTPS everywhere, hashed device identifiers, encrypted playlist delivery and limited staff access.
11. Changes
We will announce important changes in the app and on this page before they apply.