1. Who we are and what this covers

SlothMate is published by Abdeslam Ammor (Belgium), who is responsible for the processing of personal data described in this policy. SlothMate is a native macOS media player and organization tool. It works with sources you provide — your own legal IPTV, Xtream, or M3U services and your own local media files — and it does not provide, sell, or bundle any content. This policy covers the SlothMate app, the slothmate.com website, and email you send to SlothMate support. The sources you connect and Apple's services have their own privacy practices, described below.

2. Data SlothMate keeps on this Mac

SlothMate stores its working data locally on your Mac, per source profile. Depending on what you use, that includes: source profile details (a name, avatar, source type, and for provider sources a server address and username); per-preset favorites; recently watched channels, viewing progress, and — for a My Media source — recently opened videos and photos; local music and photo playlists; your custom categories and presets; Family Guard rules; appearance preferences; for provider sources, the last-known account status and expiration your provider reported (used to explain a later sign-in problem honestly); saved folder-access bookmarks for My Media and playlist files; and small locally cached thumbnails. This is organizational METADATA about your library. SlothMate does not copy, store, or duplicate the media itself, and none of this data leaves your Mac through SlothMate.

3. Credentials and the Keychain

Provider passwords, playlist links, and guide (EPG/XMLTV) links you add are stored in the macOS Keychain on this device. The Family Guard PIN is stored only as a salted one-way digest in the Keychain — never as plain text (the Demo Mode PIN exists in memory only and vanishes with the session). SlothMate does not write credentials to plain files and does not include them in logs; error messages are redacted before display.

4. Your media files and folders

My Media plays personal files from folders or drives you explicitly select in the macOS file picker. SlothMate scans the selected folder locally to build its catalog; nothing is uploaded, copied, or moved. Access is remembered with a security-scoped bookmark and a display name — SlothMate does not separately persist raw folder paths. Settings can show you the currently connected folder's path; that display is produced on your Mac for you and is not stored or sent anywhere. Forgetting a My Media source removes SlothMate's own records for it and never deletes, alters, or moves your files.

5. Network connections go to YOUR sources

When you connect a source, SlothMate contacts the addresses you configured — and the stream, artwork, and guide addresses that source references — to sign in and load your channels, catalogs, guide, and artwork. Like any direct network connection, those requests expose ordinary network information (such as your IP address) to that source, and they carry the credentials you saved for it. Your providers operate independently: their handling of your account and connection data is governed by their own privacy practices, not this policy, and SlothMate is not responsible for them. SlothMate has no servers of its own and adds no destinations you didn't configure. macOS's standard networking system may also keep cookies that your sources set and cached copies of some responses, such as artwork and catalog or guide data, in SlothMate's own storage on this Mac. Those cookies go back only to the source that set them, and cached copies stay on this Mac.

6. Purchases and Apple

SlothMate Plus purchases are processed by Apple through the App Store and StoreKit. SlothMate never receives or stores your payment card details or Apple Account credentials; it receives only the purchase entitlement state Apple makes available through StoreKit, which it uses to unlock Plus tools and to show truthful renewal or expiration information. Purchases belong to your Apple Account. Apple's own privacy policy governs Apple's processing.

7. Analytics, advertising, and tracking

SlothMate currently contains no third-party analytics, no advertising, no cross-app tracking, and it does not sell personal data. The app's only third-party component is the open-source VLCKit playback engine, which runs locally. The slothmate.com website likewise uses no analytics, advertising, or tracking. If SlothMate's practices ever materially change, this policy will be updated first, with a new effective date.

8. No SlothMate account, backend, or cloud sync

There is no SlothMate account to create, no SlothMate backend, and no SlothMate cloud sync. Your provider's service and Apple's App Store are separate services with their own terms — neither is a SlothMate backend.

9. The slothmate.com website

slothmate.com is a static website with no accounts, forms, comments, or newsletter. It loads no third-party scripts, fonts, or embeds, and its own code sets no cookies and stores nothing in your browser. The site is hosted and delivered by Cloudflare, Inc. As with any website, each visit sends Cloudflare technical information such as your IP address, the page requested, the date and time, your browser's user agent, and the referring page. Cloudflare processes this information on our behalf to deliver the site and to protect it against attacks and abuse, which is our legitimate interest in running a secure website. We may see aggregated traffic statistics and security events, which can include IP addresses, in Cloudflare's dashboard; we use them only to keep the site working and secure, never to build profiles of visitors. Cloudflare's security features can set strictly necessary cookies; the Cookie Policy at https://slothmate.com/cookies explains when.

10. Emails to support

If you email support@slothmate.com, we receive your email address, your name as it appears in your email, your message and any attachments, and standard email headers. We use them only to answer you and to handle follow-up questions, based on our legitimate interest in helping people who use SlothMate or to take steps you ask for. Support email is hosted by Namecheap, Inc. (Private Email), which processes it on our behalf. We keep a conversation until your request is resolved and delete it within 24 months of our last exchange, unless a legal obligation or a legal claim requires us to keep it longer. Please never send passwords, playlist links, or other credentials; if you do, we delete them. We never use support email for marketing, and we never sell or share it.

11. Service providers and international transfers

Cloudflare and Namecheap act as our service providers (processors) under their data processing terms. They may process data in the United States and other countries. Where EU or UK data protection law requires it, these transfers rely on safeguards such as the European Commission's standard contractual clauses and, for Cloudflare, the EU-U.S. Data Privacy Framework. Apple processes App Store purchases as an independent company under its own privacy policy, and the sources you connect in the app are independent third parties. We do not sell personal data or share it with anyone else, except where the law requires it.

12. Demo Mode

Demo Mode shows entirely fictional, app-generated samples and makes no network connections. Nothing you do in Demo Mode is saved — no favorites, history, settings, or PINs persist, and no purchase exists there. The one real thing a demo session can play is a personal file you pick yourself in the My Media trial; SlothMate reads that file locally from your Mac and remembers nothing about it after the session.

13. Children and Family Guard

SlothMate has no backend and does not knowingly collect personal information from anyone, including children. Family Guard and Kids Mode are local convenience and safety tools for families sharing this Mac: they lock content behind a parent PIN inside SlothMate, and Kids Mode hides purchase surfaces. They are not a substitute for parental supervision or macOS parental controls, and they cannot restrict other apps or devices.

14. Retention and deletion

SlothMate's local data stays on your Mac until you remove it: forgetting a source profile deletes its locally saved metadata and its Keychain entries; forgetting a My Media folder removes SlothMate's access bookmark and records while leaving your files untouched; deleting the app's data or the app itself removes SlothMate's local storage under macOS's normal rules. Cookies and cached responses that macOS keeps for SlothMate are removed with the app's data; forgetting a single profile does not clear them. Purchase records are held by Apple and managed through your Apple Account. Data your provider holds about your account must be handled with that provider. Website request data is kept by Cloudflare only for the limited periods its own policies set, and support email is deleted as described above.

15. Security

SlothMate runs in the macOS App Sandbox, keeps secrets in the Keychain, reaches your files only through the access you grant, and redacts credentials and addresses from any message it shows. The slothmate.com website is served only over encrypted HTTPS connections. No software can guarantee absolute security, but SlothMate is built to keep your credentials and library metadata on your Mac and out of its own logs.

16. Your rights and choices

Depending on where you live, you may have legal rights over personal data — such as access, correction, or deletion. Because SlothMate keeps its data on your Mac, you can exercise most of them directly in the app (forget a profile, forget a folder, delete the app's data). For anything else, or any privacy question, contact us and we will respond as required by the law that applies to you. Where the EU or UK GDPR applies, you can also ask us to restrict processing, object to processing based on our legitimate interests, and receive a copy of data you gave us, and you can complain to a data protection authority: in Belgium, the Data Protection Authority (www.dataprotectionauthority.be), or the authority where you live or work.

17. Changes to this policy

Material changes to SlothMate's privacy practices will be reflected here first — with a revised effective date and, where appropriate, an in-app or website notice — before they take effect.

18. Contact

Questions about SlothMate, this policy, or your data: support@slothmate.com.

19. Effective date

Effective date: September 24, 2026. Last updated: September 24, 2026. Version 1.0.