Privacy Policy

Effective 21 September 2026 · Applies to the Aerial app for iPhone, iPad, Mac and Apple TV, and to this website

Aerial is a media player published by SEVENLABS P.S.A. (“we”). This policy explains what the app does with information, which is very little, and what happens when you contact us or visit this website.

What the app stores, and where

Aerial keeps the following on your device so it can work. None of it is sent to us.

• Playlists and logins. The playlist address, or the Xtream Codes server, username and password you enter, are stored in the device Keychain. They are sent only to the server you entered them for. If iCloud Keychain is on, Apple carries them to your other devices under your Apple Account; we never receive them.
• Preferences. Favourites, recently watched and resume positions, channel arrangement (hidden, renamed, renumbered and reordered channels, custom groups), programme reminders and settings are stored on the device.
• iCloud sync, if you turn it on. With “Sync with iCloud” enabled, the preferences above are also written to the private iCloud key-value store that belongs to your Apple Account, so your other devices can read them. Passwords are never part of this sync. That store is yours: Apple hosts it, only your devices can read it, and we cannot.
• Cached content. Channel lists, programme guides, film and series details and artwork downloaded from the playlist and guide servers you configured are cached on the device so the app is fast.
• Files you open. When you open a video from Files, iCloud Drive, Finder or another app, Aerial keeps a bookmark to it so it can appear under recently opened. The file itself is not copied.
• Parental lock. The PIN is stored as a salted hash in the Keychain and never leaves it.
• Purchase state. Whether you own Aerial Pro, and the date your free trial began, are read from the App Store and kept in the Keychain.
• Diagnostics. The app writes to the device’s own system log to make problems diagnosable. Playlist and stream addresses are redacted before they are written, because an Xtream address carries your username and password. Nothing in this log is sent anywhere.

Spotlight search, Siri Shortcuts, widgets, the Apple TV Top Shelf and Handoff work from this same on-device data. The Spotlight index is private to the device. Handoff passes only a channel identifier, which the receiving device resolves against its own copy of your playlist. Reminders are local notifications; Aerial does not use push notifications and has no server that could send them.

Who your device talks to

Aerial connects only to the servers you tell it to: your playlist provider, your programme-guide source, and the addresses of the streams in your playlist. Those servers can see your IP address, the credentials you gave them and what you request, exactly as they would with any player. Their privacy practices are their own. Aerial does not choose them, does not bundle any, and is not affiliated with any provider. Many IPTV services use plain http:// addresses; in that case the connection between your device and that provider is not encrypted.

Beyond the servers you configure:

• Apple. The App Store handles purchases and restores, and iCloud handles sync if you turn it on. Apple’s privacy policy governs those services. If you have chosen in your device settings to share analytics with app developers, Apple may show us anonymised crash reports and aggregated usage statistics for Aerial; these contain no identity, no addresses and no credentials.
• YouTube. When a film or series listing includes a trailer, the “Trailer” button opens it in YouTube, in your browser or the YouTube app. From that point Google’s privacy policy applies. Nothing opens unless you tap the button.

There is no other destination. Aerial embeds no third-party SDKs. The only third-party code is VLCKit, an open-source playback library, which makes no network connections of its own beyond playing the stream you asked for.

Purchases

Aerial Pro is a one-time in-app purchase handled entirely by Apple. We receive no payment details, no name, no email address and no other personal information from the transaction; Apple gives us only aggregated sales figures. Refunds are handled by Apple under its App Store terms.

When you contact us

If you email aerial@sevenlabs.pl, we receive your email address, what you write and anything you attach. We use it only to answer you. The legal basis is our legitimate interest in providing support (GDPR Article 6(1)(f)). We keep the correspondence for as long as needed to resolve the matter and for a reasonable period afterwards in case you follow up, then delete it. We do not add you to any list.

This website

This website sets no cookies and runs no scripts, analytics or tracking of any kind. It is served by Vercel, whose infrastructure sees your IP address and the pages you request, as any web host does, and keeps short-lived access logs for security and operations.

Children

Aerial is rated 17+ on the App Store and is not directed at children. We knowingly collect no data from anyone, children included. The parental lock exists so that adults can restrict what the app shows on a shared device.

Retention and deletion

Because we hold no data about you, there is nothing for us to retain or delete on our side. What the app stores is under your control:

• Removing a playlist in the app deletes its credentials from the Keychain and its cached content from the device.
• “Remove Aerial’s data from iCloud” in Settings deletes everything the app has written to your iCloud key-value store. Turning off “Sync with iCloud” stops further writes.
• Deleting the app removes its caches, preferences and file bookmarks. Keychain entries can outlive an app on Apple platforms, so remove your playlists in the app first if you want those gone too.
• Anything in iCloud Keychain or your iCloud key-value store is otherwise managed through your Apple Account settings.

Your rights

Under the GDPR you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with a supervisory authority; in Poland that is the President of the Personal Data Protection Office (Prezes UODO). Since the only personal data we ever hold is the email you send us, exercising these rights usually means asking us to delete that correspondence, which we will do.

Changes

If this policy changes, the new version is published at this address with a new effective date. We will not start collecting data without changing this policy first.

Contact