Your privacy is
our foundation

When you connect a TV device to your TMN channel, we store:

• A unique device token generated on the TV device (no login required on TV)
• Device name you assign (e.g. "Living Room TV")
• Platform type: Android TV, Google TV, Fire TV, or other
• Connection status and last-seen timestamp
• Playback lock and pause state (set by the receiver from their phone)

TV devices never have access to your passwords, encryption keys, or Firebase credentials. They authenticate only via a device token tied to your channel.

Receiver accounts use subscriptions to unlock features. We store:

• Your current plan (Free Trial / Basic / Premium / Organization)
• Subscription status, start date, renewal/expiry date
• Billing provider (Stripe, Apple IAP, or Google Play Billing)
• Payment event records for audit purposes

Every text message is encrypted using AES-256-GCM (Advanced Encryption Standard, 256-bit key, Galois/Counter Mode) before it is written to our database:

• A unique 12-byte random IV (initialisation vector) is generated per message
• An authentication tag ensures the ciphertext has not been tampered with
• The ciphertext, IV, and auth tag are stored separately
• The encryption key lives only on our backend — it is never transmitted to clients

• Firebase Authentication handles social login (Google, Apple) and phone OTP — identity tokens are verified server-side with the Firebase Admin SDK.
• Email/password accounts use PBKDF2-SHA512 password hashing stored exclusively server-side. We never store plaintext passwords.
• App sessions use short-lived JWTs (~30 days). Logout immediately invalidates your token via a Redis denylist — even if the token has not expired.
• Dashboard (admin) sessions use a separate JWT secret, isolating admin access from app sessions.
• All API communication uses HTTPS / TLS.

All video and audio content is hosted on Cloudflare Stream with signed playback URLs. This means:

• Every playback URL is unique, time-limited, and tied to the authenticated user
• Sharing a playback link does not grant access to others — it will expire and require re-authentication
• Raw video files are never publicly accessible via a plain URL

• Our backend runs in Docker containers on a private VPS with restricted network access
• Rate limiting is applied to all API endpoints to prevent brute force and abuse
• All sensitive environment variables (keys, secrets) are injected at runtime — never hardcoded
• Automated daily cron jobs maintain subscription and session health
• Server access logs are retained for 90 days for security monitoring

• You must be at least 13 years old to use TMN. Users under 18 require parental consent.
• You must provide accurate information when creating your account.
• You are responsible for maintaining the confidentiality of your account credentials.
• You may not create accounts for others without their consent.
• One account per person. Multiple accounts used to evade restrictions are prohibited.

Account roles:

You agree not to:

• Upload, send, or share content that is illegal, harmful, or violates others' rights
• Share content involving child sexual abuse material (CSAM) — zero tolerance, immediate permanent ban
• Engage in harassment, hate speech, or targeted abuse of other users
• Send spam, unsolicited commercial messages, or phishing content
• Impersonate others or misrepresent your identity
• Attempt to reverse-engineer, hack, or disrupt TMN services
• Circumvent subscription limits or access controls
• Use misleading poster images or content thumbnails

You own your content. When you upload messages, videos, or audio to TMN, you retain all intellectual property rights to that content.

By uploading content, you grant TMN a limited, non-exclusive, royalty-free licence to store, transmit, and display that content solely for the purpose of providing the TMN service to you and the people you choose to share it with.

We do not use your content for advertising, training AI models, or any purpose beyond operating the service.

TMN uses a user-report driven moderation system. Receivers can report senders or content directly from the app. All reports are reviewed by our admin team.

Report categories and priority:

Misleading posters on uploaded content may trigger reports from other users, which can lead to account suspension or banning for platform abuse or violation of our content policies.

• Free Trial: 30 days at no charge. No credit card required to start. One trial per account, ever.
• Paid plans are billed monthly or yearly via Stripe (web), Apple App Store (iOS), or Google Play (Android).
• Subscriptions auto-renew unless cancelled before the renewal date.
• A 7-day grace period applies after payment failure before access is restricted.
• Refunds are handled by the respective billing provider (Apple, Google, or Stripe). We follow each platform's refund policy.
• Cancelling a subscription does not delete your account or data. You retain access until the end of the paid period.
• We reserve the right to change pricing with 30 days' notice.

By you: You may delete your account at any time from within the app (Settings → Delete Account) or via our delete-account web page. Your data is removed within 30 days.

By us: We may suspend or terminate accounts that violate these Terms, with or without prior notice depending on severity. We will notify you by email where possible.

Upon termination, your right to access TMN ceases immediately. Content you have shared with others (messages delivered to receivers) may remain in the recipient's vault according to their own retention settings.

TMN is provided "as is" without warranties of any kind. While we work hard to keep TMN reliable, we cannot guarantee uninterrupted or error-free service.

To the maximum extent permitted by law, TMN and TMN shall not be liable for indirect, incidental, special, or consequential damages arising from your use of the service, including loss of data, revenue, or goodwill.

Our total liability to you for any claim arising from your use of TMN shall not exceed the amount you paid us in the 12 months preceding the claim.

The TMN app uses local device storage (GetStorage) to persist the following — entirely on your device, not on our servers:

The TMN admin/organization web dashboard uses only essential cookies:

TMN uses Firebase Cloud Messaging (FCM) for push notifications (e.g. new message alerts, invitation accepted). To deliver notifications, we store your device's FCM token on our server and share it with Firebase.

• You can disable push notifications at any time via your device's notification settings
• Disabling notifications does not affect your account or message delivery
• FCM tokens are rotated automatically by Firebase when you reinstall the app

You can delete your account in two ways:

1. In-app: Profile → Settings → Delete Account. Follow the confirmation steps.
2. Web: Visit our Delete Account page and follow the instructions.

Upon deletion request:

• Your profile, messages, and channel data are scheduled for removal
• Data is permanently deleted within 30 days
• Subscription billing records may be retained for up to 7 years for legal compliance
• Content you sent to others (messages in a receiver's vault) may remain until that receiver deletes it

You have the right to receive a copy of your personal data in a structured, machine-readable format. To request a data export:

• Contact us at our privacy email (below)
• We will verify your identity and provide an export within 30 days
• The export will include your profile data, message metadata (not decrypted content of others), and subscription history

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the GDPR and UK GDPR, including the right to lodge a complaint with your national supervisory authority.

California residents have rights under the CCPA/CPRA, including the right to know what personal information we collect and the right to opt out of the sale of personal information. We do not sell personal information.

Data transfers outside your jurisdiction are protected by appropriate safeguards, including standard contractual clauses where required.

We may update this Privacy Policy and Terms of Service from time to time to reflect changes in our practices or applicable law.

• Material changes will be communicated via in-app notification or email at least 14 days before taking effect
• The "Last updated" date at the top of this page will always reflect the current version
• Continued use of TMN after the effective date of changes constitutes your acceptance