Icareus Telly Privacy Policy

Effective date: 1.10.2026

1. Scope and Who We Are

This Privacy Policy explains how Icareus Ltd (“Icareus”, “we”, “us” or “our”), the developer and publisher of the Icareus Telly application (the “application”), collects, uses, shares, protects, retains and deletes information in connection with the application.

Icareus Telly is a Smart TV application that is part of the Icareus Video Cloud service. It is available for Android TV and Google TV devices through Google Play, as well as for Samsung Smart TV devices. The application is intended for enterprise, public sector and other organizational customers of Icareus Video Cloud for distributing and displaying video, communications and digital signage content on televisions and other display screens.

This Privacy Policy applies to the application. Processing of personal data in the wider Icareus Video Cloud service, such as administrator accounts in the Icareus Video Cloud management portal, is described in the Icareus Video Cloud Privacy Policy, available at Icareus Video Cloud Privacy Policy.

2. Information We Collect

Icareus Telly is typically used on display devices that run unattended in offices, lobbies, public spaces and similar locations. The application does not ask viewers to create an account, sign in or enter any personal information. Each display device is linked to a customer organization’s Icareus Video Cloud account by that organization’s administrator.

When the application is in use, it automatically collects the following information:

Device and application information: a device identifier generated by the application or the service to register the display device to the customer’s account, device model, operating system version and application version.
Network information: IP address, network and connection information, such as connection type and connection status.
Log and error information: error messages, crash information and related timestamps.
Performance and usage information: application health and availability information, and playback quality metrics.
Content playback and display activity: content identifiers, playback timestamps, display duration and digital signage delivery metrics.

The application does not collect names, email addresses, telephone numbers, payment information, contacts, photos or other files stored on the device, audio or camera data, or precise location data. The application does not use the Android Advertising ID and does not display personalized advertising.

The content shown by the application is selected and published by the customer organization. If a customer organization publishes content that contains personal data, the customer organization is responsible for that content and for its lawful processing.

3. How We Use Information

We use the information described above only for the following purposes:

Providing and maintaining the service
Registering display devices and delivering content to them
Providing customer organizations with device status and content delivery reports
Monitoring performance and availability
Diagnosing and resolving technical issues
Ensuring security and preventing misuse
Improving service quality and user experience
Complying with legal obligations

We do not use information collected through the application for advertising, for building profiles of individuals or for any purpose not described in this Privacy Policy.

Where the EU General Data Protection Regulation (GDPR) applies, we process personal data on the basis of the performance of our contract with the customer organization, our legitimate interests in operating, securing and improving the service, and compliance with our legal obligations. When we process personal data on behalf of a customer organization, we do so in accordance with the customer’s documented instructions and our data processing agreement with the customer.

4. Data Sharing and Service Providers

We share information only with the following parties and only to the extent necessary for the purposes described in this Privacy Policy:

The customer organization: the organization that has deployed the display device can view device status, playback and content delivery information through the Icareus Video Cloud management portal.
Service providers: providers of hosting and cloud infrastructure, content delivery networks (CDN), streaming services, analytics, monitoring and technical support. Service providers process information only on our behalf, under written agreements that require them to protect the information and to use it only for providing their services to us.
Authorities: public authorities, courts or other parties where we are required to do so by applicable law or a binding order, or where necessary to protect our rights, the security of the service or the safety of others.
Business transfers: a buyer or successor in connection with a merger, acquisition or sale of all or part of our business, in which case the information remains subject to this Privacy Policy.

For customers using Icareus Video Cloud services, the customer organization typically acts as the data controller and Icareus Ltd acts as the data processor. Icareus Ltd may process technical operation, security, monitoring, analytics and support-related information as a controller where necessary for operating and securing the service.

We do not sell information to third parties, and we do not share information with third parties for their own advertising or marketing purposes. A list of our sub-processors is available upon request.

5. Data Security

We handle information securely and implement appropriate technical and organizational measures to protect it against unauthorized access, disclosure, alteration, loss or destruction. These measures include:

encryption of all data transmitted between the application and the Icareus Video Cloud service using HTTPS/TLS
access controls that limit access to information to authorized personnel who need it to perform their duties
storage of information in access-controlled data centres operated by our hosting providers
monitoring and logging of our systems to detect and prevent misuse and security incidents
confidentiality obligations for our personnel and service providers
regular maintenance and security updates of the application and the service

6. Data Retention and Deletion

We retain information only for as long as necessary for the purposes described in this Privacy Policy, or for longer where required by applicable law. In particular:

Technical logs, error information, monitoring and diagnostics information are retained for up to 3 months.
Content playback and display activity information is retained for the duration of the customer agreement, or for a shorter period where configured by the customer organization.
Support-related information is retained for as long as necessary to resolve the support request and for a limited period thereafter.
Administrative user activity logs may be retained for up to two (2) years.

When a customer agreement ends, the customer organization’s data is deleted within 7 days, unless applicable law requires us to retain it for longer. Information stored locally on a display device, such as cached content and settings, is deleted when the application is uninstalled or its data is cleared through the device settings.

Individuals and customer organizations can request the deletion of their data at any time by contacting us at [email protected]. We will respond to deletion requests without undue delay and, where the GDPR applies, within one month. If a request concerns data that we process on behalf of a customer organization, we will forward the request to that organization or assist it in responding.

7. International Transfers

For customers located within the European Union, personal data is generally stored and processed within the European Union.

Where transfers outside the EU/EEA are required, appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, are implemented in accordance with applicable data protection legislation, including the GDPR.

8. Your Privacy Rights

Depending on applicable law, individuals may have the right to:

Access their personal data
Correct inaccurate information
Request deletion of data
Restrict or object to processing
Receive their personal data in a portable format
Lodge a complaint with a supervisory authority

Requests should be submitted to [email protected]. If your request concerns data that we process on behalf of a customer organization, we may refer you to that organization or assist it in responding to your request.

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (www.tietosuoja.fi). You may also contact the supervisory authority in your country of residence or work.

9. Children

Icareus Telly is a business application intended for organizations using Icareus Video Cloud services and is not directed at children. The application does not knowingly collect personal information from children. If we become aware that personal information of a child has been collected through the application, we will delete it.

10. Third-Party Services

The application is distributed through third-party app stores, such as Google Play, and runs on devices and operating systems provided by third parties. Third-party services available through or used in connection with the application may have their own privacy policies and terms, and we are not responsible for their practices. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available at the same address, and the effective date at the top of this Privacy Policy indicates when it was last updated. We will notify customer organizations of material changes through the Icareus Video Cloud service, the application or other appropriate channels before the changes take effect.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, or wish to exercise your rights, please contact us:

Icareus Ltd
Itälahdenkatu 18 A
FI-00210 Helsinki, Finland

Email: [email protected]