Legal

Privacy Policy

Last updated 6 October 2026

This policy explains what personal data we collect when you use the Kine app and the account panel at watchkine.com, why we use it, who we share it with and the rights you have. It applies to everyone with a Kine account.

1. Who is responsible for your data

VantaTech ehf., company number (kennitala) 6407070460, Tjarnargata 3, 230 Reykjanesbær, Iceland, is the data controller. Contact us about privacy at [email protected].

2. What we collect

Account data: your email address and a hashed version of your password.
Provider connection: the access code and the credentials your TV provider gave you, which Kine needs to connect to your provider's service. They are stored encrypted and are never shown in full, not even to our staff.
Devices and sessions: the TVs and devices signed in to your account, their activation codes, device type, approximate location derived from IP address, and the time of each sign-in, so you can see and sign out your devices.
Subscription and billing: your plan, billing period, subscription status, renewal dates, receipts, and the card brand, last four digits and expiry date of the card on file. Full card details are entered on and held by our payment provider, Rapyd; they never reach us.
Usage and technical data: server logs with IP address, browser or device information and the pages or app screens requested, and in-app settings such as profiles, watch state and parental PIN, which stay within your account.
Correspondence: the emails you send us.

We do not collect what you watch through your operator for advertising, and we do not sell personal data.

3. Why we use it and on what legal basis

To provide Kine (performance of our contract with you): create and secure your account, connect your operator, run the app on your devices, manage your subscription, take payments and send receipts and renewal reminders.
To keep the service safe and improve it (our legitimate interests): prevent fraud and abuse, debug problems, measure how the service performs.
To meet legal obligations: accounting and tax record-keeping, responding to lawful requests.
With your consent, where we ask for it, for example for optional emails about new features. You can withdraw consent at any time.

4. Who we share it with

Rapyd, our payment service provider, processes your card payments and receives the data needed for that (amount, currency, your email and a booking or subscription reference).
Your TV provider receives the credentials you entered when Kine connects to the provider's service on your behalf; the provider's own privacy policy applies to its service.
Hosting and infrastructure providers: our servers are hosted by DigitalOcean in the European Union and our websites are delivered and protected by Cloudflare. These providers process data only on our instructions.
Email delivery providers that send our transactional emails, such as receipts and reminders.
Authorities and advisers where the law requires it or to protect our rights.

5. International transfers

We keep your data in the European Economic Area wherever possible. Where a provider processes data outside the EEA, we rely on an adequacy decision of the European Commission or on the Commission's standard contractual clauses.

6. How long we keep it

Account, operator-connection and device data are kept while your account is active and deleted within 90 days after you close it. Billing records and receipts are kept for seven years as required by Icelandic accounting law. Server logs are kept for up to 90 days. Correspondence is kept for as long as needed to handle your request and any follow-up.

7. Your rights

Under the General Data Protection Regulation and the Icelandic Data Protection Act no. 90/2018 you have the right to access your data, to have it corrected or deleted, to restrict or object to processing based on our legitimate interests, to receive the data you gave us in a portable format, and to withdraw consent. To exercise a right, email [email protected] from the address on your account. We answer within one month. You can also complain to the Icelandic Data Protection Authority (Persónuvernd) or to the supervisory authority in the country where you live.

8. Cookies

The account panel uses only cookies that are needed to run it: a session cookie that keeps you signed in, a cookie that mirrors the session expiry and your email so the panel can show them, and a cookie that remembers the plan you chose before signing up. We do not use advertising or tracking cookies. Our payment provider sets its own cookies on its checkout page.

9. Security

Connections are encrypted with TLS. Passwords are stored hashed and operator credentials encrypted. Access to production systems is limited to staff who need it and is logged. Card data is handled entirely by our PCI DSS compliant payment provider.

10. Children

Kine accounts are for adults. We do not knowingly collect data from anyone under 18. Profiles for children in your household are managed by you within your account and behind a parental PIN.

11. Changes to this policy

We will post any changes here and update the date at the top. If a change is material we will also tell you by email or in the account panel.

12. Contact

VantaTech ehf., Tjarnargata 3, 230 Reykjanesbær, Iceland. [email protected]