Back to home

Legal

Privacy Policy

This policy explains what personal data TViO processes, why, on what legal basis, for how long, and what rights you have. It covers the website tvio.app, the TViO Companion web dashboard and the TViO app for Android TV, Fire TV and Android.

Last updated: October 2026

Who is responsible

TViO is the controller of the personal data described in this policy. For anything related to your data, write to hello@tvio.app.

What data we process

We only process the data we need to run the service. Depending on how you use TViO, this can include:

  • Account data: your email address and the identifier we give your account. If you use the app without creating an account, an anonymous guest identifier instead.
  • Device data: an identifier the app creates for each paired device, the device model, the app version, and the pairing and session records that keep the device signed in.
  • Playlists: the source addresses and any credentials you provide are processed and stored encrypted to import your playlists, build their catalogue and programme guide, and make them available on your devices.
  • Activity you sync: favourites, groups, watch progress and settings, so they are the same on all your devices.
  • Purchase data: plan, date, sales channel and the transaction reference from Google Play or Stripe. We never receive your full card details.
  • Technical data: server logs (IP address, date, requested route and errors) and crash and diagnostic reports from the app.
  • Waitlist: the email address you leave on the website to hear about the launch.
  • Website analytics: aggregated visit statistics (pages viewed, referring site, country and device type) from Vercel Web Analytics, which does not use cookies.

Why we use it and on what legal basis

We use each type of data only for its purpose. We do not sell your data, use it for advertising or build profiles about you. Under the GDPR, the legal bases are:

  • Providing the service (account, pairing, building your catalogue, syncing your devices and support): performance of our contract with you (Art. 6(1)(b)).
  • Processing purchases and keeping billing records: performance of the contract and compliance with tax and accounting obligations (Art. 6(1)(b) and (c)).
  • Keeping the service secure and working (logs, crash reports, preventing abuse and fraud): our legitimate interest in a reliable, safe service (Art. 6(1)(f)).
  • Measuring website visits in aggregate: our legitimate interest in understanding how the website is used, without cookies or individual profiles (Art. 6(1)(f)).
  • Emailing you about the launch if you join the waitlist: your consent (Art. 6(1)(a)), which you can withdraw at any time.

Who processes it for us

We use providers that process data on our behalf, under data processing agreements and only to provide their service to us. Google Play processes the purchases made in its store as an independent controller, under Google's privacy policy.

  • Amazon Web Services: servers and databases, in the EU (Ireland) region.
  • Vercel: website hosting and web analytics.
  • Supabase: storage of waitlist sign-ups.
  • Stripe: payments made on the web.
  • Sentry: crash and error reports from the app.

International transfers

Some of these providers are based in the United States or may access data from outside the European Economic Area. When that happens, the transfer is covered by a safeguard recognised by the GDPR, such as the European Commission's adequacy decision for companies certified under the EU-US Data Privacy Framework, or the Commission's standard contractual clauses.

How long we keep it

We keep data only for as long as we need it:

  • Account, devices, playlists, favourites and watch progress: while your account exists. When you delete it, they are removed straight away, and remaining copies in backups within 30 days.
  • Server logs: 30 days.
  • Crash reports: at most 90 days.
  • Purchase records: for as long as tax and accounting law requires.
  • Waitlist emails: until we announce the launch or you unsubscribe, and never more than 12 months.
  • Website analytics: kept only in aggregate, with no data that identifies you.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to hello@tvio.app from the email address on your account, and we will reply within one month. You can also delete your account yourself from TViO Companion: see the Delete account page.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or to the data protection authority of the country where you live.

Cookies and local storage

The website does not use advertising or tracking cookies. It saves your language choice in your browser's local storage so it remembers it next time, and you can clear it from your browser settings. TViO Companion only uses the cookies needed to keep you signed in.

Children

TViO is not intended for children under 14, and we do not knowingly process their data. You must be of legal age to buy Premium.

Changes to this policy

If we change this policy, we will publish the new version here with a new date. If the change is significant, we will also tell account holders by email or in the app.

Contact: hello@tvio.app