Privacy Policy
CarTV Cast collects nothing.
Last updated 22 September 2026.
The short version
CarTV Cast is a video player that runs entirely on your iPhone. There is no account, no profile and no server of ours anywhere in the path between you and your video. We do not know who you are, what you add to the app, or what you watch, because none of it is sent to us.
This policy exists to say exactly what the app does do, in enough detail that you can check it yourself with a network monitor such as Little Snitch, or with your router’s log.
What stays on your iPhone
All of the following is written to the app’s own storage on the device and read back only by the app. None of it is transmitted, backed up to us, or shared with anyone:
- The sources you add: playlist links, server addresses, account names and imported files.
- The parsed contents of your playlists: channel names, groups, logo URLs and stream URLs.
- Your favorites, your search history inside the app, and where you stopped watching each item.
- The results of the background channel health check, including measured latency.
- Your settings: language, decoder preference, subtitle choices and whether the health checker runs.
If your iPhone is backed up to iCloud or to a computer, this data is included in that backup, under your control and Apple’s terms, not ours.
Credentials and the Keychain
Passwords and tokens for Xtream Codes accounts and for Jellyfin or Emby servers are stored in the iPhone’s Keychain, the operating system’s protected credential store. They are read back only to authenticate with the server whose address you typed in.
Server addresses and credentials never leave your device.
Every connection the app makes
This is the complete list. If you observe a connection that is not on it, please tell us and we will correct this page.
- Playlist and stream requests
- The server address you typed in, and nowhere else. Nothing is proxied through us.
- Xtream, Jellyfin and Emby sign-in
- Your server. The password is stored in the iPhone’s Keychain and sent only to that server.
- Channel logos
- The image URLs written inside your own playlist. We do not host or cache artwork.
- Background health checks
- The same stream URLs that are already in your playlist. No result is reported anywhere.
- Cast discovery (SSDP)
- Your local network only, and never off it. It does announce your iPhone’s name to that network, because that is the name other apps show in their Cast list.
- Screen mirroring frames
- The CarPlay connection. They are handed from the broadcast extension to the app on the device itself and never touch the network.
- Purchases and Pro status
- Apple’s App Store, and RevenueCat, the service we use to read the App Store receipt. RevenueCat receives an anonymous app user ID, the receipt and basic device details — never your sources, credentials or viewing.
- What you watch, search for and favorite
- Nowhere. It is written to the app’s own database on the iPhone and read back by the app.
- Analytics or advertising SDK
- None.
- Crash and usage reports
- Only what you have already chosen to share with Apple in iOS Settings. We see the aggregated App Store reports Apple gives every developer, which contain no content and no identity.
Purchases
CarTV Cast Pro is bought through the App Store. Apple handles the payment; we never see your card number, billing address or Apple Account email. Your entitlement is verified against Apple’s cryptographic signature on the device itself.
To read that receipt and keep your purchase working across reinstalls, the app uses RevenueCat as a processor. RevenueCat receives an anonymous identifier generated on your device, the App Store receipt, and basic device and app details such as the iOS version and the app version. It never receives your sources, your credentials or anything about what you watch. RevenueCat processes this on our behalf under its own privacy terms.
Restore Purchases, in the app’s Settings, asks the App Store for your purchase again. It does not create an account.
Permissions the app asks for
iOS asks you before any of these, and the app works without them, with the matching feature switched off.
- Camera. CarTV uses the camera to scan QR codes that contain playlist links.
- Local network. CarTV needs local network access so other apps can cast video to it and so it can reach your media servers.
- Photo library. CarTV imports videos you choose from your photo library so you can play them offline.
- Screen recording. Screen Mirroring uses the system broadcast picker. iOS shows a recording indicator the whole time, and the captured frames go to the car display over the CarPlay connection, never to a network.
What we do not do
- No analytics SDK, no advertising SDK, no attribution or tracking framework of any kind.
- No account, no sign-up, no email address, no newsletter.
- No profiling, no recommendations, no content catalogue and no index of what anyone watches.
- No selling or sharing of personal information, because we hold none to sell.
- No cookies on this website, and no third-party scripts, fonts or images on it either.
Children
CarTV Cast is not directed at children and collects no personal information from anyone, including children. Because the app ships with no content and plays only what an adult account holder adds to it, we cannot review or rate what it plays. Parents should use Screen Time restrictions on the device, and only add sources that are appropriate for the people using them.
Your rights
Laws such as the GDPR and the CCPA give you the right to access, correct, export and delete the personal data a company holds about you. We hold none, so there is nothing for us to return or erase. This is not a loophole: it is the architecture, and the ledger above is how you check it.
Everything the app stores is on your own device. Deleting the app deletes all of it, including imported video files, favorites and watch progress. Purchases stay with your Apple Account and can be restored.
For data Apple holds about your purchase, or RevenueCat holds as our processor, contact us and we will pass the request on.
Changes to this policy
If the app ever starts making a connection that is not in the ledger above, this page changes first and names it. We will update the date at the top and, for anything material, note it in the App Store release notes.
Contact
Write to elliotalderson985@gmail.com. A person reads it. We cannot look up an account, because there isn’t one.