YagiPrivacy Policy
Last updated 9 November 2026 · applies to Yagi: IPTV Player & M3U TV for iPhone, iPad, Mac and Apple TV.
This policy describes what the app collects and who handles it. It was written from the app's own source code and its App Store privacy declaration, not from a template. In short: we never see your playlist, your provider login, or what you watch.
Who is responsible
DevOrbit Labs is the data controller for the processing described here. You can reach a person at halimozturk@windowslive.com.
Yagi provides no content
Yagi is a player. It ships no channels, films, series or playlists. You add a playlist link, an Xtream server login or a guide link from a provider you choose. The app then talks to your provider's servers directly: it downloads the playlist and guide, and plays the streams, from there. Those requests, including the login you entered, go to your provider and to no one else. Your provider's own privacy policy covers what they do with them. We have no server in between and we never receive them.
Your provider login and iCloud Keychain
The playlist addresses and logins you add are stored in the system Keychain on your device, not in a plain file. They are saved as synchronizable Keychain items, so if iCloud Keychain is turned on for your Apple Account, Apple syncs them to your other devices signed in to the same account, where Yagi can find them. If iCloud Keychain is off, they stay on the one device. We cannot read them in either case. You can remove a source in the app, which deletes its Keychain item; Apple then removes it from your other devices too.
The PIN for the adult-content lock is kept in the device Keychain and is not synced.
What stays on your device, or in your own iCloud
Your library (the channels, films, series and guide your playlist contains), what you watched and your place in each title are kept on your device, and the words you type into search are not sent anywhere. Which channel or title you played never leaves your device.
Your favourites, your list of sources and the adult-content visibility switch are also mirrored to your own private iCloud database, so they come back after a reinstall and appear on your other devices. That database belongs to your Apple Account; Apple processes it, and we cannot read it. You can manage it in your device's iCloud settings.
What is collected, and by whom
Two services receive limited data. None of it is linked to your identity, none of it is used to track you across other companies' apps or websites, and the two services' identifiers are not joined to each other.
Mixpanel (product analytics and app health)
- Product interaction: which of the app's own screens and controls are used, and whether playback started or failed. Never the name of a channel, title, playlist or provider.
- Diagnostics: crash reports, hang and launch-time measurements and similar app-health data, collected through Apple's MetricKit on iPhone, iPad and Mac.
- Device identifier: an app-specific identifier used to count devices (Apple's identifier for vendor on iPhone, iPad and Apple TV; a hardware-derived identifier on Mac). It is not the advertising identifier.
- Other data: your answer, if you give one, to the optional question "where did you first hear about Yagi?", your device's region setting, and rounded usage counts.
Mixpanel's location lookup from your IP address is turned off in the app.
RevenueCat (purchases)
- Purchase history: the App Store receipt, to know whether Yagi Pro is active on your account and to restore it.
- Device identifier: an anonymous app user id and the identifier for vendor.
- Attribution: on iPhone, iPad and Mac, Apple's privacy-preserving App Store attribution token, once per install. This does not use the advertising identifier and does not need tracking permission.
Payment details are handled by Apple. We never see your card or your Apple Account details.
What is not collected
No name, email address, phone number, contacts, location, photos, search history or browsing history. No advertising identifier: Yagi shows no third-party ads and contains no advertising SDK, so it never asks for tracking permission. There is no Yagi account to create.
Retention and your choices
Analytics and purchase data are kept by the services above under their own retention rules and are not tied to your name. Because none of it is linked to you, we cannot look it up by person; if you want data for your device removed, write to us with the approximate date and device type and we will do what the services allow. Deleting the app removes its on-device data. Data in your own iCloud and iCloud Keychain is managed from your device's iCloud settings.
Children
Yagi is not directed at children and does not knowingly collect personal data from them. It offers a PIN lock for content your provider marks as adult.
Changes
If this policy changes, the new version is published on this page with a new date.