Privacy policy
Last updated: 14 October 2026
This is a courtesy translation. In case of discrepancy, the Spanish version prevails.
We process only the data your Owlo account needs to work. We don’t sell data, show ads or use tracking cookies.
Controller
Joaquín Sanchiz Navarro, NIF 54064236E, Avenida República de Venezuela 91, San Cristóbal de La Laguna (Santa Cruz de Tenerife), España. Contact: support@owlo.app.
What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address and password (stored as a cryptographic hash, never in plain text) | Creating your account, signing in, verifying your email and recovering your password | Performance of the contract |
| If you sign in with Apple: the identifier Apple gives your account and its email address (or Apple’s relay address, if you choose to hide it) | Creating your account or signing in without typing a password | Performance of the contract |
| If you sign in with Google: your Google account identifier and its email address (never your Google password or any other data from that account) | Creating your account or signing in without typing a password | Performance of the contract |
| Lists you add: name, type, server address, provider username and password (stored encrypted) | Loading your catalogue and playing it on your screens | Performance of the contract |
| Profiles (name, colour, language, PIN stored as a hash), favourites, recently watched and playback progress | Personalising the app and syncing it across your screens | Performance of the contract |
| Linked TVs: device name, platform (VIDAA, Tizen, webOS), date added and date last used, and the latest report that its playlist doesn’t load (only the type of failure, never what was being watched) | Keeping each TV’s session, letting you unlink it and telling you in your account if one stops working | Performance of the contract |
| Technical data: IP address and server logs | Security (blocking abusive sign-in attempts) and troubleshooting | Legitimate interest |
| Waitlist: email, platforms you’re interested in and language | Letting you know when Owlo reaches those platforms. Only after you confirm your email with the link we send you | Consent |
| The reason you choose when deleting your account (and your comment, if you write one), with nothing that identifies you | Improving the service | Legitimate interest |
| Messages you send to support | Replying to you | Performance of the contract or legitimate interest |
What you watch is not recorded: we don’t log which channels, movies or series you play, except the progress and favourites the app itself needs for “continue watching”, tied to your profile. The video and the catalog go straight from your provider to your screen, without going through our servers.
Who we share it with
We don’t pass your data to third parties unless required by law. We use these providers, who process it on our behalf under a data processing agreement:
- Oracle Cloud Infrastructure, which hosts this website, the API and the database in its Madrid region (European Union).
- Cloudflare, for domain names (DNS) and to redirect owlotv.com to owlo.app. It does not serve this website or measure visits.
- Resend, to send account emails (verification, recovery and deletion notice) and waitlist emails. It may process your email in the United States under the EU-US Data Privacy Framework or standard contractual clauses.
If you choose “Continue with Google”, Google identifies you on its own page and returns your email address and an identifier to us; it processes your data under its own privacy policy. “Sign in with Apple” works the same way with Apple.
When you add or check a list, our servers connect once to the provider in it, using the credentials you added, to tell you whether it works. To browse the catalog and play, it is your TV or phone that connects to that provider, a third party unrelated to Owlo, which receives its IP address.
Some content is loaded by your TV directly from third parties, which receive your TV's IP address under their own policies:
- Trailers play from YouTube (Google) in its privacy-enhanced mode (
youtube-nocookie.com), only when you open one. - Posters and images included in your list are downloaded from whatever server the list points to, often The Movie Database (TMDB). Owlo does not use the TMDB API and is not endorsed by TMDB.
How long
- Account data, for as long as you keep the account. When you delete it from your account it is removed from the database immediately (and from backups within 30 days), except what the law requires us to keep. You can also pause it: the data is kept and your TVs stop playing until you resume it.
- The waitlist, until we tell you about the launch or you unsubscribe with the link in any of our emails.
- Lists, profiles and TVs, until you delete or unlink them, or the account is deleted.
- Server logs, for a maximum of 30 days. They do not include which titles you open or what you search for, only the type of request.
Your rights
You can access, rectify or erase your data, object to or restrict its processing, and request its portability by emailing support@owlo.app from your account’s email address. You can do many of these things yourself in your account: delete lists and profiles, unlink TVs, pause the account or delete it with all its data. If you believe we haven’t handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority in your country.
Children
You must be at least 14 to create an account. Children’s profiles are created from an adult’s account, which can protect them with a PIN.
Storage on your device
The app and the portal store on your device only what they need to work (the session and a copy of your preferences). We explain it in Cookies.