TiVi+ privacy policy

Last changed on 4 October 2026.
Nederlands

Who

TiVi+ is published by Daviq. Questions about this policy, and requests to see or erase data, go to app@daviq.nl.

Atoomweg 63, 3542AA, Utrecht, NL

What TiVi+ is

TiVi+ is a player. It supplies no content of its own, and it contains no playlist. What can be watched comes from a playlist of a provider chosen by the subscriber; that provider is responsible for its own content.

What data, and why

A device with TiVi+ reports to the TiVi+ management environment. That is needed to pair the device and to manage it remotely.

About the device: its model, the app version, the time zone, the internet address it connects from, and a device number that Android assigns to the app per publisher. Used to recognise the device and to support the right version.
App settings and the categories of the playlist: so that settings made on the device and in the management environment stay the same.
Characteristics of the playlist, such as counts and the outcome of checks on the names in the list. Used to improve how the list is shown.
The playlist itself - its address and, where needed, a user name and password - when it is set on the device from the management environment. Stored encrypted.
The app log: once a day, and when a fault is reported. Technical lines about starting and playing; a line can contain a name from the playlist. The logs so far contained no addresses or login details of a playlist.
A crash report when the app has stopped unexpectedly.
A fault report, when one is sent from a phone: the text entered, the name of the playlist, the app version and the internet address it was sent from.
When a film is opened: its title and, where known, its year, to look up an image and a description at The Movie Database (TMDB). That lookup is made by our server; TMDB receives the title, not the device.
When the picture stops: the app requests an empty page from Google (connectivitycheck.gstatic.com), as Android itself does, to see whether the internet is working. Google sees the internet address of the device; nothing else is sent.
With an account in the management environment: a name and an e-mail address, to sign in, and whether that address has been confirmed. A sign-in link and an invitation are sent by e-mail. For each e-mail sent, the recipient, the subject and the time are kept, to check whether it went out; the link itself is not.
With a purchase: the e-mail address for the confirmation, the order number, the kind of licence, the amount, the date, the state of the payment, and which device and home the licence belongs to. Bank details go straight to the payment service and the bank; TiVi+ does not keep them.
With a withdrawal: the name, e-mail address and order number entered on the form, and the outcome.

What does not happen

No advertising. No selling or renting of data. No location. No tracking across other apps or websites. Watching does not require an account.

Why this is allowed

Making the app work and managing it - the device, its settings, the playlist, pairing, an account and its e-mail, and the film title for TMDB: the agreement to use TiVi+ under its terms (GDPR article 6(1)(b)).
A purchase, its confirmation and a withdrawal: the agreement (6(1)(b)); keeping a purchase for the years the tax law requires: a legal obligation (6(1)(c)).
App logs, fault reports, the internet check, the counters against misuse, and the device number with the end of the trial: a legitimate interest (6(1)(f)) - keeping the app working, finding faults, preventing misuse, and giving a trial once per device.

How long

App logs: at most fourteen days, and at most seven per device.
The internet address in a fault report: erased after fourteen days. The report itself stays, as the history of the device.
Device data and settings: as long as the device is in the management environment. When the last app of a device is removed, its settings go with it; the device number and the end of the trial stay, so that a new installation does not get a second trial.
The playlist: as long as it is in the management environment, with the home it belongs to. Removing a device does not remove the playlist; removing the playlist does.
The overview of e-mail sent: thirty days; a clean-up every morning removes what is older. When an account is removed, its overview goes with it at once. A sign-in link expires after fifteen minutes and an invitation after seven days; both are gone within two days after that.
Counters against misuse of signing in, pairing, buying, withdrawing and downloading: per internet address or per account, without the address stored in readable form. They expire after a minute, an hour or a day and are cleaned up every morning.
A paid purchase, and a withdrawal with an amount: ten years after the end of the year of the purchase, as Dutch tax law requires of business records; the clean-up removes them after that. A request to erase does not change this.
A payment that was never completed, and a withdrawal without an order: thirty days.

Rights, and erasure

The rights under the GDPR: to see data, to correct it, to have it erased, to restrict it, to object to what is done on the basis of a legitimate interest, and to receive it in a form that can be moved. A request, including the erasure of an account and everything that belongs to it, can be sent to app@daviq.nl. An answer follows within one month, as the GDPR requires.

A complaint about how TiVi+ handles data can also go to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens: autoriteitpersoonsgegevens.nl.

Sharing

Data is not shared with third parties, except the film title sent to TMDB, the internet address that Google sees during the internet check, the company that hosts the server of the management environment and sends its e-mail, and with a purchase the payment service: it receives the amount, a description and the order number, and no e-mail address. Traffic between the device and the management environment is encrypted over https.

Changes

This policy can change. The date at the top shows when it last did.