Privacy policy

Last updated: October 17, 2026.

1. Data controller

Code Family SAS (SIREN 999 566 995), 76 rue de Vaucanson, 78420 Carrières-sur-Seine, France, is the controller of the processing described below, for the Kovo Player macOS app and the kovoplayer.code-family.fr website. Contact: contact@nextwatch.code-family.fr.

This policy is written in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

2. In short

• Adding your servers and browsing your catalogue needs no account; playback needs the NextWatch Pro subscription, tied to a NextWatch account (sections 8 and 9). Your servers, credentials, favourites and resume positions stay on your Mac.
• Neither the app nor this website uses ads, analytics or cookies.
• Code Family never receives your card details: payment is processed by Link and Stripe.
• Data is sent to Code Family or its providers only if you connect a NextWatch account or subscribe to NextWatch Pro (sections 8 and 9), plus your IP address when the app checks for updates and when you visit this website (sections 6 and 7).

3. Data stored only on your Mac

The app stores locally, on your Mac: the address and user name of your servers, the cached catalogue of your servers, your favourites, resume positions, statuses and ratings, cached TMDB metadata and the files you download. The passwords of your servers are kept in the macOS keychain, on this device only.

Code Family has no access to this data: it is not sent to our servers. A server’s password is removed from the keychain when you delete that server in the app.

4. Your IPTV provider

The app connects directly from your Mac to the server you added, with your credentials, to load the catalogue and play the streams. That server receives in particular your IP address and credentials, and processes this data under the responsibility of its operator, according to its own rules. Some servers do not use an encrypted connection (HTTP): the app tells you so when you add the server.

5. Posters and synopses (TMDB)

To show posters, synopses and ratings, the app queries the API of TMDB (The Movie Database, United States) with the titles of the movies and series of your catalogue. No account data and no personal identifier is sent; as with any internet connection, TMDB receives your Mac’s IP address.

6. App updates

When the app checks whether a new version is available (automatically or on request), it downloads the file https://kovoplayer.code-family.fr/appcast.xml from our server, hosted by OVH, then, if you install an update, the file of the new version. These requests send your IP address and the app’s name and version. No profile of your Mac is sent. This data is only recorded in the server’s technical logs (section 7).

7. This website

This website sets no cookies, uses no analytics tool and loads no third-party resource. Like any web server, our host OVH records the IP address, date, requested page or file and browser in technical logs, to keep the service secure and working (legitimate interest). These logs are kept for 12 months.

The withdrawal form sends nothing to this website: it prepares an email that you send yourself from your email app. The messages you send us (support, complaints, withdrawal) are kept for as long as needed to handle your request, then for up to 5 years as evidence (limitation period).

8. NextWatch connector

Linking a NextWatch account is needed to subscribe to NextWatch Pro or to activate an existing subscription, and so for playback. If you connect your NextWatch account to Kovo Player, linking goes through the nextwatch.code-family.fr website, where you confirm a code shown by the app. The app then keeps in your Mac’s keychain the identifier and email address of your NextWatch account, a device identifier and the link date. Authentication and data storage are provided by Firebase (Google).

Once connected, the app:

• reads your watchlist, your recommendations and your friends’, and the status of your NextWatch Pro subscription;
• saves to your NextWatch account the status (“watching”, “watched”) and rating of the movies and series you watch or rate, when they match a work known to NextWatch. As NextWatch works, a high rating may be suggested to your friends as a recommendation.

Matching your catalogue with NextWatch works is computed on your Mac: the address of your servers, your credentials and your catalogue are not sent. This data is processed under the NextWatch privacy policy, also published by Code Family SAS. You can disconnect the account at any time in the app’s settings: the link is then removed from your NextWatch account and this information from your Mac, except the device identifier, reused for a later link.

Legal basis: performance of the service you request by connecting your account (contract).

9. NextWatch Pro subscription

When you subscribe, the app opens a RevenueCat payment page, with the identifier of your NextWatch account so the subscription is tied to it. The payment is sold by Link (Sold Through Link, LLC, Stripe group), which acts as the merchant of record of the transaction (Stripe Managed Payments service).

Link and Stripe directly collect the data needed for the payment: details of your card or other payment method, email address, billing country and address (VAT calculation) and technical fraud prevention data. They process it as independent controllers, for the payment, invoicing, their tax and legal obligations, payment support and fraud prevention, under the Link privacy policy and the Stripe privacy policy. Your card details are never sent to us.

We receive from RevenueCat and Stripe, and process, the following subscription data: account identifier, email address, plan, trial and subscription status and dates, transaction amount and country, transaction identifiers. It is used to unlock the Pro features, to grant the trial only once per account, to handle renewal, cancellation, withdrawal and refunds, to answer Link support when it asks us about an order, and to keep our accounts.

Legal basis: performance of the contract; legal obligation for keeping accounting records (10 years, article L. 123-22 of the French Commercial Code).

10. Recipients of the data

• Firebase (Google): hosting and backend services of the NextWatch account (section 8)
• RevenueCat (RevenueCat, Inc., United States): subscription management
• Link and Stripe (Stripe group, including Sold Through Link, LLC, United States): sale and collection of the subscription as merchant of record, VAT, receipts and invoices, payment support and fraud prevention. They act as independent controllers for this data (section 9)
• TMDB: API for movie and series information (no account data sent, section 5)
• OVH (OVH SAS, France): hosting of this website and of the app updates

We do not sell or rent your data.

11. Data transfers outside the EU

Google’s Firebase services may involve transferring and storing data on servers located outside the European Union. These transfers are governed by the European Commission’s standard contractual clauses.

Subscription management by RevenueCat, payment by Link and Stripe and the requests sent to TMDB may also involve transfers to the United States, governed by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.

12. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to set instructions on what happens to your data after your death. To exercise them, write to contact@nextwatch.code-family.fr. Data stored only on your Mac (section 3) is under your sole control: you can delete it at any time.

You may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

13. Changes

We may change this policy, for example when the app evolves. The date of the last update is shown at the top of this page. In case of a substantial change, you will be informed in the app or on this website.