Privatlivspolitik

Data controller

Rio Pictures AB (company reg. no. 559254-5452), Hornsgatan 24, 118 20 Stockholm, Sweden, sells the films on rio.watch and is the controller of your personal data in the service. You can reach us at support@rio.pictures.

The Rio 4-Ever membership is sold and managed by Bio Rio AB (company reg. no. 559050-4964), which is responsible for the data about the membership. See Bio Rio's privacy policy at biorio.se.

What data we process

• Account: email address, name and password. Sign-in is handled by Google Firebase. Your password is stored encrypted at Google and we can never see it. If you sign in with Google, we receive your name and email address from Google.
• Profile: phone number, street address, postal code and city, if you choose to enter them under Profile. These are optional.
• Purchases and rentals: which films you bought or rented, when, price, currency, payment method, receipt and transaction numbers. Card numbers are handled by our payment providers and are never stored by us.
• App Store purchases: when you pay in the app, Apple handles the payment. We receive Apple's transaction number, the product, the time and whether it was a test purchase, but no card or account details.
• Viewing: where you are in a film (so you can resume), films you have saved, and playback data: device, operating system, browser or app, picture quality, buffering and approximate location (country, region and city) derived from your IP address.
• Approximate location for licensing: we determine which country you are in from your IP address, because film rights are granted per country. We do not store the IP address for this purpose.
• Device location (iPhone and iPad only, only if you allow it): when you tap "Use my location" to find cinemas showing a film, an approximate position (to the nearest kilometre) is sent with the request and used only to sort the cinemas by distance. It is not stored and not linked to your account.
• Apple TV sign-in: when you sign in with a code at rio.watch/tv, we keep the code and the TV's IP address until sign-in completes. They are deleted within a few hours.
• Campaign source (web): if you arrive at rio.watch from an ad or link, we keep the source (for example utm parameters, the referring page and ad click ids) in a cookie for 30 days and link it to a purchase, so we can see which campaigns work.
• Use of the service: events such as opening a film page, starting a checkout or completing it, linked to your account, to understand and improve the service.
• Contact with us: what you write to us and our replies.
• Technical information: IP address, device, browser and error messages in our server logs, for troubleshooting and security.

Why we process it, and on what legal basis

• To provide the service and your purchases (contract): create and manage your account, take payment, give you access to the films on your devices, remember where you stopped watching, send receipts and important account messages, and handle refunds.
• To comply with licence agreements (legitimate interest and contract): films may only be shown in the countries where we hold the rights, so we check which country you are in.
• To comply with the law (legal obligation): bookkeeping and tax.
• To provide support, improve and protect the service (legitimate interest): reply when you contact us, measure playback quality, understand how the service is used, prevent fraud and abuse, troubleshoot and keep our systems secure.
• Newsletters and offers (consent): we send marketing email only if you ticked the box for it when creating your account, at checkout or under Profile. You can unsubscribe at any time under Profile or via the link in the email.
• Analytics and advertising on the web (consent): see Cookies below.
• Finding cinemas near you (consent): device location is used only if you have allowed it in iOS.
• Usage statistics in the apps (legitimate interest): understand how the apps are used and improve them. You can turn it off in the app, see In the apps below.
• Ad measurement in the iPhone and iPad app (consent): only if you allowed tracking when iOS asked, see In the apps below.

Who we share data with

We never sell your data. We share it with providers that help us run the service, and they may only use it on our behalf:

• Sign-in: Google Firebase.
• Payment: Stripe for card payments on the web and for cards saved for a Rio 4-Ever membership. Apple for App Store purchases, where Apple itself is responsible for the payment and your data at Apple.
• Video: Mux delivers the films, protects them with DRM and measures playback quality.
• Email: Klaviyo sends receipts, password resets and, if you said yes, newsletters.
• Hosting: DigitalOcean (servers and database in the EU), Vercel (the website) and Cloudflare (network and attack protection).
• Logging: Better Stack.
• Geolocation: if the network does not tell us which country you are in, we look up the IP address at ip-api.com.
• Bookkeeping: Fortnox.
• Analytics and advertising on the web, only if you accepted it: Google (Analytics and Tag Manager), Meta and TikTok.
• Analytics and ad measurement in the apps: Google Analytics for Firebase for usage statistics, and in the iPhone and iPad app Meta and TikTok, only if you have allowed tracking.
• Bio Rio AB: your customer account is kept in the same customer register Bio Rio uses for the cinema, so that a Rio 4-Ever membership and its benefits can be linked to your account.

The film companies that own the rights receive sales reports per film, but no data about you. We also disclose data to authorities when the law requires it.

Transfers outside the EU/EEA

Some providers are located outside the EU/EEA, for example in the United States (among them Google, Stripe, Mux, Klaviyo, Vercel, Cloudflare, Meta and TikTok). Such transfers rely on the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep data

• Account, profile and viewing: as long as you have an account.
• Purchases and bookkeeping: seven years after the end of the financial year of the purchase, as required by the Swedish Bookkeeping Act. After you delete your account, purchases are kept without your name and contact details.
• Marketing: until you unsubscribe or delete your account.
• Campaign source: the cookie lasts 30 days.
• Usage statistics in Google Analytics: at most 14 months.
• Apple TV sign-in codes: a few hours.
• Contact with us: while the matter is open and for some time afterwards, in case you get in touch about the same thing again.
• Logs: a limited time, for troubleshooting and security.

Deleting your account

You can delete your account yourself: in the app under Profile > Delete account, and on the web under Profile > Delete account. You can also email support@rio.pictures.

When you delete your account we remove your sign-in, your saved films, where you stopped watching, your newsletter consent and your profile details (name, phone, address). Playback statistics and usage events are unlinked from you. Purchases and rentals are kept without your name and contact details for as long as the Bookkeeping Act requires, seven years. Films you bought can no longer be watched once the account is deleted.

If you are also a Bio Rio customer (a member, or you have bought tickets or other things at the cinema), your name and contact details stay in Bio Rio's customer register, which Bio Rio AB is responsible for. In that case we only remove the link to your rio.watch account and the data above. To be removed from Bio Rio as well, contact Bio Rio at cinema@biorio.se.

A Rio 4-Ever membership is not cancelled automatically when you delete your rio.watch account. The membership is sold by Bio Rio AB and is cancelled with Bio Rio, at biorio.se or via cinema@biorio.se.

Cookies and similar technologies on the web

• Necessary: for sign-in, language choice, checkout and remembering your cookie choice. These do not require consent.
• Campaign source: our own cookie that remembers which ad or link you came from, for 30 days.
• Analytics and marketing: Google Analytics (via Google Tag Manager), Meta Pixel and TikTok Pixel, to understand how the website is used and to measure and target ads. Used only if you clicked Accept in the cookie banner. If you accepted, we also send an encrypted (hashed) purchase event from our server to Meta and TikTok when you pay on the web.
• Vercel Web Analytics: counts page views without cookies and without identifying you.

To change your choice, clear the site data for rio.watch in your browser and the banner will appear again. How the apps measure usage and ads is described under In the apps.

In the apps

The iPhone, iPad and Apple TV apps process the same data as the web (account, purchases and viewing). In addition:

• Usage statistics (all apps): we use Google Analytics for Firebase to see how the apps are used: which screens are opened, which film pages and trailers are viewed, searches, when a film starts and how far it plays, sign-ins and purchases. The events are linked to a random id for the app and, when you are signed in, to your account id, so we can see how the web and the apps are used together. The device's advertising identifier is not used. Purchases are reported by our server only once Apple has confirmed them.
• Turning the statistics off: in the iPhone and iPad app under Profile > Settings > Privacy & tracking, and in the Apple TV app under Profile. Collection then stops and the statistics stored on the device are deleted.
• Ad measurement with Meta and TikTok (iPhone and iPad only, only if you allow it): after you sign in or view a film page, we briefly explain what tracking means, and then iOS asks whether Rio may track you (App Tracking Transparency). We ask once. If you say yes, we start Meta's and TikTok's tools in the app. They record that the app was installed and opened and your App Store purchases, together with the device's advertising identifier, so we can see which of our ads work. If you say no, the tools are not started at all and no data is sent to Meta or TikTok. The app works the same whatever you answer.
• Measurement without identifiers: whatever you choose, iOS can tell an ad network through Apple's SKAdNetwork that an install came from one of its ads. This happens anonymously and with a delay, through Apple, without any data about you.
• Changing your tracking choice: in the iPhone or iPad Settings app under Rio > Allow Tracking, or under Privacy & Security > Tracking. The app shows your choice and links there under Profile > Settings > Privacy & tracking.
• Apple TV: the Apple TV app contains no advertising tools and shares no data with advertising networks.

Your rights

You have the right to:

• know what data we hold about you and get a copy,
• have incorrect data corrected (you can change most of it yourself under Profile),
• have data erased, unless we must keep it by law,
• restrict or object to processing based on legitimate interest,
• receive data you have given us in a machine-readable format,
• withdraw consent at any time.

Email support@rio.pictures and we will help you. If you are not satisfied with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

Changes

We update this policy when our processing changes. The date at the top shows when it was last changed. For significant changes we will let you know in the service or by email.