Privacy Policy
Effective date: 16 October 2026
This Privacy Policy explains how EXATECH LABS LTD, the company that operates AppStudio X (“we”, “us” or “our”), handles information when you use the CarStream iOS application (the “App”).
EXATECH LABS LTD is a private limited company registered in England under company number 14755111. Its registered office is 37 Downhills Way, London, England, N17 6AN.
CarStream is designed to keep your data on your device. There is no CarStream account and no CarStream server. Nothing about what you watch is collected — not your sources, not your channels, not what you searched for. What is collected is anonymous usage and crash information, described below.
1. What stays on your device
Your library—the channels, films and programmes from the sources you add—is stored in a database on your device and is never transmitted to us.
Usernames, passwords and access tokens for your providers are stored in the iOS Keychain. They are never written to the App’s database and never sent anywhere except the provider they belong to.
The stream links your provider issues are stored in that on-device library exactly as the provider supplies them. Many providers build their links around your username and password, so those links can themselves contain your credentials. They stay on your device and are used only to play the streams they point to.
Thumbnail images captured while checking your channels are stored in the App’s cache directory and can be cleared by removing a source.
2. Who your device talks to
Your media providers
When you add an M3U playlist, an Xtream portal, or a Jellyfin or Emby server, your device connects directly to that provider using the address and credentials you supplied. CarStream is not an intermediary and does not see or relay this traffic. The provider’s own terms and privacy practices apply to its service.
PostHog
PostHog is our analytics and crash reporting provider. It receives the anonymous usage and crash information described below and nothing else. Its servers are in the United States.
Adapty
Adapty is our purchase provider. Adapty processes subscriptions and purchases on our behalf and receives device and purchase information necessary to do so. It does not receive your media sources, credentials, or viewing activity.
Apple
Purchases are processed by Apple under Apple’s own privacy policy.
3. Usage and crash information
So that we can tell which parts of CarStream are used and which are broken, the App reports a small, fixed set of events: that a screen was opened and which one, that a source was added, refreshed or removed and of which type, that playback started or failed, why, and whether on the phone or the car screen, that a search was run and roughly how many results it had, and that a channel was added to or removed from favourites. Each event also carries your app version, device model and iOS version.
What these events never contain is anything about your content. Not the names of your channels, not your sources or their addresses, not your search terms, not your credentials, and not what you watched. The App can only send events from the fixed list above, so there is no path by which that information could be included.
If CarStream crashes or freezes, it also sends a report describing the fault: the type of error and where in the App’s own code it happened. Links are stripped from every report before it is sent, deliberately and in full — the links your provider issues often contain your username and password, so the App removes anything of that shape rather than trusting it to be harmless.
These events are tied to a random identifier created on your device when you install the App. It is not your name, your email or an advertising identifier, it is not shared with anyone, and it tells us only that a series of events came from the same installation. Deleting the App discards it.
4. What we never collect
We do not collect your viewing history, the names of your channels, the addresses of your providers or your credentials. We operate no server that could receive them.
CarStream contains no advertising and no advertising identifier. Nothing it collects is sold, shared with a data broker, used to target advertising, or combined with data about you from other apps or websites — which is why the App does not ask permission to track you: under Apple’s definition, it does not track you.
5. Camera
CarStream can scan a QR code to read a playlist link, so you do not have to type a long address. The camera is used only while that scanner is open, and images are never stored or transmitted.
6. Content
CarStream does not provide, host, index or endorse any media. It plays only the sources you choose to add. You are responsible for having the right to access them.
7. Deleting your data
Removing a source deletes its channels, their stream links, cached thumbnails and stored credentials from your device. Deleting CarStream removes everything the App has stored, including the random identifier described above. Your purchase record is held by Apple and Adapty and is not removed with the App. Usage and crash events already sent carry nothing that identifies you or your sources, and are deleted by PostHog on its own retention schedule.
8. Children
CarStream is not directed at children under 13 and we do not knowingly collect information from them.
9. Changes to this policy
If this Privacy Policy changes materially, we will update it in the App and revise the effective date above.
10. Contact us
For privacy questions, contact privacy@appstudiox.store.
EXATECH LABS LTD<br /> Company number 14755111<br /> 37 Downhills Way<br /> London, England, N17 6AN
This is the same policy made available inside the App under Settings → About.