Privacy notice

Who is responsible

Stonepath Digital Ltd is responsible for the TellyForge website and the personal information we handle to provide and support TellyForge. We are registered in England and Wales, company number 17478686. Our registered office is Unit A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom.

For privacy enquiries or to exercise your rights, email support@tellyforge.com.

Player information on your device

TellyForge stores your source configuration, catalogue and guide information, settings, favourites and viewing progress locally. Provider credentials use the supported platform's protected credential storage. Google Drive authorisation storage depends on the platform: the Google Play app stores the selected account reference securely and keeps its access token in memory while Google Play services manages the grant; other supported clients store their authorisation tokens securely. The app connects to the media, guide and artwork services you configure or use; those services receive connection information such as your IP address and the requests needed to provide their content.

We do not operate a television service or receive your streams through a TellyForge cloud media relay. Your chosen providers have their own privacy terms. You choose the provider address. HTTP provider connections are not encrypted in transit: a network observer may read or modify requests, including provider sign-in details and media. HTTPS provider connections use normal certificate checks. Google sign-in, Drive and TellyForge licensing use HTTPS independently. Local diagnostics may contain technical errors and device information; credentials are redacted by the app's diagnostic handling. Exporting a support bundle creates a local file, without automatically uploading it. Please check any file before sharing it with support.

Optional Google Drive Secure Sync

Each user authorizes their own Google account and stores encrypted sync files in their own Drive space. The licence and Drive emails may differ. Licence sign-in does not authorize Drive, and Drive authorization does not grant Premium.

If you connect Google Drive, TellyForge requests the per-file permission drive.file. This allows the app to create and manage files it creates or that you explicitly make available to it. It does not request unrestricted access to every file in your Drive.

TellyForge creates a TellyForge Secure Sync folder and uses its own files to exchange encrypted favourites, viewing progress, preferences and device records between your approved devices. Protecting and syncing provider accounts is a separate opt-in choice. When enabled, protected account information is encrypted before upload.

Google authorisation tokens are used to access these files. A separate recovery key protects your encrypted sync data; keep your recovery code private. Google processes account, connection and file metadata as part of providing Drive, including file identifiers, sizes and timestamps. Encryption of sync content does not hide all such metadata.

We do not run a server that receives the contents of your Drive sync files. Your approved devices read and decrypt them. Google Drive API data is used to provide the requested sync and recovery functions, not sold, used for advertising or used to train general-purpose AI models. TellyForge's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Google handles its services under the Google privacy policy.

Disconnecting, retention and deletion

Turn off Google Drive sync disconnects that installation and attempts to remove its local Google authorisation record and cached token. It deliberately preserves your local library, recovery information and existing Drive files. Disconnecting does not erase data or revoke an already approved device's recovery key.

You can revoke TellyForge's Google access through your Google account connections. To remove cloud sync data, first turn off sync on all connected devices, then delete the TellyForge Secure Sync folder from Drive and empty Drive's bin when you are ready. Connected devices may otherwise recreate sync data. Deleting cloud files does not erase local copies or backups on other devices.

Local data remains until you remove the relevant data or profile; uninstall behaviour varies by platform and may preserve it. Drive data remains under your control until removed. If you need help locating or removing a profile, contact support. We cannot recover encrypted data if you lose every approved device and the recovery code.

Optional Premium account

Your TellyForge licence account owns Premium, the shared five-installation allowance and browser device approval. Sign in using any email with an email code, or optional Google sign-in where enabled. Premium account sign-in is separate from Google Drive. Where enabled, managed email sign-in supplies a validated identity through our configured identity provider. Legacy beta accounts can use Google Identity Services. We validate the issuer, stable account identifier and security claims; email equality does not link two accounts. Identity tokens can include an email address or profile claims, but we do not retrieve profile pictures or build our own password database. We store a derived identity reference linked to a random TellyForge account identifier, trial/tester dates, purchased entitlement status, device names and platforms, installation identifiers and hashed device secrets. We do not store your Google password, name, photo or email address in the licensing database. These records provide account access, device limits and licence security; they do not contain playlists or viewing history.

The licence service runs on Microsoft Azure in UK South. Portal browser sessions last 30 minutes, use a token held in tab-scoped sessionStorage so sign-in survives checkout and page reload, and can be revoked by signing out. Server-side session tokens are hashed. Pairing and login challenges expire after ten minutes. Expired sessions and challenges are scheduled for deletion every five minutes; outages may delay physical cleanup without extending their validity.

You can manage devices and delete your account at My account, or contact support@tellyforge.com. Account deletion removes device and entitlement details. Payment evidence required for refunds, disputes or legal obligations is retained separately as described under Purchase retention below. Deletion retains a minimal deletion record for 30 days to prevent old connections or recovered data reviving the account. Private recovery exports are kept for up to seven days and must have deletion records applied before restoration. Removing a device stops future online renewal; an already issued offline licence may remain valid for up to 30 days for a supported paid v4 licence, or up to seven days for an older licence, trial or tester grant, within its entitlement expiry. Account deletion does not delete files from your own devices or Google Drive.

The account page loads Google Identity Services only when legacy Google sign-in is configured; Google's privacy policy then applies. Where paid checkout is enabled, Stripe collects payment details on its hosted page. Licensing stores provider customer, order and payment references and reconciliation state, not card details. For website Premium purchases, the order also retains your declared country and verified billing country for territory and payment checks, along with the accepted purchase-notice version, server acceptance time, immediate-activation request and immutable terms snapshot; the full billing address and card details remain with Stripe. For Managed Payments, Sold through Link, LLC acts as merchant of record, and the order may retain the verified checkout currency and amount alongside its USD base price. There is no automatic subscription renewal. Starting the 30-day trial is a separate action you choose.

Purchase retention

Necessary financial, order and refund evidence is retained for six years after the relevant company financial year ends, or longer for a documented legal or dispute hold. Ongoing entitlement proof is retained separately while needed to honour permanent ownership. Closed support cases are reviewed after 12 months. Account deletion does not erase legally required financial evidence; minimal deletion records last 30 days and private recovery exports up to seven days.

The ongoing entitlement record is used to honour your purchase and is separate from financial evidence kept for accounting and legal obligations. We minimise retained information, review expired records and any documented hold, and remove or anonymise information when no longer needed. A refund or account deletion does not erase records we must retain. Stripe retains the payment information it handles under its own terms and privacy notice.

Optional Google Cast

Chromecast requires verified Premium in a supported edition; Apple Store editions and Fire TV do not offer casting. Google Play builds also require approval of a first-use disclosure. Declining leaves local playback available without starting the Cast SDK. When enabled, Google's SDK sends anonymous discovery, session, device, app and SDK information to Google for aggregate SDK improvement and fault detection. Google says this telemetry is encrypted in transit, retained briefly before aggregation and deletion, and has no developer or user opt-out or deletion control. See Google's Cast SDK data disclosure. TellyForge cannot disable that collection while providing Cast.

iPhone/iPad Direct: the separate personally signed Direct edition includes Google Cast iOS SDK 4.8.6. Casting requires verified Premium and your first-use approval; the SDK is not started for Basic or before that approval. This is separate from the free Basic Apple Store edition, which does not include this SDK or offer Chromecast.

The iOS SDK automatically collects diagnostic information. Its default analytics logging also includes a device identifier with log uploads, and its device picker and media controls generate usage information. Google maps this information to coarse location, device identifiers, performance data and product interaction for analytics and app functionality; this does not mean TellyForge requests GPS access. The packaged SDK privacy manifest describes device identifiers, diagnostic data and product interaction as not linked to your identity and not used for tracking. See Google’s version-specific iOS SDK privacy guidance and the original SDK notices available inside the Direct app. Google handles information it receives under the Google privacy policy.

The iOS local-network permission lets the SDK discover and connect to the Cast receiver you choose. Denying it leaves local playback available. Keep TellyForge Direct open and the iPhone or iPad awake while casting; leaving or locking the app ends the session.

During casting, the sending device opens a temporary HTTP media relay for your selected receiver on the same local network. This link is not transport-encrypted: media and a temporary route token travel over your local network. Use casting only on a trusted local network. Provider addresses and sign-in headers stay on the sending device behind its protected gateway. This relay does not send your stream through a TellyForge cloud server. Disconnecting ends the relay; it does not delete information already processed by Google.

Optional voice and AI features

On supported Android handsets, pressing voice search opens your selected Android speech service. That service captures speech and may send audio to its servers for recognition under its own terms; TellyForge receives the resulting text, not the recording. You can type instead. Desktop builds may offer separate, optional AI-assisted discovery that sends the search text and programme information needed for the feature to your chosen AI provider. AI discovery is not enabled in the Android app. Ordinary text search and playback do not require an AI provider. Do not include credentials, recovery codes or private stream URLs in search prompts.

Website and support

This website uses Microsoft Azure hosting. Requests necessarily disclose technical information, including IP address, requested address and browser information, to the hosting service for delivery and security. We do not add advertising trackers, analytics scripts or non-essential cookies to this site.

If you email us, we receive your email address, message and any information you choose to attach. Our email provider processes these messages so we can answer you. Send only what is necessary; never send passwords, Google tokens, recovery codes or authenticated playlist links.

We keep support information while needed to resolve your enquiry and for reasonable follow-up. Closed cases are reviewed after 12 months and information is deleted or anonymised when no longer needed, unless it must be retained for legal obligations or a documented dispute. Ask us to review or delete your correspondence at any time.

Purposes, lawful bases and recipients

We process information needed to provide requested functionality and support to perform our agreement with you, and use our legitimate interests in securing and maintaining the service where appropriate. Optional Google access is controlled by your authorisation, which you can withdraw. We also process information when necessary to meet legal obligations. We do not sell personal information or use it for behavioural advertising.

Service providers process information only as needed for hosting, communication or features you choose. Information may also be disclosed where required by law. Providers may process data outside the UK; where we arrange a restricted international transfer, we use the applicable adequacy arrangements or approved contractual safeguards. Contact us for details relevant to your enquiry.

Your rights and complaints

Depending on the circumstances, you can request access, correction, erasure, restriction or portability of information we hold, and object to processing based on legitimate interests. Withdrawing an optional authorisation does not affect processing already lawfully carried out. Some information is held only on your devices or in your own Drive, so we may guide you through managing it yourself.

Contact support@tellyforge.com. You can also complain to the UK Information Commissioner's Office. We will update this notice when our data practices change and identify the effective date above.