Privacy policy

This policy describes version 2 of Universal TV Remote live for iOS and Android, its hosted onboarding and subscription pages, and its TV browser receiver. The developer listed in your app store provides the service. For questions, use the app support page.

Your TV and local settings

The app discovers and communicates with compatible TVs on your network when you use those features. TV names, network addresses, pairing identities, rooms, favorites and shortcuts are stored on your phone. Secure pairing material uses the phone’s protected storage. Forgetting a TV removes that TV’s saved pairing identity. These settings are not a shared social profile. Keyboard text is sent to the selected TV. Some legacy TV protocols use unencrypted local-network commands; use a trusted private network. Infrared commands, on supported Android hardware, are transmitted locally.

When you choose Open a TV link, the app sends the HTTPS link directly to the selected compatible TV over its encrypted remote-control connection. The app does not save a link history or send that link to our backend or AI provider. The TV and any content app it opens may connect to the linked service under that service’s own privacy terms.

For selected-file playback, you choose the media through the system file picker. The app serves the chosen file to your selected compatible receiver over the local network while playback is active. It does not upload that file to the app backend or AI provider. Stop ends the active transfer; other files on your phone are not made available.

Installation identity, subscriptions and security

Browsing, onboarding and purchase recovery do not require an app login. Online features use a Firebase anonymous authentication identity and device/app integrity checks. Our backend associates an installation identifier and public signing key with that identity. This protects requests and prevents unauthorized use. We keep request-verification records, subscription status, usage totals and security rate-limit records. Network services necessarily receive an IP address and browser and device information, which may also appear in operational security logs.

Apple or Google handles payment. We do not receive your card or bank details. We receive purchase identifiers and subscription status to verify access, restore purchases and detect expiry or revocation. Refresh references needed to recheck a subscription are encrypted on our server. Uninstalling the app does not cancel a store subscription; manage it through your Apple or Google subscription settings.

Optional subscriber accounts

You may create an email/password account to link a legitimate store subscription and recover its access on another device. Firebase Authentication receives your email and password directly; the app backend does not store your email or password. Email verification is required before linking or recovering access. The backend keeps a hashed account identifier, verified purchase ownership and short-lived recovery sessions. It checks the actual store subscription and does not create a subscription from a login alone. Your anonymous device identity, local TVs and native-store purchase/restore remain separate. Account setup, password recovery and deletion remain available when a subscription is inactive.

AI shortcuts and optional speech

When you press Preview actions, your request text, the TV’s supported command names and its installed TV-app identifiers/names are sent through our backend to OpenRouter and the selected model provider. These services generate a bounded action plan. Our AI requests require zero-data-retention routing and prohibit provider training/data collection through the provider routing settings. Our application database does not save the original prompt, completion or microphone recording. It retains usage/reservation outcomes for cost and abuse controls. Avoid including personal or sensitive information in a request.

Speaking is optional. After your explicit microphone/speech consent, your phone’s speech recognition service converts voice to text. That platform service may process audio online under its own privacy terms. The app does not keep an audio recording. You can edit the recognized text, type instead, stop listening or leave the screen. Speech never automatically sends the text to the AI planner or executes a TV action.

If you choose Report suggestion, we store the displayed suggestion, your optional reason and installation identity so the developer can review the problem. This report does not include the original AI request or spoken audio. Reports older than 90 days are removed when reports are submitted or the developer review queue is accessed. Please avoid personal information in reports. Support emails contain whatever information you choose to send.

Live screen sharing

Screen capture starts only with the operating system’s consent. Your selected receiver can see the captured screen, including notifications or personal content that you display. Close sensitive content before starting. Android 10 and later can optionally share audio from apps that permit playback capture. Protected content and apps that refuse capture may be silent or blank. The app does not capture microphone audio for screen sharing.

Video and any enabled playback audio use encrypted WebRTC transport to the paired receiver. They are not recorded or stored by our application backend. Temporary signaling records include pairing/session identifiers, network connection information, connection status and frame counts. Signaling sessions expire after inactivity; expired records are removed when new receiver sessions are created. Stop clears active signaling content and ends capture. Session-limited authorization renews during sharing to enforce current subscription access.

Optional store rating invitation

On a new app launch, the app checks locally whether WhatsApp is installed to decide whether to show an optional rating invitation. This check does not open WhatsApp, access its content, or send an installed-app list to our service. Choosing No or dismissing the invitation leaves the app unchanged. Choosing Yes requests the operating system's store review interface; Apple or Google decides whether that interface appears and handles any review you submit.

Analytics and crash reports

Firebase Analytics and Crashlytics help us understand app use and diagnose failures. They may process installation/device identifiers, device and operating-system characteristics, app interactions, crash details and performance diagnostics. Analytics can infer an approximate region from network information. The app does not request precise GPS location for analytics. Version 2 disables Android Advertising ID collection and uses iOS analytics without advertising identifier support. Analytics signals are ineligible for personalized advertising. We do not link app data with other companies’ data for advertising, share it with data brokers, or sell personal information. We do not use your AI requests, screen video or captured audio for advertising.

Service providers and transfers

We use Google Firebase for authentication, integrity, analytics and diagnostics; Apple and Google for subscription verification; OpenRouter and its selected model providers for AI; and infrastructure providers for hosting, encrypted transport and delivery. Data may be processed in countries other than yours. Providers receive the information needed for the functions described above. A TV, browser receiver, speech service or content app that you choose may have its own privacy practices.

Retention, choices and deletion

Local settings remain until you change them, forget a device, clear app data or uninstall, subject to your operating system’s storage behavior. Service identity, subscription, security and usage records are retained as needed to operate and secure the service and address payment or support issues. Firebase analytics/crash data follows the configured Firebase service retention settings. We do not promise that uninstalling deletes server records or cancels a purchase.

To delete your optional subscriber account, open Settings → Subscriber account → Delete account, or use the account deletion page without reinstalling the app. After confirming your identity, deletion removes the Firebase sign-in and app recovery sessions. It ends recovered access on other devices as their short verification leases expire. Minimal hashed purchase-owner and retired-session records remain to prevent subscription theft and replay; these records cannot restore a deleted account. Deletion is immediate when the provider and backend confirm it. An interrupted operation reports that deletion is incomplete and can be retried; it never reports success merely because the screen closed.

The app also provides Settings → Anonymous account & cloud data → Delete anonymous account. This removes its anonymous Firebase identity, cloud installation records, online sharing sessions, AI usage/reservation records and safety reports, then retires its device signing key. Minimal hashed owner and retired-install records remain for fraud and replay prevention. Deleting the anonymous account signs this phone out of optional subscriber recovery but does not delete that separate subscriber account. Online features create a new anonymous account if used again.

Both deletion paths preserve local TVs, pairing, shortcuts and preferences. A store subscription continues until cancelled through Apple subscription settings or Google subscription settings. You may delete immediately without waiting for its expiry. Neither account deletion nor uninstalling the app cancels billing. Store purchase/restore remains available independently.

You can decline microphone and capture permission, stop an active session, use typed requests and control what appears on your shared screen. To request access, correction or deletion of information associated with your use, contact us through the app support page. We may need information that verifies your relationship to the installation or purchase; do not send passwords, payment-card details or private keys. Some payment/security records may need to be retained for legitimate operational or legal purposes. This app is intended for adult users and is not directed to children.

Changes and contact

Material changes will be reflected in this policy and, where appropriate, in the app. For privacy questions or support, use the app support page.