Privacy Policy

Last updated: 8 November 2026

1. Who we are

Kixly runs this website and the Kixly app. Questions about this policy, and requests about your data, go to [email protected].

The service is operated by DETECT LINE LTD, a company registered in England and Wales (company number 15821723), which is responsible for the data described here.

2. What we keep

Your account

• your username and email address;
• your password — stored only as a salted hash, never as itself.

Your devices

• an identifier we give each device, and a secret it proves itself with (stored only as a hash);
• where the platform provides one, its device identifier, so the device keeps its identity after the app is reinstalled;
• the kind of device, its model, system and app version, screen size and language;
• the internet address it was last seen from, when it was activated and when it last contacted us.

Your settings

• the playlist and programme guide addresses you add, and which provider a device is connected to;
• favourites and watch history, if you use them;
• parental control settings — the age limit, and the PIN stored only as a hash.

A request for provider status

• what you send us: your name, email, and optionally company, project address, phone, other contact and message.

Technical records

• our servers record requests — the internet address, time, page or endpoint and browser or app — which we use to keep the service secure and working.

Error log

• only for a device whose provider, or we, turned it on for that device, to find out why something does not work on it: what failed — a stream that would not play, a request to the provider that was refused, an error in the app — when, the name of the server involved (never a full address), the title being played, and the app's version. Off unless turned on.

3. Why we keep it

To run your account and devices, to show the programme guide for a playlist you added (our server reads the guide address so your device does not have to), to fetch that playlist for a device that cannot fetch it itself — our server passes it on to the device and does not keep it — to apply your parental controls, to answer you, and to protect the service against abuse.

4. Who else sees it

The provider your device is connected to. The app talks to that provider's service directly and sends it the device's identifier, and at each start the kind of device, its model, system and app version, screen size and language, so the provider sees that device and the address it connects from. If the provider has turned on status reports, our server also sends it those details, the internet address we see, and what the device is playing — title, item, stream address and position. If the provider has turned on a device's error log, it sees that log in its panel. A provider handles that data under its own privacy policy.

Cloudflare carries all traffic to this site and our servers and protects them from attacks. Its Turnstile check runs on our sign-in and registration forms to tell people from scripts, and it may set cookies needed for that protection.

Our hosting provider runs the servers the data is stored on.

We do not sell or rent data to anyone, and we show no advertising.

5. How long we keep it

• a device that is never activated: eligible for automatic deletion after one hour, removed by periodic cleanup;
• a demo device: access ends after 15 minutes; its device-only account and data are removed on a subsequent status check or periodic cleanup;
• a device you remove: deleted with its details;
• your account and its settings: until you ask us to delete them;
• technical records: only as long as security and troubleshooting need;
• a device's error log: the last 100 entries, none older than 30 days, and deleted with the device.

6. In your browser

When you sign in, the site keeps your session in your browser's local storage, and signing out removes it. We use no tracking or advertising cookies.

7. Security

Website connections use HTTPS. App API payloads use HTTPS or, on supported devices that fall back to HTTP, application-level encryption. Connections to playlists and media depend on the addresses you or your provider supply; an HTTP source is not encrypted in transit. Passwords, PINs and device secrets are stored only as hashes, and sessions end when a password is changed.

8. Your rights

You can see and change your devices and settings in your account, and remove a device at any time. To delete your personal account and its linked data, use the account deletion page. For an automatically created demo or operator device account, removing the device in the app's Settings also removes that device-only account. Removing one device does not delete a personal account you signed up for. To get a copy of your data or request a correction, write to [email protected]. Depending on where you live, you may also have the right to object to how we use your data and to complain to your data protection authority.

9. Children

Accounts are for adults. Parental controls let a household limit what is shown on a device.

10. Changes

We may update this policy. The date at the top says when it last changed.