Privatësia

1. Who is responsible

The controller responsible for processing personal data in connection with visiv is nnexd GmbH, Halden 28, 8604 Volketswil, Switzerland (UID CHE-211.694.962).

Email for data protection questions: [email protected]

In this policy, “we” means nnexd GmbH and “you” means you as a person who uses visiv.

2. visiv is a player

visiv plays what you add yourself: logins using the Xtream Codes method, M3U playlists and TV guide sources (XMLTV). These sources come from you or your provider, not from us. Only add sources that you are allowed to use.

A visiv subscription only unlocks features of the app. It contains no channels, movies or series and does not provide access to them.

3. What visiv stores on your device

So that the app works, visiv stores on your device:

• your sources with name and settings
• Login details: username, password and the addresses of your sources (server, M3U link, additional TV guide sources) are stored encrypted in your operating system’s protected storage. In the stored channel lists, visiv replaces username and password with placeholders. If a playlist contains other keys in the addresses of its channels, these remain in the stored channel list on your device. visiv never displays passwords and never writes them, or addresses containing login details, to a log.
• copies of your provider’s channel, movie and series lists and of the TV guide
• favourites, your own folders and names, hidden channels, “Recently watched”, continue watching, reminders and your teams in the Sports area
• profiles and parental control; the PIN is only stored as an irreversible hash value
• recordings, downloads and screenshots as files in your folders (e.g. “Videos › visiv” and “Pictures › visiv”)
• images (posters, channel logos, photos of cast and crew) as a cache, at most 500 MB
• a log of the last 20 playback problems (channel name, cause, time; without addresses and login details)
• your settings
• your sign-in to your visiv account and an activation certificate, so that visiv keeps working for up to 30 days even without a connection to our server (section 5.1)

visiv calculates suggestions such as “Because you watched …” on your device. Picture enhancement runs on your device’s graphics card; no images leave your device in the process.

This data is not transmitted to us, and we have no access to it.

How to delete it

• individually in the app, e.g. clear “Recently watched” or remove a source (its lists, favourites and history then disappear too)
• all at once under Settings › Help › “Reset visiv”. Recordings, downloads and screenshots remain in your folders until you delete them yourself. Your visiv account remains; how to delete it is described in section 5.1.

Backup and transfer to another device

Only you create a backup file, and it is stored wherever you save it. With login details, it is encrypted with your password. Without login details, it contains no login details but does contain, for example, the names of your sources and your history, and it can be read without a password; so keep it in a safe place.

The transfer over Wi-Fi runs directly between your devices, with a confirmation code and encrypted. It does not leave your home network.

4. Connections your device makes directly

visiv only connects to the internet where this is necessary for a feature. These connections run directly from your device to the named party, not via us. The connection to your visiv account is described in section 5.

4.1 To your provider

For channel lists, the TV guide, movies, series, recordings, downloads and playback, visiv connects directly to the addresses of your source. In the process, your provider receives your IP address, your login details, the app’s identifier and what you request. Your provider is itself responsible for this data; its privacy policy applies. The same applies to additional TV guide sources that you add yourself.

Whether these connections are encrypted is determined by your provider: only for addresses that begin with https. Many providers use http; in that case, username and password also travel across the network unencrypted.

4.2 Posters and logos

visiv loads posters, channel logos and other images from the addresses your provider specifies in its lists. Often they are not hosted by the provider but by image services, e.g. the movie database TMDB or Amazon (both USA). These then see your IP address and which images your device loads, and thus which movies and series you look at. visiv then stores the images on your device (section 3) so that they do not have to be reloaded every time.

4.3 Wikipedia (Wikimedia Foundation, USA)

For photos and information about cast and crew and for “Top 10 this week”, visiv queries Wikidata, Wikimedia Commons and the Wikipedia page view statistics:

• When you open the page of a movie or series, the names of the cast and crew are sent to Wikidata and Wikimedia Commons. visiv loads the photos from the Wikimedia Foundation’s image servers.
• Roughly every 12 hours, visiv sends up to 400 movie titles from your provider’s catalogue to Wikidata and queries the page view statistics for the movies found.

In the process, the Wikimedia Foundation sees your IP address and the app’s identifier (“visiv/1.0 …”). According to its own information, it retains IP addresses for at most 90 days. Your login details and your history are not sent along. The Wikimedia Foundation’s privacy policy applies.

4.4 Trailers on YouTube

If you choose “Trailer”, visiv opens the video on YouTube in your browser. From then on, Google’s terms apply.

4.5 Checking the internet connection

If a channel isn’t playing, visiv checks whether your device is connected to the internet. To do this, visiv briefly establishes a connection to public DNS servers (Cloudflare 1.1.1.1, Google 8.8.8.8, Quad9 9.9.9.9) and disconnects again immediately, without sending any content. The operators see your IP address and the time.

4.6 In your home network

“Enter on your phone” and the transfer to another device only work in your local network and only while the corresponding screen is open. Other devices on the same network can see the name of your device. The transferred content is encrypted.

4.7 Your operating system

visiv shows reminders as notifications from your operating system. On Windows, visiv adds scheduled recordings to the Task Scheduler so that they start even when visiv is closed. Both stay on your device.

5. Data we process

5.1 Your visiv account

To use visiv, you sign in with your email address. There is no password: you receive a 6-digit code by email that is valid for 10 minutes. For this, we store:

• your email address
• your devices, at most 5: platform, device name, app version, first and last sign-in. visiv suggests a neutral device name (e.g. “Windows PC 1”), and you can change it.
• the status of your free trial and your subscription
• a log of sign-ins and of devices added or removed, kept for 90 days. It serves your security and the rule that you can remove at most 3 devices in 30 days.

When a new device signs in, we send you an email. That way you notice if someone else is using your account.

So that visiv also works without a connection to our server, your device receives an activation certificate signed by us. It is valid for at most 30 days and is renewed as soon as your device is connected again.

Deleting your account: in the app with a confirmation code sent by email, or with a message to [email protected] from your account’s email address. We then immediately delete your account, your devices and the assignment of your purchases. The data disappears from our backups after 30 days at the latest. You cancel an active subscription separately in the store (section 5.3); deleting your account does not end it.

5.2 The 7-day trial

The free trial is available only once per device and per email address. So that this also applies after a reinstallation or with a new account, we store two hash values:

• a hash value of the device ID that Windows provides for the apps of a publisher
• a hash value of your email address

We create both hash values with a secret key; neither the device ID nor the address can be derived back from them. We use them only to prevent repeated free trials and delete them 12 months after the free trial begins, even if you delete your account earlier.

Our server decides automatically, based on these hash values, whether you are entitled to the free trial. If you think the decision is wrong, write to [email protected]; a person will then look at it.

5.3 Purchasing

You buy the subscription in the Microsoft Store. Microsoft is responsible for the purchase, payment and cancellation; we never see your payment details. So that your purchase is assigned to your account, visiv passes a random identifier of your account to Microsoft when you buy. It contains neither your name nor your email address.

From Microsoft, we receive the following about your purchase: product (monthly or yearly), purchase ID, subscription status, term and whether it renews. Our server regularly retrieves this information from Microsoft in order to activate your subscription or to end it after a cancellation. We also receive aggregated sales reports from Microsoft.

You cancel in the Microsoft Store at account.microsoft.com/services.

5.4 Protection against misuse

To protect our services against attacks and mass code requests, we count requests per IP address and per email address. For this, we store the IP address only as a hash value and for at most 24 hours.

5.5 Emails from visiv

We send codes and notices about your account (sign-in, new device, account deletion) from [email protected] via our email provider Infomaniak (Switzerland). We do not send advertising.

5.6 Support

If you write to us, we process your message and your email address in order to reply to you. In the app, you can copy a report and send it along yourself. It contains the version of visiv, the operating system and language, for each source the type, the number of channels, movies, series and TV guide entries, and the expiry date of your subscription with your provider, plus the most recent playback problems with channel names. It does not contain addresses, source names or login details.

5.7 Website visiv.tv

The website does not set any cookies and does not use any analytics, tracking or advertising tools. Fonts, images and videos come from our own domain. When the website is accessed, our hosting provider Cloudflare processes technically necessary information such as IP address, time, page accessed and browser in order to deliver the website and protect it against attacks. From the IP address it also derives the country so that prices appear in the right currency (Switzerland and Liechtenstein CHF, otherwise USD); the country is not stored.

6. Purposes, legal bases and retention periods

We state the legal bases for persons in the EU in accordance with the GDPR. For persons in Switzerland, the Swiss Federal Act on Data Protection (FADP, DSG) applies; under it, processing does not require a separate legal basis as long as the principles are complied with.

7. Recipients and countries

We do not sell or rent out personal data. Only the following parties receive data, each for the stated purpose:

If we disclose data to a country without adequate data protection, we rely on recognised safeguards such as the Swiss-US Data Privacy Framework or standard contractual clauses.

8. What we don’t do

• no advertising
• no tracking, no analysis of your behaviour, no advertising ID
• no selling or renting of data
• no analysis of your viewing behaviour on our side
• no use of your internet connection or your device by third parties
• no automated decisions with legal effect; you can have the automatic check of the free trial (section 5.2) reviewed by a person on request

9. Security

• Login details and the addresses of your sources are stored encrypted in your operating system’s protected storage.
• Backup files with login details are encrypted with your password (AES-256).
• The transfer between your devices uses a confirmation code and an encrypted connection.
• The parental control PIN is only stored as an irreversible hash value.
• We store sign-in codes and session keys only as hash values. A code is valid for 10 minutes and for at most 5 attempts.
• We never store device IDs in plain text, only as hash values (section 5.2).
• Connections to Wikimedia, to the store and to our services are encrypted (HTTPS).
• Connections to your provider are only encrypted if it offers https (section 4.1).

10. Your rights

Most data is only stored on your device; you delete local data yourself in the app (section 3), and for data held by your provider, you ask your provider. We only hold the data of your visiv account (section 5).

If you live in Switzerland

You can request information, request the release or transfer of your data, have incorrect data corrected and have data deleted, or object to processing. You can contact the Federal Data Protection and Information Commissioner (FDPIC, EDÖB): www.edoeb.admin.ch.

If you live in the EU or EEA

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent at any time. You can lodge a complaint with the supervisory authority in your country.

How to exercise them

Write from your visiv account’s email address to [email protected], or write to our postal address (section 1). We respond within 30 days and may request proof of your identity. You can delete your account yourself at any time (section 5.1).

11. Children and kids profile

visiv is not aimed at children. You may open a visiv account from the age of 16; younger people need their parents’ consent. For children, there are kids profiles and parental control. Both run only on your device; the PIN is only stored as a hash value and is not transmitted to us.

12. Changes

We update this policy when visiv changes. If a feature with new data is added, we supplement the policy beforehand and point this out in the app. The version on visiv.tv with the date above is authoritative.