Privacy Policy

What we collect when you give it to us

• Account details: your name, email address and password. We store only a salted hash of the password, never the password itself.
• Email preferences: whether you want product updates and offers.
• Support requests: the tickets and replies you send, and contact-form messages (name, email, topic and message). Anything you choose to include, such as a gift recipient's name, is stored with the ticket.
• Reviews: the rating and text you submit. Approved reviews show your first name and last initial.
• Referral codes: a friend's code if you enter it before your first pack.

What we record while you use the service

• Sessions: when you sign in we store a session with your IP address and browser details, so you can see your signed-in devices and sign them out.
• Security counters: short-lived request counts, keyed by IP address or account, that limit repeated sign-in attempts and form submissions.
• Packs and payments: the packs you request, their status and dates, and payment records (amount, currency, status and a reference). We do not store card numbers.
• Player login: if our team issues you credentials for third-party players, we store them encrypted (AES-256-GCM) and show them only to you and our administrators.
• Account activity: notifications, referral relationships and the history of your support tickets.
• Staff actions: when our staff change something on your account (for example activating a pack or replying to a ticket), we log who did it and when, including the staff member's IP address.

Cookies

We use two essential cookies. A session cookie keeps you signed in for up to 30 days. A referral cookie is set for 30 days when you open someone's referral link, so the referral can be recorded if you sign up.

We don't use advertising or analytics cookies. If we add analytics, we'll update this policy and ask for consent where the law requires it before it goes live. Clearing your cookies signs you out.

How we use your data

• To create and secure your account, including email verification and password resets.
• To activate your pack, record payments and show your plan and transaction history.
• To answer support requests and notify you of replies.
• To run the referral program and moderate reviews.
• To send service emails, and product or marketing emails only if you've opted in.
• To detect abuse, prevent fraud and keep the service secure.

Legal bases (EU and UK visitors)

We process account, pack and support data to perform our contract with you; security records and staff logs on our legitimate interest in protecting the service; marketing emails on your consent, which you can withdraw at any time; and billing records where accounting and tax law require it.

Who we share data with

Only providers that help us run the service: our hosting provider, our email delivery provider and any payment provider used for your purchase. They may process data only on our instructions. We do not sell or rent personal data.

Some devices use independent apps, such as the Downloader app on Fire TV or the UHF player on Apple devices. Those apps are run by other companies under their own privacy policies.

We may disclose data when the law requires it, to protect our rights or users' safety, or as part of a business transfer, in which case this policy continues to apply.

The Apollo TV app

This policy covers this website and your dashboard. About the Apollo TV app: when you use the app, it may automatically collect technical information: your IP address and the approximate location derived from it, your device type, operating system and app version, technical identifiers, usage information, diagnostic logs and error reports. We use this to provide the service, troubleshoot problems, improve performance and protect accounts against fraud, abuse and unauthorized access.

Where your data is stored

Our servers are located in the United States. If that is outside your country, we use the safeguards the law requires for international transfers.

How long we keep it

• Account, pack and support data: while your account is open, and deleted when you ask us to close it, except records we must keep.
• Sessions: up to 30 days, or until you sign out. Verification links expire after 24 hours and password-reset links after 30 minutes.
• Security counters: minutes to hours, then overwritten.
• Payment records: as long as accounting and tax rules require.
• Contact-form messages: as long as needed to answer and keep a record, or until you ask us to delete them.

Your rights

We answer requests within the time the law sets, and may need to confirm your identity first.

• Update your name, email preferences and signed-in devices yourself in your dashboard.
• Ask for a copy of your data, a correction, deletion or a restriction of processing, or object to processing, by opening a ticket or writing to support@apollogroupr.tv.
• Withdraw marketing consent at any time from My Accounts → Notifications.
• If you're in the EU or UK you can complain to your local data-protection authority. Residents of some US states, such as California, have similar rights.

How we protect it

Passwords are hashed, connections use HTTPS, player credentials are encrypted at rest, sign-in and forms are rate-limited, and staff access is limited by role and logged. No system is perfectly secure; if a breach affects your data, we'll notify you as the law requires.

Children

The service is for adults. We don't knowingly collect data from children under 16, and we'll delete it if we learn we have.

Changes and contact

We'll post changes here and update the date at the top; significant changes are also announced in your dashboard. Questions about privacy: support@apollogroupr.tv, the contact page, or Apollo Group TV, 123 Sunset Boulevard, Los Angeles, CA 90028, United States. How the service itself works is set out in our Terms and Conditions.