Privacy policy
Frunk.tv is used without an account and nearly everything stays in the car's browser. Here is which data the server processes, why and on what legal basis, for how long, who else sees it and how to exercise your rights. Each piece of data, section by section, is described in "Help and privacy" inside Frunk.tv, and what is kept in your browser, in the cookies page. The Spanish version prevails.
Controller
Jose Morales, owner of Frunk.tv (full contact details are in the legal notice). For anything about your data: hola@frunk.tv.
In short
- Without premium, the server does not know who you are: there is no account, and no advertising or analytics cookies.
- With premium, the server knows your Telegram user and your purchases; what you sync is end-to-end encrypted and it cannot read it.
- No data is sold or passed on, used for advertising or used to make automated decisions about you.
Without premium
- In your browser: favourites, IPTV lists (with their passwords), settings, where you are in each episode, high scores and games. They are not sent to the server. You erase them from "Erase data". The detail is in cookies.
- Sending from the phone to the car (a list, a backup, a game) and moving to theatre mode: they go through the server encrypted, with a key the server never gets, in memory only and for 10 minutes at most. Theatre mode also leaves, encrypted, the list of games it holds; it is deleted after six months without a new one. To prevent abuse, the transfers from each connection are counted, in memory only.
- Game rooms with the phone as controller: the name you type, the buttons you press and the games you send cross the server encrypted, with a key carried in the QR code that the server never receives (if you type the code instead of scanning it, the car hands it to your phone encrypted for it). In memory only while the game lasts.
- Carretera (searches and routes): when you ask for a route, your position (if you choose to start from it and allow it in the browser), the destination you search for and the stops go through Frunk.tv's servers, which compute the search and the route with their own services. While following a route («Start») your position stays on your device, and is only sent if you tap Recalculate (position and heading). None of it is written to disk or to the log: answers are kept in memory for 5 minutes so the same query is not repeated, and your connection is counted for 10 minutes for the rate limit. For the route's weather, the server sends the Norwegian Meteorological Institute (MET Norway) route points rounded to about 11 km and the times, without your IP address or anything that identifies you. The browser only asks for location permission when you use it, and you can withdraw it in its settings at any time. The plan you send from your phone to the car is encrypted, like the other sendings. With premium, your places and recent destinations are kept in your browser and sync encrypted (see With premium).
- Browser diagnostics: only if you tap Send, it goes by Telegram to the owner, without being stored on the server. It carries the browser and what it can do, not who you are.
- Car diagnostics (frunk.tv/#/diagnostico): the tests run in the browser; only if you press "Send as a fault" does a summary of what was tested (what works, how many fps, in which of the car's browsers) and the note you write reach the Ideas board, like any proposal, with nothing that says who you are.
- Community ideas: what you suggest on the board (frunk.tv/#/ideas, the bot or its Mini App) is stored and, if the owner publishes it, everyone sees it on the board and in the Telegram group, without your name; from Telegram, the owner also sees your name or @username, which is deleted from your ideas if you delete your account. Each vote is stored as a fingerprint that does not tell who voted, only that nobody votes twice. Ideas are kept while they are on the board. Write only what you want others to read.
- Technical log: for each request, the time, the address asked for, the response and the IP address it comes from (almost always Cloudflare's, which sits in between), to keep the service secure and working. It overwrites itself once it fills a few megabytes, normally within days. To curb abuse, the requests of each IP are also counted in memory, for minutes.
- Statistics: with Umami, installed on Frunk.tv's own server (at analytics.zynvas.dev), without cookies and without storing the IP: which sections are opened (never which channel, station, podcast or list), when play is pressed or premium is looked at, the country and approximate city, the browser, the language and the screen size; in Carretera, only that it is opened, that a route is calculated or started, never the origin, the destination or the position. It only serves to know what is used; it is not combined with anything or passed on, and it is deleted after 25 months. If your browser asks for "Do Not Track", or you turn it off in cookies, nothing is sent.
Legal basis: the legitimate interest in providing a service that works, is secure and knows which sections are used, and in giving you in Carretera the search and route you ask for (article 6(1)(f) GDPR), which does not outweigh your privacy because the data is minimal, does not identify you and can be avoided; for diagnostics and ideas, your consent when you send them (6(1)(a)), which you can withdraw by asking for them to be deleted.
With premium or when signing in with Telegram
- Your Telegram account: user number, name and @username, which Telegram provides when you sign in or buy. Never your phone number or your messages.
- Your purchases in Stars: what, when, whether it is in a car or on your devices only, and whether it was refunded. For a gift, who bought it and who opened it, so the refund is the buyer's and the premium the recipient's.
- Your devices: the name you give them, when you signed in and when they last connected, and their keys, stored in a way that cannot be read.
- What is synced (lists, favourites, progress, backups and, in Carretera, your places, recent destinations, the car's settings and the routes you send to your screens): end-to-end encrypted. Only your car and the devices you approve have the key; the server cannot read it, it only knows its size and when it was sent.
- The bot: writes to you to confirm purchases, activations and new devices. In the Telegram group it reads the messages only to answer frequently asked questions; it does not store them. When an admin asks it to for a specific message, it drafts a reply with Claude, by Anthropic: it sends the text of that message, of the message it replies to and the first name of whoever wrote it, never your @username or your number. The admin reviews the draft before posting it, and Frunk.tv stores neither the message nor the draft. Legal basis: the legitimate interest in answering the group's questions (article 6(1)(f) GDPR); you can object by writing to hola@frunk.tv.
Legal basis: the premium contract (article 6(1)(b) GDPR); purchases are also kept because tax and commercial law require it (6(1)(c)). Without this data premium cannot be provided.
The Android app
- On the device: favourites, recent channels and the last one you watched, settings (country, quality, start screen…), your IPTV lists with their passwords and their guide, and a copy of the catalogues and logos to start faster. They are not sent to the server or to Android's backups. They go when you clear the app's data or uninstall it.
- What it asks frunk.tv for: the catalogues of channels and stations, the programme guide, the current address of some streams that change, lists sent from a phone (encrypted, as on the website) and, in the version downloaded from frunk.tv, whether there is a new version. Each request carries the app's version, the Android version and the device model, and is in the technical log like any other.
- What it asks others for: video and audio come straight from each broadcaster and station, and from your IPTV provider; the station search, from Radio Browser; and the logos, from wherever each one publishes them. They see the device's connection, as with any website.
- Permissions: internet and network state; finding your server or NAS on your local network (multicast), only when you ask; to keep playing with the screen off, with a notice while it plays; your location, only for Carretera, while you use it, if you allow it and never in the background; and, in the version downloaded from frunk.tv, installing its own updates. It does not ask for your contacts, the microphone or your files.
- Location: your location is only used while Carretera is open: to centre the map, as the starting point of the route and to follow it. It is sent to Frunk.tv's servers, encrypted in transit and rounded to about 11 m, only to calculate the route, and it is not stored. Never in the background.
- Crash report: if the app closes because of a fault, it notes on the device what failed and, the next time you open it, asks whether you want to send it. Only if you tap Send does it reach frunk.tv: what failed (the error and where, in the app's code), the app's version, the device's make and model, the Android version, whether it is a TV, a Fire TV or a phone, and the note you write, if any. Nothing that says who you are. It is kept with the reports of the same fault, which are only counted, and the owner gets a notice by Telegram when the fault is new. If you tap Don't send, it is deleted from the device.
- No ads and no statistics: the app carries no advertising and no third-party analytics or crash reporting tool.
- When you sign in (with premium): the app joins your account by scanning a QR code with your phone; the server keeps the device's name (its make and model) and its public key, as for any other device of yours, and what is synced is end-to-end encrypted.
Legal basis: the same as for the website, the legitimate interest in a service that works and is secure (article 6(1)(f) GDPR), and the premium contract when you sign in (6(1)(b)); the crash report, your consent when you send it (6(1)(a)), which you can withdraw by asking for it to be deleted.
Movies & Series
- The catalogs you add: their address, their database, your downloads and where you stopped in each film or episode («Continue watching») stay in your browser or on your device. They are not sent to the server. The browser or the app downloads each catalog straight from whoever publishes it, and the videos from wherever they are (for Frunk.tv's catalogs, the Internet Archive): they see the connection, as with any website.
- Withdrawn catalogs: the browser or the app downloads from frunk.tv the list of catalogs that no longer open and compares it on the device. Frunk.tv does not know which third-party catalogs you have. If you send one from your phone, its address crosses the server encrypted, like an IPTV list.
- Your server or NAS (in the app): the app talks straight to it, and to plex.tv for a Plex, to sign in and find your servers. Its address and credential stay on the device, outside backups.
- AllDebrid: your key stays in your browser or on your device, which talks straight to AllDebrid. AllDebrid sees what you ask it for, under its own privacy terms.
- The Cine subscription: like premium's purchases, what, when, how many Stars, until when it lasts, whether it was cancelled or refunded, tied to your Telegram user. The app asks the server whether you have Cine to turn it on. Legal basis: the contract (GDPR 6.1.b), and the tax and consumer obligations to keep purchases (6.1.c).
- Statistics: they do not record which catalog you have nor which film or series you watch.
Espejo: the phone's screen in the car
- The picture goes straight from the phone to the car, end-to-end encrypted by WebRTC. It does not go through Frunk.tv's servers, which neither see nor record it.
- The connection: the server only introduces the phone to the car. It receives the session's code, your IP address and messages sealed with a key that travels in the QR and the server does not know. All of it is kept in memory and goes when the session closes. To connect, both devices ask a Google STUN server for their public address, which sees the IP address.
- Location: if you allow it in the car's browser, it is used only there, to take the picture off if the car moves. It is sent to nobody.
- On the phone: Android asks your permission every time to share the screen, and a notification shows while it is shared.
Legal basis: the premium contract (article 6(1)(b) GDPR).
For how long
- If you delete your account: everything at once, except purchases (see below).
- If you sign in with Telegram without premium: 30 days.
- A device that has not connected for a year leaves your account on its own.
- Synced data the car does not collect: 30 days; all of it, as soon as premium moves to another car or is cancelled.
- Purchases: while premium exists and then six years (article 30 of the Spanish Commercial Code), after which they are deleted automatically.
- Statistics: 25 months. Technical log: the time it takes to fill, normally days.
- Ideas: while they are on the board; your name, until you delete your account.
- The app's crash reports: 90 days from the last time that fault happens again.
Deleting your account
You can delete your account whenever you like, in any of these three ways:
- In the Android app: Settings → Account → Delete my account.
- At frunk.tv/cuenta, signed in with your Telegram: «Delete my account», at the foot of the page.
- By email to hola@frunk.tv, with your Telegram @username. It is done within a month and we confirm it to you.
Deleted, at once: your devices and their keys, everything synced from your cars (backups, pending changes, sync keys, recovery code), the bot's pending notices, your profile (name and @username) and your name on the ideas you suggested. The car or browser your premium is in loses its activation.
Kept: your purchases (what, when, how many Stars and your Telegram user number as the buyer), activated in no car, for the six years commercial law requires (article 6(1)(c) GDPR). That is why, if you sign in again with the same Telegram, they are still yours and you can activate them again. What was already posted in the Telegram group cannot be undone either.
What is in the car's browser, on your devices or in the app is not on the server: it goes with «Delete data» in Frunk.tv or by uninstalling the app. The chat with the bot is in Telegram, which lets you delete it.
Cookies
Only technical ones, needed for what you ask for, and Umami's statistics use none. The full list, with what is kept in the browser and for how long, is in the cookies page.
Who else sees data
- Oracle Cloud hosts the server, in Madrid, as a processor.
- Cloudflare sits between your browser and the server. It is a US company certified under the EU-US Data Privacy Framework, which provides the safeguards for that transfer.
- Google, with Espejo: its STUN server sees the IP address of the phone and of the car when they connect. It is a US company certified under the EU-US Data Privacy Framework.
- Telegram, when you sign in with Telegram, when you pay and when you talk to the bot, under its own privacy terms. Diagnostics and ideas also reach the owner through Telegram.
- Anthropic receives, as a processor, the Telegram group messages an admin asks a draft reply for (see above). It is a US company; the transfer relies on the European Commission's standard contractual clauses in its data processing agreement, and under its terms it does not use that data to train its models.
- Each broadcaster, station, producer, newspaper and your IPTV provider see the car's connection when you play something of theirs, as with any website, because it comes straight from them. The same goes for the images in What's new, hosted on ImgBB, and for the services you add yourself, such as AllDebrid.
- OpenFreeMap (Hyperknot Software Kft., Hungary) serves the Carretera map tiles straight to your browser, so it sees your connection and the area of the map you view; its policy says its access logs hold no IP addresses and are deleted after 7 days.
- MET Norway (the Norwegian Meteorological Institute, within the EEA) receives from Frunk.tv's server the route points rounded to about 11 km for the weather, never your connection or anything that identifies you.
No data is sold or passed to anyone else, nor used for advertising.
Your rights
You can ask for access, rectification, erasure, objection, restriction and portability of your data, and withdraw at any time any consent you gave, by writing to hola@frunk.tv; if you have premium, give your Telegram @username so your data can be found. You will be answered within a month at most. If you think your request was not handled properly, you can complain to the Spanish Data Protection Agency (AEPD) or the authority where you live.
Children
Frunk.tv does not knowingly process data of children under 14: premium and signing in with Telegram are for people over that age. If you know a child under 14 has given their data, write and it is deleted.
Changes
This version is dated 3 November 2026. If anything important changes, it is announced in the bot before it applies.