Privacy Policy
Effective from 1 September 2026
| Data Controller | ARY Services |
| Version | 2.0 |
| Effective Date | 1 Sept 2026 |
| Last Updated | 8 Sept 2026 |
| Applies to | iOS, Android, Android TV, Samsung Tizen, Web (aryplus.tv) |
ARY Services ("ARY+", "we", "us", "our") operates the ARY+ streaming service. This policy explains what personal information we collect when you use ARY+, why we collect it, who we share it with, how long we keep it, and the choices and rights available to you.
We are the data controller for the personal information described in this policy. If you have any questions about it, or wish to exercise any of the rights set out in Section 12, contact us using the details in Section 15.By creating an ARY+ account or using the service, you confirm that you have read and understood this policy.
This policy applies to the ARY+ service wherever you access it, including:
- The ARY+ mobile applications for iOS and Android
- The ARY+ applications for Android TV and Samsung Tizen televisions
- The ARY+ website at aryplus.tv
This policy does not cover the practices of third parties whose services you may reach from ARY+, including app stores, payment providers, and external websites. Those services operate under their own privacy policies.
3.1 Information you provide to us
Account information. When you create an ARY+ account we collect your email address, your name, your date of birth, and a password. Your email address is verified before your account is activated.
Profile information. You may add or update a mobile number, a profile avatar, and the details above at any time from your account settings.Viewing preferences. During onboarding we may ask for your gender, your age group, and the content genres that interest you. Providing this is optional. You may skip it, and you may change your selections later.
Payment information. When you subscribe or purchase content, you provide payment details to complete the transaction. Depending on the payment method you choose, this may include card details, bank account details, your national identity card (CNIC) number, and a mobile number. Card and bank details are collected and processed by our payment providers. ARY+ does not store your full card number, CVV, or banking credentials on its own systems.
Billing records. We retain a record of each transaction, including the amount, date, payment method type, the plan or title purchased, and the invoice generated against your account.
Loyalty and wallet transfers. If you redeem accumulated watch hours through ARY Sahulat Wallet, we collect the mobile number you enter for the transfer and pass it to ARY Sahulat Wallet in order to complete it.
Support and enquiries. If you contact us through our contact form, our live chat, or by email, we collect your name, email address, mobile number, and the content of your message or chat conversation.
3.2 Information collected automatically
Device information. Device type and model, operating system and version, application version, screen and player capabilities, language settings, and device identifiers. Device identifiers are also used to enforce concurrent-stream and device limits on your subscription.
Network and location information. Your IP address and the approximate location derived from it. We use this to determine which content and payment methods are available in your region, and as part of our analytics reporting. Where you have granted the permission on a mobile device, we may also use your device’s precise location.Usage and viewing information. The titles and pages you view, searches you run, playback activity including start, pause, resume, completion and duration, watch hours accumulated, downloads, and how you navigate the service.
Advertising information. Where advertising is shown, we and our advertising partners collect advertising identifiers, ad impression and completion data, and interaction with ad placements.
3.3 Information from other sources
Payment providers. We receive transaction outcomes, authorisation and decline reasons, reference numbers, and refund or reversal status from our payment providers. We do not receive your full payment credentials.
App stores. Where you subscribe through an app store, we receive confirmation of your subscription status. We do not receive your payment details.We use your personal information to:
- Create and administer your ARY+ account
- Verify your email address and authenticate you when you sign in
- Deliver content to you, including managing entitlements, rentals, purchases, and downloads
- Process payments, issue invoices, and manage subscriptions and renewals
- Enforce device and concurrent-stream limits, and protect content through digital rights management
- Determine which content, pricing, and payment methods are available in your region
- Recommend content and personalise what you see, based on your stated preferences and your viewing activity
- Operate the loyalty programme and process watch-hour redemptions
- Send you service messages, including payment confirmations, renewal reminders, and account notices
- Send you push notifications, where you have enabled them
- Respond to your enquiries and provide customer support
- Measure and analyse how the service is used, so we can improve performance, content, and features
- Serve and measure advertising
- Detect, investigate, and prevent fraud, abuse, unauthorised access, and breaches of our Terms of Use
- Comply with our legal, tax, accounting, and regulatory obligations
Where data protection law requires us to identify a legal basis for processing your personal information, we rely on the following.
| Purpose | Legal Basis |
|---|---|
| Creating your account, delivering content, processing payments, managing subscriptions | Performance of a contract with you |
| Content recommendations and personalisation | Legitimate interests, or your consent where required |
| Analytics and service improvement | Legitimate interests |
| Advertising and advertising measurement | Consent where required, otherwise legitimate interests |
| Push notifications and precise location | Your consent, given through the permission prompt on your device |
| Fraud prevention, security, and enforcement of our terms | Legitimate interests |
| Retaining invoices and financial records | Compliance with a legal obligation |
ARY+ accepts payment through multiple methods, which may include payment cards, bank accounts, digital wallets, and app store billing. Payments are processed by licensed third-party payment providers.
When you pay, your payment credentials are submitted directly to the relevant payment provider. ARY+ receives confirmation of the outcome, a transaction reference, and the details needed to activate your subscription or purchase. We do not store your full card number, CVV, PIN, or banking credentials.Some payment methods require additional information in order to complete a transaction, including your national identity card (CNIC) number and a mobile number. Where this is required, it is collected for the purpose of that payment method and is not used for any other purpose.
Your payment provider processes your payment information under its own privacy policy and applicable financial regulation.
Analytics.
We use analytics services to understand how ARY+ is used. This includes device information, approximate location derived from your IP address, playback and navigation activity, and application performance data. Analytics data is used in aggregate to measure audience behaviour, content performance, and technical quality.
Personalisation.Rows such as recommended content are generated from the preferences you selected and your viewing activity on ARY+. Personalisation does not involve any decision that has a legal or similarly significant effect on you.
Advertising.Advertising may be shown before, during, or alongside content, and on pages within the service. We work with advertising technology providers who may collect advertising identifiers and ad interaction data in order to serve and measure advertising. You can limit advertising personalisation through the advertising settings on your device or browser.
The ARY+ website uses cookies and similar technologies, including local storage and software development kits within our applications. We use them to:
- Keep you signed in and maintain your session
- Remember your settings and preferences
- Support playback and player functionality
- Measure usage and performance
- Support advertising delivery and measurement
We do not sell your personal information.
We share personal information with the following categories of recipient, and only to the extent needed for the purpose described.| Recipient category | Purpose |
|---|---|
| Payment providers | Processing payments, issuing refunds and reversals, fraud checks/table |
| Cloud hosting and content delivery providers | Hosting the service and delivering video |
| Analytics providers | Measuring and reporting on usage of the service |
| Advertising technology providers | Serving and measuring advertising |
| Notification and email delivery providers | Sending push notifications and service emails |
| Customer support and live chat providers | Handling your enquiries |
| ARY Sahulat Wallet | Completing watch-hour redemptions you initiate |
| Digital rights management providers | Protecting content and issuing playback licences |
| Professional advisers and auditors | Legal, accounting, and audit purposes |
If ARY Services is involved in a merger, acquisition, reorganisation or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any such transfer that materially affects how your personal information is handled.
A list of the specific providers we use is available on request using the contact details in Section 15.
ARY+ operates internationally and our service providers may be located outside your country of residence. Your personal information may therefore be transferred to, stored in, and processed in countries whose data protection laws differ from those of your own.
Where we transfer personal information out of the United Kingdom or the European Economic Area, we do so on the basis of an adequacy decision, standard contractual clauses, or another transfer mechanism recognised under applicable law.
We may change the infrastructure or hosting arrangements underlying ARY+ from time to time. Where we do, we take steps to ensure that any transfer of personal information remains subject to appropriate safeguards.
We keep personal information only for as long as we need it for the purposes set out in this policy, and then delete it or reduce it to a form that no longer identifies you.
| Category | Retention |
|---|---|
| Account and profile information | Kept while your account is active. Deleted within 30 days of your account being closed or a valid deletion request being completed. |
| Viewing preferences | Kept while your account is active. Deleted within 30 days of closure or deletion. |
| Support enquiries and live chat transcripts | Deleted within 30 days of your account being closed or a valid deletion request being completed, unless required for an ongoing dispute or investigation. |
| Analytics and usage data | Retained on an ongoing basis. Following account deletion, this data is held only in a form that does not identify you and cannot be linked back to you. |
| Invoices and financial records | Retained for as long as necessary to meet our legal, tax, accounting and audit obligations. Invoices issued against your account will continue to contain the information shown on them as a record of the transaction, and are not deleted when your account is closed. |
| Fraud, security and enforcement records | Retained for as long as necessary to protect the service and to establish, exercise or defend legal claims. |
12.1 Your rights
Subject to applicable law, you may:
- Access the personal information we hold about you
- Correct personal information that is inaccurate or incomplete
- Delete your personal information, subject to the limits described in Section 12.2
- Object to or restrict processing carried out on the basis of our legitimate interests
- Withdraw consent you have previously given, at any time
- Receive a copy of certain personal information in a portable format
- Complain to the data protection authority in your country
Most account and profile details can be viewed and corrected directly in your ARY+ account settings. For anything else, contact us using the details in Section 15. We may need to verify your identity before acting on a request, and we will respond within the period required by applicable law.
Exercising these rights is free of charge. We will not restrict your access to ARY+ or treat you differently because you have made a request.
12.2 What deletion means
When you delete your account, or when we complete a deletion request, we delete the personal information that identifies you — your name, email address, mobile number, date of birth, avatar, preferences, and support history — within 30 days.
Two categories are treated differently, and it is important that you understand this before making a request.
Analytics data is retained without identifying you. Records of how the service was used are kept for audience measurement and service improvement. Following deletion, these records are held only in a form that cannot be linked back to you.
12.3 Device permissions and notifications
Push notifications. You can turn push notifications off at any time in your device settings, or in your ARY+ notification settings where available. Turning them off does not stop essential service emails such as payment confirmations and account notices.
Precise location. Where the ARY+ application requests access to
your device’s precise location, you may grant or decline the permission when prompted, and change it at any time in your device settings. Declining it does not prevent you from using ARY+. We will continue to determine your approximate region from your IP address in order to apply content and payment availability rules.
Marketing communications. Where we send marketing or promotional messages, each one includes a way to unsubscribe.
ARY+ is not intended for children. You must be at least 18 years old to create an ARY+ account.
We do not knowingly collect personal information from anyone under 18.If we become aware that we have done so, we will delete the account and the associated personal information. If you believe a child under 18 has created an account, contact us using the details in Section 15.
Some content available on ARY+ is not suitable for younger viewers. Account holders are responsible for supervising access to ARY+ by members of their household.We maintain technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, and alteration. These include encryption of data in transit, access controls limiting who within ARY Services can access personal information, digital rights management on protected content, and the use of licensed payment providers for payment processing.
You are responsible for keeping your ARY+ password confidential and for activity that takes place under your account. Do not share your password. If you believe your account has been accessed without your authorisation, contact us immediately.No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
For any question about this policy, or to exercise any of your rights:
| [email protected] |
We may update this policy from time to time to reflect changes to the service, to our practices, or to legal requirements.
When we make changes, we will update the version number and the "last updated" date at the top of this policy and publish the revised version on aryplus.tv. Where a change materially affects how we handle your personal information, we will provide notice through the service or by email before it takes effect.Continued use of ARY+ after a revised policy takes effect means you accept the updated policy.
This policy, and any dispute arising out of or in connection with it, is governed by the laws of the Islamic Republic of Pakistan, and the courts of Pakistan have exclusive jurisdiction.
Nothing in this section removes any right you have under the data protection law of your own country of residence, or your right to complain to your local data protection authority.