Play+ · Privacy Policy

1. Who we are

Play+ is a media player by PlayMais. The app does not offer, sell or host any channels, movies or series: it only plays the list the user already has, obtained directly from their own provider.

2. Data we process

• Account: name, e-mail and, if provided, phone number, used to sign in to the app and for support.
• Device: a device identifier (stored only in encrypted/hashed form), model (on Android devices, together with the amount of memory of the device), app version, installation source (for example, app store, website or Windows), last access date and IP address, used to activate the device, to prevent misuse of the license and to help support understand operating problems.
• App usage: profiles, playback progress, "Continue watching", "My list" and the last episode watched, to sync across the devices of the same account.
• List access data (username, password and the provider's server address) provided by the user or by support. They are stored on our server and delivered to the app so that it can connect to the provider chosen by the user; our server also uses them to check whether the list is active. They are not used for any other purpose.
• List status at the provider: the app reports whether the list is active, expired or in error and, when the provider supplies it, the expiry date. The list username and password are not sent with it.
• Playback failure report: when a title does not open, the app automatically sends our server the content type (channel, movie or series), the file extension, the address of the provider's server (without username or password), the video engine used, the model and app version, and the technical error message. These reports are used only by support to understand why the content did not open.

3. Connection and speed tests

• Automatic connection check: while the app is open, it periodically makes a very small request with no content to public internet-test servers, only to know whether there is a connection and to warn when it drops. These servers belong to third parties and receive the device's IP address, as with any internet access; no account or list data is sent.
• Speed test: it is optional and only runs when the person taps "Test my connection". The app downloads test data from public speed-measurement servers or from our server to calculate the speed; it sends no personal data.

4. What we do not do

• We do not sell or share personal data with third parties for advertising.
• We do not show ads and do not use third-party analytics or tracking tools.
• We do not record the content watched; we only keep what is needed for "Continue watching" and the failure report described above, which contains no list username or password.

5. Where the data is stored

Data is stored on servers contracted by PlayMais and is accessed only by the support team and by authorized resellers, only for the devices and accounts they serve.

6. Who we share data with

• Service providers that help us operate the app, such as server hosting and e-mail delivery, only for that purpose.
• Authorities, when required by law or court order, or to protect the rights and safety of PlayMais and its users.
• Others only when you request or authorize it.

7. Security

We use reasonable technical measures to protect data: encrypted connection (HTTPS) to our service, the account password stored only in hashed form, and the device identifier stored only in hashed form. The provider list password is different: because the system must hand it to the app to connect to the list, it cannot be stored in one-way hashed form; access to it is therefore restricted to the team and authorized support agents. No system is completely secure, but we work to reduce the risks.

8. International transfers

Our servers may be located outside the country where you live. In that case, we take measures so that your data remains protected under applicable law.

9. Third-party services

Play+ connects to the server of the provider chosen by the user to play their list. That server is not ours and has its own privacy rules, which we recommend you review. We are also not responsible for the content it offers. Covers and images shown in the app come from addresses supplied by the provider's own list, which may be public image databases. The public connection-test and speed-test servers mentioned above also belong to third parties.

10. Storage on the device

The app stores preferences (language, profile, adult-content PIN), playback progress and a copy of our server's last response (which includes the list access data) on the device itself, to work faster and offline for a few days. Uninstalling the app removes this information from the device; history and favorites can also be cleared in Settings > "Clear history and favorites".

11. How long we keep it

We keep the data while the account or device is active; playback failure reports stay in the device's technical history while the device is registered. Users may request deletion at any time, and we handle requests within 15 days (see pmstream.com.br/excluir-conta); playback progress can also be cleared in the app, under Settings.

12. Legal basis, cookies and your rights

Legal basis (Brazilian LGPD, Law 13,709/2018): performance of the contract with you (account, activation, delivering the list to the app, syncing profiles and progress); legitimate interest (security, preventing license misuse, playback failure reports and support); compliance with legal obligations (keeping access records as required by Brazil's Internet Civil Framework, Law 12,965/2014); and the regular exercise of rights.

Cookies and tracking: the website and the Help center do not use cookies, ads, Google Analytics, pixels or any analytics or tracking tools. The browser only keeps page preferences (language, paused animations, demo mode and whether the first notice was read), which never leave your device. The website loads its typeface from Google Fonts, so your browser connects to Google's servers, which receive your IP address. The partners' panel only uses cookies that are needed to keep the login. The admin and reseller panel uses Google reCAPTCHA on the sign-in screen and on password reset requests to block automated access. reCAPTCHA collects device and browser information (such as IP address and usage data) and sends it to Google, which handles it under the Google Privacy Policy and Terms of Service. The Play+ apps do not use reCAPTCHA.

Your rights: you may ask, at any time and free of charge, for confirmation that we process your data, access, correction, anonymization, blocking or deletion, portability, information about who we share it with, and object to processing based on legitimate interest. Data protection officer (LGPD, art. 41): suporte@pmstream.com.br, subject "Privacy (LGPD)". We reply within 15 days. You may also file a complaint with Brazil's data protection authority (ANPD).

13. Children

The app has a kids profile that shows only kids categories. We do not collect data from children other than the profile name chosen by the account holder.

14. Changes

This policy may be updated. The date above indicates the current version.

15. Governing law

This policy is governed by the laws of Brazil, in particular the LGPD (Law 13,709/2018), the Internet Civil Framework (Law 12,965/2014) and the Consumer Protection Code (Law 8,078/1990). The Portuguese version prevails in case of doubt.

Português: pmstream.com.br/privacidade · 한국어: pmstream.com.br/privacy-ko