UNDERSTAIRS TV
Privacy Policy
UNDERSTAIRS TV for Android TV · Last updated 23 August 2026
The short version
UNDERSTAIRS TV collects nothing. It has no analytics, no advertising, no crash reporting and no accounts of ours. We do not operate any server that your device talks to, and no information about you or your viewing reaches us at any point.
The app is an empty player. It does nothing at all until you point it at a media server that you run or are authorised to use, and from then on it talks directly to that server.
What we collect
Nothing. The app contains no analytics SDK, no advertising SDK and no crash
reporting SDK. It requests only two Android permissions — INTERNET and
ACCESS_NETWORK_STATE — and neither is used to gather information about you.
What is stored on your device
The following stay on your TV, in the app's private storage, and are never transmitted to us:
| Item | Why |
|---|---|
| The address of each server you add | So the app can reconnect without you retyping it. |
| Your sign-in token for each server | So you stay signed in. Issued by your server, not by us. |
| Your preferences | Theme, audio settings, which home rows you want, default quality, and similar. |
| Cached artwork | Posters and backdrops fetched from your server, so browsing is quick. |
| A randomly generated device identifier | A random value created on first run, so a server can tell your TVs apart and keep resume points separate. It is not derived from any hardware ID or advertising ID and is not linked to you. It is sent only to your server. We never see it. |
Uninstalling the app removes all of it. Signing out clears the token for that server.
The app also keeps a short diagnostic log to help you troubleshoot playback. It lives in memory only, is visible solely on your own screen, is never written to a file and is never uploaded.
Where your data goes
There are only two possible destinations, and you control both.
1. Your media server
Everything the app does — browsing, searching, playback, resume points — is a direct connection from your TV to the server address you entered. Nothing is proxied or relayed through any service of ours, because we do not run one. Your server operator's own privacy practices apply to what that server records.
2. YouTube — only if your server offers trailers
Where a server provides trailers, they are played through YouTube's embedded player, so your device contacts YouTube directly and Google's privacy policy applies to that playback. This feature is not available on Jellyfin servers, so most users will never trigger it. No trailer is ever loaded unless you open one.
Children
The app is not directed at children, contains no advertising, and shows only whatever content is on the server you connect to.
Security
Sign-in tokens are held in the app's private, sandboxed storage, which other apps on the device cannot read. When your server is reachable over HTTPS, traffic to it is encrypted. The app also permits plain HTTP specifically and only so it can reach a self-hosted server on your own local network, where that is very common — this is a deliberate choice for local addresses, not a weakening of connections to servers reachable over the internet.
Your choices
Sign out from Settings to clear a server's token, or uninstall the app to remove everything it has stored. Because we hold no data about you, there is nothing for you to request from us and nothing for us to delete. Any request about what your server has recorded should go to whoever operates that server.
Changes
If this policy changes, the revised version will be posted at this address with an updated date above. Material changes will also be noted in the app's release notes.
Contact
Questions about this policy: support@understairs.tv