Privacy Policy
Last updated: 16 October 2026
This Privacy Policy explains how [Operator legal name] ("we", "us", "our"), the operator of IonTV, a product of the Ionika ecosystem, collects, uses, shares and protects personal data when you use the IonTV app for Android TV devices (the "TV app"), the IonTV Pulse web cabinet at iontv.ionika.cc (the "cabinet"), this website and the related services (together, the "Service"), and the rights you have.
We wrote this Policy with the EU General Data Protection Regulation ("GDPR"), the UK GDPR, the California Consumer Privacy Act as amended ("CCPA"), other US state privacy laws and Brazil's LGPD in mind. Where a law gives you more protection than this Policy describes, that law applies.
1. Who we are
1.1. [Operator legal name] is the controller of your personal data processed through the Service.
1.2. For any privacy question or request, write to ionikasupport@gmail.com.
1.3. Your IonTV account uses the same sign-in identity as other Ionika apps, such as IO Aura. The data of that shared identity (your email address, your password hash and your account identifier) is used by each of those apps; the data specific to IonTV described below is used for IonTV.
2. Summary
- We collect what we need to run the Service: your account details, data about the TV devices you link and their status, how much bandwidth they shared, your consents and your rewards.
- Sharing on a device starts only with your consent on that device, and you can withdraw it at any time.
- We do not collect the content of the traffic that passes through your device (section 4).
- We do not sell your personal data and do not use it for targeted advertising.
- You can access, correct, export or delete your data by writing to ionikasupport@gmail.com.
3. Personal data we collect
3.1. Account data — your email address, your password stored only as a one-way hash, your account identifier and, if one is set on your Ionika account, your user name. We also record when you confirmed your email address and accepted the Terms, and your language preference.
3.2. Google Sign-In data, if you choose to sign in that way — your email address, whether Google has verified it, and the identifier Google issues for your account in our application.
3.3. Device data — for each TV device you link: a device identifier generated by the TV app, the device name, the connection type (Wi-Fi or Ethernet), the mode you chose (ION only or ION + Spark), when the device was linked and last seen, and, when you give consent on it, the device's manufacturer, model, operating system version and app version.
3.4. Status reports ("heartbeats") — periodic reports from the TV app with their time, the connection type, whether battery optimisation allows the sharing service to run, whether the sharing service is running, and the resulting status and reason shown in the cabinet (for example "battery optimisation", "service stopped" or "consent required").
3.5. Sharing data — the amount of bandwidth your device shared in each period, reported by our network. Your ION is calculated from it.
3.6. Consent records — for each device, every consent and withdrawal: whether consent was given or withdrawn, the time reported by the device and the time we received it, the version of the consent text, the screen it was given on, the device and the account.
3.7. Rewards data — your ION and Spark balances, the history of accruals, deductions and referral bonuses, the promo codes issued to you, and whether you marked a Spark code as used.
3.8. Referral data — your referral code, and the link between your account and the account that referred you or that you referred, including when the referral link was followed.
3.9. Notification data — if you enable web push notifications, the subscription your browser creates (a push service address and encryption keys); and, where the TV app uses notifications, a notification token for the device.
3.10. Support data — the content of the messages you send us and our replies.
3.11. Technical and security data — your IP address, browser or device type (user agent), the time of requests, and server and load-balancer logs, collected when you use the website, the cabinet or the API and when the TV app reports.
3.12. Data stored in your browser — your language choice, your cookie choice and a referral code you followed, described in section 19.
3.13. We do not ask for your full name, postal address, phone number, date of birth or payment-card details. Do not send us such data, or sensitive data, in support messages unless we ask for it.
4. Bandwidth sharing: what passes through your device
4.1. With your consent, the TV app makes part of your device's unused internet bandwidth available to our network, so that requests of our business customers are routed through your connection and appear to come from its public IP address. This is the core of the Service and the reason you receive rewards.
4.2. We measure how much bandwidth your device shared and record the device's status. We do not collect the content of that traffic, and we do not use the TV app to collect what you watch, the apps you use, your files or information about other devices on your home network. We do not use shared traffic to build a profile of you.
4.3. Traffic is routed through your device on behalf of business customers of our network, under contract. They do not receive your account data, email address or rewards data.
4.4. Sharing starts only after you give consent on the device, and stops as soon as you withdraw it in the TV app or unlink the device in the cabinet.
5. Why we use your data and our legal bases
| Purpose | Data | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Creating and securing your account, signing you in, linking devices | Account, Google Sign-In, device, technical data | Performance of our contract with you |
| Running bandwidth sharing on a device, showing device status, measuring shared bandwidth, calculating and crediting ION and Spark | Device, status, sharing, rewards data | Your consent on the device; performance of our contract |
| Issuing promo codes, the referral programme, giveaway entries | Rewards, referral, account data | Performance of our contract |
| Keeping an auditable record of consent, which may be shown to Customers or auditors to prove that sharing was authorised | Consent records | Our legitimate interest in proving consent and defending legal claims; legal obligations where they apply |
| Detecting and preventing fraud and abuse (emulators, VPNs, multiple accounts, manipulated reports, referral abuse) and keeping the Service secure | Device, status, sharing, rewards, referral, technical data | Our legitimate interest in a secure and fair Service; legal obligations |
| Answering support requests | Support, account data | Performance of our contract; our legitimate interest |
| Service emails and, if you enable them, push notifications | Account, notification data | Performance of our contract; your consent for push |
| Telling you about IonTV and Ionika services | Account data | Our legitimate interest, or your consent where the law requires it; you can opt out at any time |
| Improving the Service from aggregated statistics | Device, status, sharing data | Our legitimate interest |
| Complying with the law and responding to lawful requests | Any data as required | Legal obligations |
5.1. Where we rely on legitimate interests, we have weighed them against your rights, and you may object (section 13).
5.2. Where we rely on consent, you may withdraw it at any time; this does not affect processing before the withdrawal.
6. Automated checks
6.1. We use automated checks to detect fraud and abuse. Such a check may pause accrual on a device or hold a code request for review. A decision to forfeit points or close an account is reviewed by a person, and you can contest it by writing to ionikasupport@gmail.com.
7. Signing in with Google
7.1. If you choose Google Sign-In, the cabinet loads Google's sign-in script, and Google shares with us your email address, whether Google has verified it, and the identifier Google issues for your account in our application. We use that data only to identify you so that you can sign in. We do not receive your Google password.
7.2. Limited Use. IonTV's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use or transfer this data for advertising, do not sell it, and do not use it to develop or train AI or machine-learning models.
8. Who we share data with
8.1. We do not sell or rent your personal data. We share limited data only as described here:
- Customers of the network — the websites they reach see the public IP address of your connection while sharing is on. Consent records (the account and device identifiers, the consent time, the consent text version and the screen, and the device information in section 3.3) may be provided to Customers or their auditors to prove that sharing on a device was authorised.
- IonEx — the redemption service of the Ionika ecosystem, to verify and redeem a promo code you present there.
- Gleam — the third-party platform that runs the weekly giveaways. When you take part, you give your data to Gleam under its own privacy policy; we provide Spark codes and only the information needed to apply them.
- Ionika — the Ionika ecosystem provides the shared sign-in identity and the API platform on which the Service runs.
- Service providers (processors) — companies that process data on our behalf under contracts requiring them to protect it and use it only on our instructions: Google Cloud (hosting and load balancing), Google (Google Sign-In and notification delivery), email delivery providers, and the push services operated by your browser's vendor, which deliver web push notifications.
- Legal and safety — authorities, courts or other parties where we are required to by law, or where necessary to enforce our Terms, investigate fraud or abuse, or protect the rights, property or safety of our users, the public or us.
- Business transfers — a buyer or successor in a merger, acquisition, reorganisation or sale of all or part of the Service, who will be bound by this Policy for the data transferred.
9. International transfers
9.1. Our providers may process data outside your country, including outside the European Economic Area and the United Kingdom. Where such a transfer requires safeguards, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses (with the UK Addendum where applicable), and on additional measures where needed.
10. How long we keep data
10.1. We keep personal data only as long as we need it for the purposes in section 5, unless a longer period is required by law:
- Account and profile data — while your account exists and for up to 90 days after it is closed (and in backups for up to 30 days more);
- Consent records (device sharing) — while the device is linked and for up to 24 months after it is unlinked, so that we can prove that sharing was authorised;
- Status reports and sharing data — for as long as needed to calculate and verify rewards, investigate fraud and resolve disputes;
- Rewards and transaction ledger — as long as our accounting and tax obligations require, up to 6 years;
- Support conversations — up to 24 months after they are closed;
- Inactive sign-in sessions — removed after about 90 days;
- Security and technical logs (including server and load-balancer logs) — up to 12 months, unless needed longer to investigate a security incident.
10.2. When data is no longer needed, we delete it or make it anonymous.
10.3. Unlinking a device or withdrawing consent stops sharing and accrual from it immediately. The record that consent was given and withdrawn is retained under section 10.1.
10.4. To delete your account, write to ionikasupport@gmail.com from the email address of your account. Because your sign-in identity is shared with other Ionika apps, we will tell you what deletion covers before we carry it out. On deletion we remove or anonymise your identifiers and keep only the records that the law and fraud prevention require. Any remaining ION or Spark is forfeited.
11. How we protect your data
11.1. We use encryption in transit (HTTPS/TLS), one-way hashing of passwords, an HttpOnly refresh-token cookie together with a short-lived access token kept only in memory, restricted TV-device credentials that cannot manage your account or claim codes, access control and least-privilege administrative access. No system can be guaranteed completely secure. If a personal data breach is likely to put your rights at risk, we will notify you and the competent authorities as the law requires.
12. Children
12.1. The Service is intended only for adults aged 18 or over. We do not knowingly collect personal data from anyone under 18, including children under 13 within the meaning of the US Children's Online Privacy Protection Act. If we learn that we have, we will delete it and close the account. If you believe a child has given us data, please tell us at ionikasupport@gmail.com.
13. Your rights
13.1. Depending on where you live, you have some or all of these rights:
- access your data and receive a copy of it;
- correct inaccurate data;
- delete your data;
- restrict or object to processing, including processing based on legitimate interests and direct marketing;
- portability — receive your data in a structured, machine-readable format;
- withdraw consent at any time, where processing is based on consent;
- not be subject to a decision based solely on automated processing that significantly affects you, and obtain human review;
- lodge a complaint with your data protection authority.
13.2. How to exercise your rights. Write to ionikasupport@gmail.com, preferably from the email address of your account, and say which right you want to use. We may need to verify your identity, normally by confirming that the request comes from the email address of your account. We answer within one month under the GDPR and UK GDPR (which may be extended by two further months for complex or numerous requests), or within 45 days under US state laws such as the CCPA/CPRA (which may be extended by a further 45 days); we will tell you if we need an extension and why. You can withdraw consent to sharing on a device at any time in the TV app or by unlinking the device in the cabinet.
14. Additional information for residents of the United States
14.1. California. In the last 12 months we collected these categories of personal information: identifiers (email address, user name, account and device identifiers, IP address); commercial information (rewards, transactions and promo codes); internet or other electronic network activity information (device status reports, shared bandwidth volumes, technical logs); and inferences used only for fraud prevention. Sources, purposes and recipients are described in sections 3 to 8, retention in section 10. We do not sell personal information or share it for cross-context behavioural advertising, and have not done so in the last 12 months. We do not use or disclose sensitive personal information for purposes that require offering a right to limit. We do not knowingly sell or share the personal information of consumers under 16.
14.2. You have the right to know, access, correct and delete personal information, to opt out of sale or sharing (which we do not do), and not to be discriminated against for using these rights. You may use an authorised agent, who must provide proof of authorisation.
14.3. Other states. If you live in a state with a comparable privacy law, you have the rights in section 13 as provided by that law. If we decline your request, you may appeal by replying to our answer; if we deny the appeal, we will tell you how to contact your state's Attorney General.
15. Additional information for other regions
15.1. European Economic Area and United Kingdom. You can lodge a complaint with the supervisory authority of the country where you live or work, or where an alleged infringement took place.
15.2. Brazil. You have the rights provided by article 18 of the LGPD, including confirmation of processing, access, correction, anonymisation, portability, deletion, information about sharing and revocation of consent.
15.3. Other countries. Where your local law gives you rights over your personal data, you can use them in the same way, at ionikasupport@gmail.com.
16. Emails and notifications
16.1. Service emails, such as confirmation codes, security notices and replies to support requests, are part of the Service. If we send you marketing emails, each one includes a way to unsubscribe.
16.2. Web push notifications are sent only if you enable them in your browser. You can turn them off at any time in the cabinet or in your browser settings.
17. Changes to this Policy
17.1. We may update this Policy. The "Last updated" date shows when it last changed, and we will take reasonable steps to tell you about material changes. A new version of the data-sharing consent text is always presented to you on the device before it applies.
18. Language
18.1. This Policy may be published in several languages for your convenience. Only the English version is legally binding; if a translation differs from it, the English version prevails.
19. Cookies and browser storage
19.1. This section explains what the IonTV website and the IonTV Pulse web cabinet at iontv.ionika.cc, and the IonTV API they use, store in your browser, and why. The IonTV app on your TV does not use browser cookies; what it sends us is described in section 3.
Cookies and similar technologies
19.2. A cookie is a small text file that a website saves in your browser. Local storage and session storage are similar browser features that let a page keep information on your device; unlike cookies, they are not sent to the server with every request. In this Policy, "storage" means all of them.
19.3. Strictly necessary storage is needed for the Service to work, for example to keep you signed in, and does not require your consent. Functional storage remembers your choices, such as your language. We do not use advertising or analytics storage.
What we store
| Name | Type | Set by | Purpose | Category | How long |
|---|---|---|---|---|---|
refresh_token | Cookie (HttpOnly, Secure) | IonTV API (api.ioaura.ionika.cc) | Keeps you signed in to the cabinet; page scripts cannot read it | Strictly necessary | Until you sign out or the session expires |
NEXT_LOCALE | Cookie | Website | The language of the website | Functional | 1 year |
iontv_lang_set | Cookie | Website | Marks a language you have just picked, so that the page does not override it | Functional | 30 seconds |
i18nextLng | Local storage | Website and cabinet | The language of the cabinet, kept in step with the website | Functional | Until you clear it |
cookie-consent | Local storage | Website and cabinet | Your choice in the cookie banner, so that we do not ask on every visit | Strictly necessary | 180 days, then we ask again |
iontv.ref | Local storage | Website and cabinet | A referral code you followed and when, handed from the website to the cabinet | Functional | Up to 90 days |
iontv.pendingLinkToken | Session storage | Cabinet | A TV pairing code you scanned before signing in, so that linking continues after sign-in | Strictly necessary | Until it is used or you close the tab |
iontv.pushSubscriptionId | Local storage | Cabinet | The id of your web push subscription, so that notifications can be turned off | Functional | Until you turn notifications off |
iontv.installBannerDismissed | Local storage | Cabinet | Remembers that you closed the “Add to Home Screen” tip on iPhone | Functional | Until you clear it |
19.4. The cabinet's short-lived access token is kept only in the page's memory and is not stored in your browser.
19.5. If you enable web push notifications, your browser keeps a push subscription for the cabinet. You can remove it at any time in the cabinet or in your browser settings.
19.6. The referral code in iontv.ref is sent to us only if you register.
What we do not use
19.7. We do not use advertising, cross-site tracking or analytics cookies, and we do not sell data collected through cookies or local storage.
19.8. If we introduce optional analytics in the future, it will run only with your consent, which you can withdraw at any time, and we will update this Policy first.
Third-party services
19.9. Fonts are served from our own site; we do not load third-party fonts.
19.10. Google Sign-In. The cabinet loads Google's sign-in script only if you use Google Sign-In. Google may then set or read its own cookies under Google's privacy policy.
19.11. Hosting. The site is delivered through a Google Cloud load balancer, which processes technical data such as your IP address to deliver pages. We do not use it to set cookies for tracking.
19.12. Gleam and IonEx are separate websites with their own cookie policies.
Managing your choices
19.13. You can change your cookie choice at any time through the cookie settings link in the footer of the website.
19.14. You can also clear or block cookies and local storage in your browser settings. If you block the refresh_token cookie, you will not stay signed in to the cabinet; if you clear local storage, your language and cookie choices are forgotten.
20. Contact
20.1. Privacy questions and data requests: ionikasupport@gmail.com.