Last Updated:


Security + Protection

Effective April 23, 2026. Last updated April 23, 2026.

This Security + Protection notice explains how Flux handles account access, subscription integrity, device association, licensed playback, and service-protection controls across supported Apple platforms, including iPhone, iPad, and Apple TV.

This notice is informational and should be read together with the Flux Terms of Service, Privacy Policy, billing disclosures, and any content-specific or market-specific notices presented by Flux. It does not guarantee absolute security, uninterrupted playback, or permanent availability of any title, feature, plan, price, territory, or entitlement.

Highlights

  • Email sign-in, Sign in with Apple, password reset, and session recovery.

  • StoreKit purchases, restore flows, and Flux backend purchase binding.

  • Account-tier checks, device association, and time-limited preview controls where applicable.

  • FairPlay-protected playback for supported streams and licensed windows.

  • Optional diagnostics controls with essential playback-reliability telemetry.

I. Scope and Security Baseline

Flux is a streaming service built around account access, App Store subscription handling, licensed playback, and service integrity across supported Apple platforms.

This notice describes the security and protection controls currently reflected in Flux app experiences, including account access, purchase handling, preview enforcement, protected playback, diagnostics, and misuse prevention.

No consumer app, network, or streaming service can guarantee absolute security, uninterrupted playback, or permanent availability of every feature, title, plan, or territory.

This notice supplements, and does not replace, the Terms of Service, Privacy Policy, billing disclosures, and any content-specific or market-specific notices presented by Flux.

II. Account Sign-In and Session Protection

Flux supports account access through email-and-password credentials and Sign in with Apple.

Session bootstrap, sign-in, sign-out, password reset, email confirmation, and password-update flows are managed through Flux authentication services and the active signed-in session.

Apple credential-revocation events can sign the user out of Flux, and deleting a Flux account removes Flux account access but does not cancel subscriptions billed by Apple.

Users remain responsible for protecting Apple account access, passwords, recovery email access, and any device-level protections enabled on supported Apple devices.

III. Subscription, Billing, and Purchase Recovery

Flux uses Apple's in-app purchase framework for subscription purchases made inside supported Flux Apple-platform apps.

Subscription status can change based on active StoreKit entitlements, renewal state, grace periods, revocations, refunds, restore activity, and account state mirrored back into Flux.

Purchase activation, restore, and transaction recovery paths can submit StoreKit transaction data to Flux backend services so purchases can be bound to the correct Flux account and device.

If a purchase or restore cannot be validated, premium access may not unlock or may be removed on that device until verification succeeds.

IV. Playback Access, Preview Limits, and Device Association

Flux distinguishes guest, non-premium, premium, and ultra access states when deciding whether protected playback can begin.

Guest viewing and some non-premium access paths can be time-limited. Premium playback can also depend on device-association status where that control is part of the app flow.

Flux may use stable device identifiers and secure local storage, including Keychain-backed persistence where applicable, for device association, purchase binding, and preview-limit enforcement.

Signing out, revoking a device, or failing to associate the current device where association is required can change whether protected playback remains available.

V. Content Protection and Licensed Streaming

Flux is built for licensed streaming. Supported protected streams use entitlement gates and FairPlay DRM workflows in the playback stack.

Catalog availability can change by rights window, channel or title configuration, territory, storefront, language, or other lawful distribution limits.

Recording, unauthorized redistribution, credential sharing, scraping, or attempts to bypass Flux playback controls or rights restrictions are prohibited.

Not every stream or title has the same playback rights, plan availability, or output permissions.

VI. Network, Device, and App Integrity

Flux expects valid app builds, supported Apple hardware and software, and secure network connectivity to operate correctly.

Protected playback requests and account-sensitive operations may fail when service configuration, device state, network state, or response validation does not satisfy Flux requirements.

Flux stores certain security-sensitive local values using Apple platform storage mechanisms, including Keychain-backed persistence where applicable.

Modified clients, automated misuse, or other attempts to interfere with service operation may result in limited functionality or loss of access.

VII. Privacy, Diagnostics, and Support Signals

Flux limits collection to data needed to operate the app, authenticate accounts, manage subscriptions, support playback, investigate abuse, and assist users.

Flux can process account identifiers, email address, purchase status, playback-reliability data, device characteristics, and service-operation events described in the Privacy Policy and privacy manifest.

The Send Diagnostics setting controls additional optional diagnostics. Essential service-reliability metrics such as startup time, playback errors, and rebuffering remain collected for app functionality.

Flux does not declare advertising tracking in its current Apple-platform apps, and the current privacy manifest identifies the data categories disclosed for Flux where required.

VIII. Acceptable Use, Reporting, and Changes

Flux may restrict features, deny playback, or preserve relevant records when reasonably necessary to respond to fraud, abuse, purchase disputes, rights-holder requirements, service misuse, or legal obligations.

Do not share access in unauthorized ways, automate account or playback activity, probe Flux services, or attempt to bypass entitlement, preview, or device controls.

If you believe your Flux account, subscription, device association, licensed-content access, or personal data has been misused, contact Flux through the support, privacy, or legal contact paths provided by Flux.

Flux may revise these practices as the apps, subscription systems, content rights, or legal requirements change.