Privacy Policy
This policy explains how OnBR Aplicativos processes data in the FlixUp app and the flixup.icu website and panel. FlixUp is a media player: users supply their own playlists and must have permission to access the content.
Last updated:
On this page
1.Who is responsible
OnBR Aplicativos is responsible for processing data used to operate FlixUp, device registration, activation and support. For questions or requests about your data, contact [email protected].
Your playlist provider and payment services may also process data under their own responsibilities and privacy policies. This policy covers processing related to FlixUp and does not replace the content provider's policy.
2.Data we process
Device and access: an app-generated identifier, virtual MAC, pairing ID, platform and version information, registration and last-contact records, and license and activation status. The LG app's virtual MAC is generated by the pairing system and is not necessarily the TV's physical network address.
Playlist and account: server code, username, password, playlist or server address, and catalog data supplied by your playlist. This information is needed to connect your account and play the content you select.
On-device preferences: language, favorites, playback progress, player settings and adult-category controls. The app uses local storage to keep these preferences, the session and device identity.
Website, support and payments: information you provide in support requests; technical connection data such as IP addresses, timestamps and server logs; and, when you request paid activation, your name, email, Brazilian tax identifier (CPF or CNPJ), payment reference, amount and status. Payment processing may involve Asaas or Mercado Pago, depending on the available payment method.
3.Purposes and legal grounds
We use data to register and recognize devices, authenticate access, connect playlists, load catalogs, play media, maintain preferences and verify licenses. This processing supports the service you request and related contractual steps.
Billing information is used to issue and reconcile payments, activate the app and comply with legal obligations. Technical data may also be used to diagnose faults, protect accounts and prevent abuse, based on legitimate interests where applicable and subject to your rights. Where consent is required, it must be requested separately; reading this policy is not blanket consent.
4.Storage and access to content
The app keeps device identity, session data, preferences, favorites, progress and cache on your TV. The panel stores the device, playlist, access, license and payment records needed to run the service. Playlist credentials may be retained on the device and in the panel to allow future connections.
During playback, the TV connects to media addresses in your playlist. Their provider may receive your IP address, requested resources and other connection data. Your playlist may contain third-party services with their own practices; avoid playlists from unknown sources.
5.Sharing and external services
Necessary data may be accessed by hosting, infrastructure and support providers that enable the service. Asaas or Mercado Pago receive data needed to process activation and send payment notifications to the panel, including after the payment page is closed.
To display descriptions, genres, cast and artwork, the app queries TMDB through the panel. Search terms, titles or work identifiers and the requested language are sent for that query. TMDB and playlist images may load directly on the TV, allowing their servers to receive technical connection data. TMDB queries do not require your playlist password.
We may also disclose information where needed to comply with legal obligations, respond to a valid order or exercise legal rights. The features described here do not process data for selling customer lists or behavioral advertising.
6.Local storage and cookies
Local storage supports app functions, and the panel may use session cookies for authenticated areas. Clearing app data may remove your session, favorites, progress and pairing identity; it does not automatically delete server-side records.
This policy page does not install advertising tools, load external fonts or create tracking cookies. Language links work without JavaScript. Additional hosting settings or services introduced by the operator must be reflected in future policy updates.
7.Retention
Local data stays until removed through available app functions, device settings or app removal, depending on the device's behavior. Server records are kept as needed for the service, licensing, support, security and outstanding issues.
Billing and other records may be retained as necessary for legal obligations and legal claims. Backup copies may remain until their replacement cycle. This policy does not claim that records are automatically deleted after a fixed period. Contact us for retention information or to request deletion.
8.Security
The service uses measures such as HTTPS communication with the panel, app identity proofs and access controls. No system offers absolute security. Protect physical access to your TV and do not share your credentials, MAC or device ID with unauthorized people.
The TV's local storage may contain session and playlist access data. Before selling or transferring the device, sign out and remove app data. If you suspect unauthorized access, contact us and change your credentials with your playlist provider.
9.Your rights and deletion requests
Subject to applicable law, you may request confirmation and access, correction, sharing information, portability where available, anonymization, restriction or deletion of inappropriate or unnecessary data, and may object or withdraw consent where consent is the basis for processing. Legal obligations may limit deletion and other rights.
Email [email protected] with your request and an identifier that helps locate your records, such as the app's MAC and device ID or the billing email. Do not send passwords, full payment records or identity documents unnecessarily. We may request proportionate identity verification to protect your account. We respond within applicable legal deadlines and explain any limitations.
You may also ask for information about automated decisions affecting your interests, such as license status linked to payment status, and contact the competent data protection authority, including Brazil's ANPD.
10.Processing in other countries
Hosting, payment providers, TMDB and media servers may operate in other countries. Depending on the service used, your data may be processed outside your country. Where OnBR Aplicativos is responsible for a transfer, applicable legal requirements and protection mechanisms must be observed. Contact us for further information.
11.Children and young people
An adult must handle registration, purchases and FlixUp configuration. The service does not intentionally request children's data for independent registration. If you believe a child's data was submitted without appropriate authorization, contact us for assessment and action. Parents and guardians should supervise playlists and app content controls.
12.Changes to this policy
We may update this policy to reflect service changes or applicable requirements. The current version and its update date will be available here. Material changes will be communicated through available channels where required. All three language versions describe the same service; contact us with interpretation questions.