Norva

Privacy Policy

Last updated: 14 July 2026

This Privacy Policy explains how Norva (“Norva”, “we”, “us”) collects, uses, stores and deletes information when you use the Norva apps (Android phone/tablet and Android TV) and the Norva web app at norva.tv (together, the “Service”).

Norva is a media player, not a content provider. Norva does not supply, sell or host any channels, movies, series or streams. You connect a compatible media source that you own and are authorized to use. Any credentials or playlist links you add are used only to connect the Service to your source on your behalf.

1. Information we collect

Category	Examples	Why
Account	Email address, display name, password (stored hashed by our auth provider)	Create and secure your account, sign you in
Media source settings	Provider host/username/password (Xtream), playlist (M3U) and TV-guide (EPG) URLs you choose to add	Connect the Service to the source you are authorized to use
Usage & preferences	Watch history and playback progress, favorites, audio/subtitle/genre preferences	Resume playback across your devices and personalize the experience
Devices & pairing	Trusted-device records, device tokens, pairing codes	Let your TV and phone share one account and sync playback
Entitlement / subscription	Subscription status and the store/provider that granted it (e.g. Google Play, Apple, Stripe)	Verify Norva access; we do not store card numbers
Technical	IP address, app version, device/model, basic logs and crash data	Deliver streams from your network, secure the Service, fix bugs
Analytics & advertising (web, with consent)	Cookies and identifiers set by Google Analytics, Google Ads and Meta Pixel when you accept them	Measure how the Service is used and how our ads perform
Downloads (on device)	Media you download is encrypted and stored only on your device	Offline viewing; this content is not uploaded to us

2. How we use information

To provide, maintain and secure the Service and your account.
To connect the Service to the compatible source you choose to add.
To sync playback progress, history and preferences across your devices.
To verify your Norva access/subscription status.
To diagnose problems and improve reliability.
With your consent, to measure audience and the performance of our advertising (web app only).

We do not sell your personal information. With your consent, we use analytics and advertising cookies on the web app to measure usage and how our ads perform — see Cookies, analytics & advertising below. You can decline or withdraw this at any time.

3. Cookies, analytics & advertising

On the Norva web app we use cookies and similar technologies. Analytics and advertising technologies are not loaded until you accept them: a consent banner appears on your first visit, and nothing is set or sent to these providers unless you choose “Accept”.

Strictly necessary — needed for the site to work (sign-in, security and remembering your consent choice). Always active; no marketing use.
Analytics — Google Analytics 4, to understand how the Service is used so we can improve it.
Advertising — Google Ads and Meta Pixel, to measure how our ads perform (for example a sign-up or purchase that follows an ad).

You can change or withdraw your choice at any time from Settings → Privacy & legal → Manage cookies, which reopens the consent banner. If you decline, these analytics and advertising tools are not loaded. These providers process data under their own policies: Google and Meta.

4. Sharing and processors

We share data only with service providers that process it on our behalf, under contract:

Supabase — authentication and cloud database hosting.
Cloudflare — web hosting and content delivery.
Google (Analytics, Ads) and Meta (Pixel) — audience measurement and advertising performance on the web app, only after you consent (see section 3).
Payment/store providers (e.g. Google Play, Apple, Stripe) — to confirm your subscription entitlement. Payments are handled by them, not by Norva.
Your media source — when you ask the Service to connect, requests are made to the host you configured. You are responsible for that source and its terms.

We may disclose information if required by law or to protect the rights, safety and security of users and the Service.

5. Data retention

We keep account and usage data while your account is active. When you delete your account (see below) we delete or anonymize your personal data, except where we must retain limited records to comply with legal obligations. Downloaded media lives only on your device and is removed when you delete it or uninstall the app.

6. Your rights & deleting your account

You can access or update your information in the app, and you can request deletion of your account and associated data at any time:

In the app: Settings → Account → Delete account.
On the web: norva.tv/delete-account.html.

Depending on where you live, you may also have rights to access, correct, port or restrict processing of your data. To exercise them, contact us using the details below.

7. Security

Traffic to Norva’s cloud is encrypted in transit (HTTPS). Passwords are stored hashed by our auth provider. Offline downloads are encrypted on your device with a hardware-backed key where available. No system is perfectly secure, but we work to protect your data.

8. Children

Norva is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect their personal data.

9. International transfers

Your data may be processed in countries other than your own by the providers listed above, with appropriate safeguards in place.

10. Changes

We may update this policy. We will revise the “Last updated” date and, for material changes, provide a more prominent notice.

11. Contact & data controller

Data controller / operator: Norva is a trading name of Adrien Hernandez, sole trader (entrepreneur individuel) registered in France under RCS Paris 824 852 081, business address 270 rue de Vaugirard, 75015 Paris, France.
Email: [email protected]
Full legal notice: mentions légales.

If you are in the EEA/UK, you may lodge a complaint with your local data-protection authority. In France this is the CNIL.