RedForce — Privacy Policy

Last updated: 6 November 2026 · App: RedForce (com.redforce.ott) for Android phones, tablets and Android TV

RedForce is a player app. You connect it to the server your service provider gave you and sign in with an account that your service provider (Layer3  Communication "we" created for you, and the app plays the live TV channels, movies and series that your provider offers. This policy explains what information the app and our server handle, why, and what your choices are.

Information we collect

Information

Why

Account details: your username and password (the server stores only a salted hash of the password), your subscription end date and whether the account is enabled.

To sign you in and to show or block access when a subscription ends.

Device details: a device identifier (the Android ID that Android gives this app on your device, or a random identifier if the device has none), the device model name, the app version, the device type (phone / TV), and the IP address your connection uses.

To apply the number of devices your account allows, to let your provider remove a device, and to keep the service secure.

Activity records: sign-in, sign-out and blocked-access events with a time stamp; the server's access log, which lists the pages and streams requested (for example a channel or title identifier and any text you type into search).

To operate the service, investigate problems and detect misuse. The activity list in the provider's panel keeps only the most recent entries.

The app does not collect your location, contacts, photos, files, microphone or camera data, advertising ID, or payment information. It contains no advertising and no third-party analytics or tracking tools.

Servers you connect to

RedForce does not have a server of its own that all users share. You tell the app which server to use by typing the address your service provider gave you (Change server), and everything described in this policy is exchanged with that provider's server, which is run by the provider, not by the developer of the app. You can keep several servers in the app and remove any of them at any time. The app asks each server for its public name, colours, logo and whether it needs a sign-in, and shows them inside the app. Some providers run an open service that does not ask for a username or password; the app then identifies the device only by the device identifier described above. Where your provider is named at the top of this policy, it is that provider's server that this policy describes. For any other provider, that provider's own privacy policy applies to the data its server handles, and you should read it.

What stays on your device

The app saves the list of servers you added (name, address, colours and, for a server that uses its own certificate, the certificate's fingerprint that you confirmed), your sign-in details for each server (username and password), the device identifier and a few playback preferences in its private storage so you do not have to sign in every time. Android's cloud backup and device-to-device transfer are switched off for the app, so these details are not copied to other devices or to your Google account. Signing out in the app removes the saved sign-in details. Uninstalling the app removes everything it stored.

How information is sent

Sign-in and account requests go to your provider's server over HTTPS whenever the server offers it. If a server uses its own certificate, the app shows its fingerprint when you add it and afterwards only trusts that certificate for that server. A provider can also run a server without encryption (plain HTTP): the app then warns you, Not encrypted, when you add it and in the server list, and on such a server anyone on the network could read what you send, including your password. Live TV streams are delivered from the provider's streaming server; that connection may not use HTTPS and carries a temporary stream token that is tied to your account. The app sends your sign-in details only to the server you signed in to.

Sharing

We do not sell your information and we do not share it with advertisers or data brokers. Information is only disclosed if the law requires it. Your provider's staff can see the account, device and activity details above in their management panel.

Retention and deletion

Account and device details are kept while your account exists. Activity records are limited to the most recent entries and server access logs are rotated regularly. To have your account and the related device and activity records deleted, contact us at [support email] or ask your service provider; we will delete them within 30 days unless the law requires us to keep something.

Children

RedForce is for adults and is not directed to children under 13 (or the age required in your country).

Changes

If we change this policy we will publish the new version at this address and update the date above.

Contact

Layer3  Communication
documents.layer3@gmail.com
Manikganj,Bangladesh