YOUR ACCOUNT AND DATA

Privacy at Reflex Omni.

Updated September 15, 2026.

The service uses your email for passwordless sign-in and account recovery. Your first and last name identify the account owner. Viewing profiles use a display name or nickname and a chosen color; they do not need a separate email or legal name.

Reflex Omni is operated by Reflex Omni LLC in North Carolina, United States. This notice describes the website and player service. Contact support@reflexomni.com for privacy matters.

Your library

Your registered devices, playlists, catalog metadata, profiles, favorites and viewing progress are stored by the player service. Provider credentials, M3U playlist and guide links, and M3U stream addresses are encrypted at rest. Catalog details and viewing records use the service’s database access controls. Video is delivered by your provider.

Viewing progress is saved automatically. Optional viewing history helps personalize recommendations when enabled in your profile. Ratings you choose to save are private to your profile, may improve recommendations, and can be cleared. Supported desktop recordings stay in the folder you select on your computer; we do not upload them to our servers.

Provider connections

A provider that only supports HTTP cannot offer an encrypted connection to that provider. You must explicitly accept this before adding that source. Only add sources you are authorized to use. Encryption of stored credentials does not protect the HTTP portion of the connection: credentials and media requests may be readable in transit. Provider passwords must be decrypted by the service when it connects to your provider; they are not end-to-end encrypted from us. The authorized playback device receives the provider stream address, which may contain access credentials or tokens.

Payments

Payment details are entered on Stripe's checkout page. Reflex Omni does not store your full card number. We retain order and payment references, activation and refund status, and the terms version and verification time when Stripe confirms checkout acceptance, to provide access and resolve billing questions.

Service providers and security

In apps distributed through Google Play or the Amazon Appstore, the store handles its in-app checkout. We verify store purchase tokens or receipts and retain product, order, purchase, acknowledgement and refund status linked to the original registered device. Google Play receives opaque account and device references to help verify purchases and prevent reuse. These references do not contain your name, email address or provider password. We do not receive your full payment card details from these stores.

AWS provides hosting, sign-in and sign-in email delivery. Supabase stores player account and library data. Cloudflare provides website hosting and Turnstile abuse prevention; Stripe handles payments; Brevo and Zoho handle support delivery and correspondence. These providers process information needed for their respective functions, including connection and device information. Your media provider receives requests necessary to load its catalog and play content.

Essential cookies and local device storage keep you signed in and remember your device and preferences. Security controls and service logs process technical information such as IP addresses, request times and error details to limit abuse and diagnose failures. We do not sell your personal information or use viewing history for advertising. No storage or transmission system is completely secure.

Retention and choices

Account and library data remain while needed to provide the service. You can remove playlists and clear viewing history in the player. You can ask support for access, correction, export or deletion of your account information. We verify ownership before disclosing or changing private data; we do not ask for your password or card number. You can request account deletion here.

Some records may need to be retained for security, legal obligations, accounting or payment disputes. Deletion from backups follows their retention cycle rather than occurring immediately. Closing an account can remove access to its data and device registrations; we explain that effect before completing a request. Information may be processed in the United States or other countries where our service providers operate. Rights available to you depend on applicable law.

Children and policy changes

Account creation and purchases are for adults. Household profiles, including kids profiles, are managed by the adult account holder and do not create separate child sign-ins. Contact us if a child has supplied personal information directly. We post updates here and provide notice of material changes where required.

Support messages

When you contact support, we use your name, email address and message to respond. Brevo delivers messages to our Zoho support inbox. Cloudflare processes the form and security check to help prevent abuse. Please do not include passwords, playlist URLs or payment details.

Questions or data requests

For account recovery, help with your data or privacy questions, contact support@reflexomni.com.