Ninety legal
Privacy Policy
This Policy explains how Christian Keim, at Norway, processes personal information when you use Ninety. We are the controller for the processing described here. Privacy contact: contact@ninety.tv.
Privacy at a glance
- We do not sell your personal information.
- We do not use your viewing activity for advertising.
- Your playlists, favourites, recent viewing, and viewing preferences are primarily stored and processed on your TV.
- Provider credentials entered during mobile setup pass temporarily through the pairing service so they can be delivered to your TV. They are not kept as permanent Ninety account data on our servers.
- We keep limited account, device, trial, subscription, legal, and security information needed to operate and protect Ninety.
1. Information we process
- Account information: authentication subject, email address when available, and selected sign-in provider.
- TV and app information: platform, model and model code, app version, connection and last-seen times, device nickname, and a locally generated installation identifier.
- Physical-device signals during pairing: Samsung DUID and the currently configured network MAC address when the platform makes them available.
- Service records: pairing state, connected devices, trial eligibility and dates, entitlement, subscription state, billing references, and records showing which Terms version was accepted and which Privacy Policy version was presented.
- Operational and security information: timestamps, request and error information, IP address or IP-derived rate-limit activity, and information needed to investigate abuse or secure the service.
- Communications: support messages you send and delivery records for essential account, trial, payment, and subscription emails.
2. Device identifiers and trial eligibility
Raw DUID and MAC values are transmitted over HTTPS during pairing and normalized. We transform them into one-way keyed HMAC fingerprints used to recognize a physical TV, secure device connections, and prevent repeated free-trial claims. The MAC may also be encrypted within the short-lived pairing record so you can confirm the correct TV on your phone; that display value is cleared after TV acknowledgement or pairing expiry. The raw DUID is not displayed and neither raw identifier is placed in the QR URL.
If a physical identifier is unavailable, a locally generated installation identifier can support continuity for that installation, but it is not treated as reliable proof of a unique physical TV. A separate high-entropy, revocable credential authenticates a TV after it is connected.
3. Playlists and provider credentials
If you enter an M3U URL or Xtream server, username, and password on your phone, Ninety temporarily holds the resulting playlist address in the pairing service only long enough to deliver it to the TV. Ninety Web does not parse the playlist. The pairing service clears the value after successful handoff or expiry and later removes expired pairing metadata.
Ninety does not retain provider credentials as permanent account data on its servers. Your TV may retain the M3U URL or Xtream details locally in the app's storage so it can reconnect without asking you to enter them again. The TV communicates directly with the provider you selected. Do not send playlist URLs or provider credentials in support messages. Use Reset Ninety before selling, giving away, or disposing of a TV.
4. Viewing personalization on the TV
Favourites, recently watched items, channel preferences, playlist information, caches, and limited viewing-affinity information may be stored locally on the television to personalize the interface. Ninety does not associate this local viewing history with your server-side Ninety account or use it for advertising. Local information remains until you remove it, reset Ninety, clear the app's data, or uninstall the app, subject to the television platform's behavior.
5. Why we use information and our legal bases
- To perform our contract or take steps you request: authenticate you, pair and manage TVs, deliver temporary setup details, provide the free trial, calculate access, administer subscriptions, provide support, and send essential service messages.
- For legitimate interests: secure Ninety and its users, prevent fraud and repeat-trial abuse, rate-limit requests, diagnose faults, and establish or defend legal claims. We use these grounds only where our interests are not overridden by your rights.
- To comply with legal obligations: retain required accounting, tax, transaction, and compliance records.
- With consent where required: for optional marketing or non-essential tracking if introduced. Such consent will be separate and can be withdrawn.
6. Who receives information
We use service providers to operate Ninety. Depending on the feature you choose, these include Supabase for authentication; Railway for API and database infrastructure; Stripe for checkout, payment, subscriptions, and the billing portal; Resend for transactional email delivery; Google for Google sign-in; Apple for Apple sign-in when enabled; and Samsung for the TV platform, app distribution, and platform device APIs. Sports and programme-metadata services supply fixture, guide, and channel information. The media provider you connect is a separate third party selected by you, and your TV communicates with it directly.
These organizations process information under their own terms, our instructions, or both, depending on their role. We do not receive your complete payment-card number or security code from Stripe. We may also disclose information where required by law, to protect legal rights or service security, or in connection with a genuine business reorganization subject to appropriate safeguards.
7. International transfers
Some providers or their subprocessors may process information outside Norway or the EEA. Where data-protection law requires it, we use a recognized transfer mechanism such as an adequacy decision or standard contractual clauses and apply additional safeguards where appropriate. Contact us for information about the safeguards relevant to your information.
8. Retention
- Temporary playlist/provider handoff data is kept for the short pairing window, normally about ten minutes, and scrubbed promptly after use or expiry. Remaining expired pairing metadata is normally removed after an additional short operational grace period.
- Account and active device-link information is kept while needed to provide and secure the account or device relationship.
- Trial records and keyed physical-device fingerprints may be retained after unlinking or account closure for a proportionate anti-abuse period so that a one-time trial cannot simply be restarted.
- Ordinary logs, rate-limit information, error data, and transactional-email delivery records are retained for limited operational and security periods, and longer only where needed to investigate a specific incident or demonstrate delivery.
- Support cases are retained while handling the request and for a limited period afterward for continuity, quality, and legal claims.
- Subscription, transaction, accounting, and tax records are retained for the periods required by applicable law. Terms acceptances and other contract evidence may be retained after the relationship ends while legal claims may be made.
- TV-local information remains until removed or reset as described in section 4.
When information is no longer required, we delete or anonymize it. Backup deletion may follow the normal backup rotation rather than occurring immediately.
9. Cookies and browser storage
Ninety Web uses cookies or similar browser storage needed for authentication, security, and preserving the pairing or login flow. We do not currently use advertising cookies or non-essential behavioural tracking. If we add non-essential tracking, we will request any consent required before using it.
10. Your rights and choices
Subject to applicable data-protection law, you may request access to and a copy of your personal information, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent where processing relies on consent without affecting earlier lawful processing. You can rename or remove TVs and manage billing from your account. Removing a TV revokes its credential but does not automatically erase proportionate anti-abuse or legal records.
To exercise a right or request account deletion, contact contact@ninety.tv. We may need to verify your identity and may retain information where another lawful basis requires or permits it. We normally respond within one month, subject to extensions allowed by law.
11. Complaints
Please contact us first if you have a privacy concern. You also have the right to complain to the supervisory authority where you live or work. In Norway, this is Datatilsynet.
12. Children
Ninety is not directed at children and is intended to be purchased and administered by an adult with legal capacity to enter the subscription agreement. Please contact us if you believe a child has provided account information without appropriate authorization.
13. Security
We use measures including encrypted transport, access controls, server-side token verification, revocable device credentials, keyed device fingerprints, and restricted short-lived pairing capabilities. No service can guarantee absolute security. Please contact us promptly if you believe your account or a connected TV has been compromised.
14. Changes to this Policy
We may update this Policy as Ninety, the law, or our providers change. We will publish a new version and effective date and provide appropriate notice of material changes. The Privacy Policy describes processing; it is not a request for blanket consent. See the Terms of Service for the Ninety contract.
15. Contact
Christian Keim · registration Not registered · Norway · contact@ninety.tv