Privacy Policy

This document is available in English only, so that the wording you agree to is the wording we publish.

1. About This Policy

This Privacy Policy explains what information Zoryia ("Zoryia", "we", "us" or "our") handles when you use the Zoryia app, its companion page and this website, and why. Zoryia is operated by 9L Labs Computer Systems and Software Designing, UAE (support@zoryia.com).

Zoryia is built to need very little: there is no account, no advertising, and no analytics service or tracking in the app or on this website. Our service only counts, in total, how many televisions use Zoryia and in which countries (section 4), and, if you agree, receives a problem report when a station cannot play properly (section 2).

Privacy contact: support@zoryia.com

2. What We Store

About your television

• an id for your television, worked out on the television itself from its hardware identifiers through a one-way function, so it cannot be turned back into them;
• the platform and the version of the App;
• when your television first connected, and when its free trial ends;
• the last day your television connected, and the country it connected from, as Cloudflare (section 6) works it out from the connection. We do not keep the internet address with them;
• a device token that lets the App talk to our service, which we store only in hashed form.

Your stations

We store your station list: its groups, the stations in them (their names and stream addresses), their order, and which groups are on, so that your phone and your television both show it and can both change it. This includes stations you add on the television itself.

If you import a playlist from a link on the companion page, our service downloads that link for your phone and hands the playlist back to it. We do not keep the link or the playlist; the stations you then save are stored as above.

Connecting a phone

When you connect a phone, we store the short pairing code until it is used or expires (10 minutes), and a session token, in hashed form, that expires after 24 hours. On your phone, the companion page keeps that session token in your browser's local storage until it expires or you disconnect. It is not a cookie and is used for nothing else.

Premium purchases

A purchase is paid on a checkout page hosted by Stripe, our payment processor (section 6). Stripe receives your card details, your email address and the billing details it asks for, to take the payment, prevent fraud and send your receipt. Your card details go to Stripe and never to us.

From Stripe we keep what we need to grant the license: the plan, a transaction identifier, its status and the license end date. If you ask to move a license to a new television, we may compare the email address you give us with the one on the payment; we use it for that check only and do not store it.

When you write to us

If you email us, we receive your email address and whatever you choose to tell us.

Problem reports

The first time a station cannot play on your television, the App asks whether you want to send us problem reports. Only if you agree, the App sends a report when a station cannot play, has to move to the television's own player, or has to switch to a lower quality because the connection is too slow, and when it finds that your television cannot decode a stream format, so that we can find the cause and fix it. Nothing is sent before you agree, and reports are sent only when something goes wrong, never while stations play normally.

A report holds: what kind of problem it was; the version of the App; your television's platform, model and software version; the country the report came from, as Cloudflare (section 6) works it out from the connection; the address of the stream that was tried, which for a station you added is the address you gave it; and the steps the App took, with their timings and error codes.

A report does not hold your television's id, its internet address or the names you give your stations, so we cannot link it to your television afterwards. We keep each report for 90 days. You can change your answer at any time in the App, in Settings, About.

Technical logs

Our service keeps technical logs of the requests it receives, including the internet address a request came from, to keep the service working and secure (for example, to limit repeated attempts to guess a pairing code). Our hosting provider keeps these logs for a short period and then deletes them.

3. What We Do Not Collect

• your name, unless you write to us;
• an account, password or advertising identifier, because there are none;
• what you listen to and when: your television plays each station directly from the station, and Zoryia does not report your listening to us. A problem report (section 2), sent only if you agree, names only the stream that failed, and only when it failed;
• sound from a microphone, or any camera image;
• your precise location;
• payment card details.

This website sets no cookies and runs no analytics or third-party scripts.

4. How We Use Information

We use the information above only to:

• run the App and keep your phone and television in step;
• run the free trial and grant and manage Premium licenses;
• answer your messages and help with problems;
• find and fix problems with playing stations, from problem reports;
• keep the service secure and prevent abuse;
• count, in total, how many televisions use Zoryia, how many were used recently and in which countries, so we can plan and run the service. These counts never name a television;
• meet legal obligations, such as keeping accounting records.

We do not sell or share personal information for advertising, and we do not build profiles of what you listen to.

5. Radio Stations

When your television plays a station, it connects to that station's server directly. Like any website, the station can see your television's internet address and may handle it under its own privacy policy. We do not control the stations' practices.

6. Who Processes Information for Us

• Railway, which hosts our service and its database;
• Cloudflare, which carries the traffic to our website and service, hosts this website, and stores our encrypted backups;
• our email provider, for messages you send us;
• Stripe, which processes payments and sends receipts.

Each processes information only to provide its service to us, except that Stripe also uses payment information for its own purposes, such as preventing fraud and meeting financial law, under its own privacy policy at stripe.com/privacy.

7. Where Information Is Kept

Our service and its database run in the European Union, in the Netherlands, and our backups are stored, encrypted, in the European Union. If you live outside the European Union, your information is transferred there to provide the service. Stripe may process payment information in the United States and in other countries. Where the law requires safeguards for a transfer, we use them.

8. How Long We Keep It

• pairing codes: until used, or 10 minutes at most; phone sessions: 24 hours at most;
• your television's record and the stations saved for it: while you use Zoryia, until you delete them or ask us to;
• problem reports: 90 days, after which each one is deleted;
• encrypted backups: 30 days, after which each one is deleted;
• records of a purchase: as long as accounting and tax law requires, usually several years, even if you ask us to delete other data.

To delete your television's data yourself, connect your phone and choose Delete this TV's data on the companion page, or write to support@zoryia.com. Its stations and groups, its country and the last day it connected are deleted, every phone is disconnected, and the television goes back to the built-in stations. Deleted data leaves our encrypted backups within 30 days. We keep only what the television needs to keep working and what honors a license: its identifier, its sign-in, its trial dates (so that a free trial is not repeated) and any license it holds. If you go on using Zoryia, its country and the last day it connected are noted again. In a home of several televisions the stations are shared, so the others keep them.

9. Security

We protect information with reasonable technical and organizational measures. In particular, device and session tokens are stored only in hashed form, so the stored values cannot be used to sign in; every connection to our service and this website is encrypted; and backups are encrypted with a key that is kept offline. No system on the internet can be guaranteed to be completely secure.

10. Your Rights

Depending on where you live, you may have the right to know what information we hold about you, to get a copy of it, to correct it, to have it deleted, and to object to or restrict how it is used. If you live in California or another US state with a privacy law, you have the rights that law gives you; we do not sell or share personal information, and we do not use it for targeted advertising.

To use any of these rights, write to support@zoryia.com. We may need to check that a request comes from the person, or the television, it concerns. You may also complain to your data protection authority.

11. Children

Zoryia is not directed at children and does not knowingly collect personal information from children.

12. Changes to This Policy

We may update this policy when Zoryia or the way we handle information changes. The current version is always on zoryia.com, with its effective date.

13. Contact

Privacy and help: support@zoryia.com
Website: zoryia.com
Operator: 9L Labs Computer Systems and Software Designing, UAE