Privacy Policy

Effective date: 4 November 2026. Last updated: 4 November 2026.

1. Who we are

Tuned ("Tuned", "we", "us", "our") is an artificial intelligence universal television remote application for iOS and Android. Tuned lets you control televisions and connected devices on your home network, find something to watch, browse listings, set reminders, and ask an assistant in plain language for help.

The data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (GDPR) is:

The developer of Tuned
Email: privacy@tunedremote.download
Website: tunedremote.download

This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have. It applies to the Tuned mobile apps, the Tuned backend service they connect to, and this website.

2. A quick summary

You can start using Tuned without giving us your name or email. Your phone creates a private cryptographic key that acts as your account.
Adding your email is optional and is only used so you can sign in on more than one phone and recover your account.
Your phone talks to the Tuned backend, and directly only to the app stores, our subscription provider, Google's analytics service (once you consent), and, on the free plan, the ad services of Google and Unity. Tuned then uses a small number of trusted companies to answer searches, run the assistant, and send sign-in emails.
Direct remote commands (such as volume, channel, and opening an app) are handled on your device and are not sent to the assistant or to any third party.
The keys and credentials used to pair with and control your televisions stay on your phone. They are never sent to our servers.
The free plan shows ads from Google AdMob and Unity LevelPlay. In the UK, the EEA and Switzerland, Google's consent form asks before your data is used for personalised ads, and on iPhone your advertising identifier is used only if you allow it. Paid plans show no ads.
From version 0.3.42 the app can use Google Firebase Analytics to count app opens and which screens are viewed. It is off until you agree in the same consent form used for ads, and it never includes what you type, search for, or ask.
If the app hits an error it did not expect, it sends us a crash report so we can fix it. Reports describe the error and your phone, never contain the credentials for your televisions, and are deleted after 90 days.
When you contact support, we keep the conversation so we can help you, and we email replies only to an address you have proven is yours.
The app does not use your microphone, camera, contacts, or precise location.
You can delete your account and its data at any time, in the app or by email.

3. Personal data we collect

3.1 Account and device identity

Device key. When you first open Tuned, your phone generates a cryptographic key pair (Ed25519). The private key stays on your phone in the secure keystore. The public key is sent to us and is your account identifier.
Install identifier. A random identifier for the app installation, used to link a device to your account and to help with support. This is not an advertising identifier and is not a hardware identifier.
Device details. The platform (iOS or Android), a device name, and the app version. Each request the app makes to our backend names the app version and platform, and we note which version your household last used and when.
Session tokens. Short-lived access tokens and rotating refresh tokens that keep you signed in. We store only a hashed form of the refresh token.
Email address (optional). If you choose to sign in with email, we store your email address and send you a one-time six-digit code. The code is stored only as a hash and expires after about ten minutes.
Display name (optional). A name you choose for yourself, which defaults to a generic placeholder if you do not set one.

3.2 Household, profiles, and devices

Household settings. A household name, your country or region, your time zone, an area or region you set for local listings, your television platform, any packages you have, the streaming services you use, and your favourite or hidden channels. The region and time zone are first suggested from your device settings and you can change them.
Household members and invites. If you share a household, we store the membership and the invite codes used to join.
Profiles. For each viewer profile: a name, a colour, whether it is a child profile, an optional maturity rating limit, favourite genres, favourite teams, and layout preferences.
Rooms. Room names and volume routing choices.
Controlled devices. For each television or device you add: a name, brand, model, type, the control protocol and transports, its capabilities, and its local network identifiers (IP address and MAC address). These identifiers are stored so the app can find and reconnect to your equipment. The credentials used to pair with and control a device are held only on your phone and are not sent to us.

3.3 Your library and viewing activity

Watchlist, follows, and progress. Titles you save, series or teams you follow, and how far through a title you are.
Feedback. Titles you mark as seen or not interested.
Reminders. Reminders you set, including the target, the time, and any label. Reminders are delivered as local notifications on your phone and are also stored with your account so they can sync across your devices.
Viewing history (with your consent). If you turn on personalisation, the app records what your paired televisions are doing (the channel, app, or title on screen, and when it started and stopped) so that recommendations can reflect what you watch. This is off unless personalisation is enabled, very short sessions are ignored, and turning personalisation off stops the recording and asks our server to forget what was recorded.

3.4 Assistant requests

When you ask the assistant a question in plain language, the text of your request, recent turns of that conversation, and context about your household (such as your region, the services you use, your time zone, quiet hours, whether the profile is a child profile, and a short summary of what the profile tends to watch) are sent to our backend and on to Anthropic's Claude model to produce an answer, or to Google's Gemini model if Claude is unavailable. See section 6.

We do not store the text of your assistant conversations on the Tuned backend. We keep a count of how many requests a household has made, to apply usage limits.

3.5 Subscription status

If you buy a subscription, we store your plan, whether you are in a trial, the renewal period, and usage counters. Payment is handled by the app stores. We do not receive or store your full card number or bank details.

3.6 Technical, crash, and support data

Technical data. We process basic technical information needed to run a networked service, such as IP addresses seen by our servers and standard server logs.
Taps on our short links. When you tap one of our short links (for example from a social profile) we count it by source, phone type, and country, without storing your IP address or anything else that identifies you.
Setup and connection steps. To find out where connecting a television goes wrong, the app reports the steps of setting one up: that setup started, whether the Local Network permission or Wi‑Fi was off, how many televisions of each kind were found, the brand and control protocol of the one chosen, whether it asked for a code, PIN or confirmation, and whether pairing worked or which kind of error stopped it. It also reports whether a title it opened on your television actually opened, and when a television you added drops off the network and comes back. These reports contain the app version and platform and, if you are signed in, are linked to your household and its region. They never contain IP or MAC addresses, network names, or the names of your televisions, and they are deleted after 90 days.
Crash reports. If the app hits an error it did not expect, it sends a report to our backend so we can find and fix the problem. A report contains the type of error, its message, the places in the app's code where it happened (a stack trace), whether the app had to stop, the name of the screen you were on (not what was shown on it), the app version and build, the platform, the operating system version, the device model, the app's language, and the time. This includes crashes in the app's native code and times the app stopped responding, which your phone's system records (on Android, its record of why the app closed; on iPhone, Apple's MetricKit diagnostics) and the app sends the next time it opens, with which part of the app was running and when it happened. If you are signed in, the report is linked to your household. Before a report leaves your phone, the app removes access tokens and the query part of any web address from it, and the credentials used to control your televisions are never included. For a report sent while you are signed out, we keep a keyed one-way code derived from your IP address, not the address itself, so we can count how many phones hit the same error.
Support conversations in the app. When you contact us from the app, we store your messages and our replies, the topic you chose, your household, the app version and platform, your phone's operating system version, model and language, and the make, model and connection type of the televisions you have added, so we can help. We reply in the app. We also email our replies to the email address you signed in with, if you have added one to your account; we never email an address that has not been proven to be yours.
Email to support. When you email our support address, we store your email (the sender's name and address, the subject, and the text) and the results of the checks your email provider's server passed (SPF, DKIM, and DMARC). We use those results to confirm that a follow-up email really came from you before adding it to your conversation, and we reply to the address the email came from.
Other messages. Any information you send us in a compatibility report, or in an email to our other addresses.

3.7 Advertising (free plan)

On the free plan the app shows ads from Google AdMob and Unity LevelPlay, and you can choose to watch a short video ad for an extra assistant request. The Google Mobile Ads software in the app sends information from your device directly to Google so that Google can choose, show, and measure ads and prevent fraud. This includes your IP address, the device model and operating system, the app and its version, your language, how you interact with the ads, and your device's advertising identifier where it is available: on iPhone only if you allow tracking when asked, and on Android unless you have deleted it in your device's settings. How Google uses this information, and your choices, are set out in section 6.3.

The Unity LevelPlay software in the app works the same way. It starts only after the consent step described in section 6.3, and it sends information from your device directly to Unity so that Unity can choose, show, and measure ads and prevent fraud. This includes your IP address, the device model and operating system, the app and its version, your language, how you interact with the ads, a random identifier the app creates for this installation, and your device's advertising identifier where it is available, on the same terms as above. On Android it also uses the app set identifier, which is shared only between apps from the same developer.

When neither network has an ad for a space, the app may show one of Tuned's own promotions there instead, such as an offer of a paid plan. Which promotions to show comes from our backend, and we count how many times each one is shown and tapped as daily totals that do not identify you.

When you watch a video for a request, Google or Unity tells our backend that the video finished, together with a one-time reference our backend created for that video. We keep a record of each video offer and whether it was granted, so we can add the request to your household and apply the daily limit. We do not receive your advertising identifier.

From version 0.3.42 the app includes Google Firebase Analytics, provided by Google LLC, so we can understand which features are used and improve the app. Collection is off until you agree. In the UK, the EEA and Switzerland, you are asked in the same consent form that is used for ads, and nothing is collected unless you agree. Elsewhere, it follows the same consent logic that already applies to ads.

When it is on, the Firebase software in the app sends information from your device directly to Google. It records only when the app is opened and which screens are viewed, identified by the screen's template (for example a screen's route, not its title). It does not include the text of your searches or assistant requests, the names of your televisions, or anything shown on a screen. We do not store your IP address for analytics. The identifiers involved are the Firebase app instance ID, a random identifier for the app installation, and, on iPhone, the advertising identifier only if you have already allowed tracking for ads when Apple asked. Analytics events are kept by Google for 2 months, the Google Analytics default, and then deleted. How Google uses this information is set out in section 6.4.

When you share a link or text to Tuned from another app (for example a TikTok, YouTube, X or Reddit post), the app sends what you shared and your region to our backend so it can work out which film or series the post is about. Our backend reads the post's public page from the platform: its words, who posted it, the platform's automatic captions of what is said in the video when it has them (on TikTok), and, when the words do not settle it, a copy of the post's video (the first 60 seconds are used). TikTok pages are read through a relay we run on Cloudflare. The post's words and video are sent to Google's Gemini model, which may search Google for a line it hears in the video, to name the title. See section 6.

We keep what the model saw in a video, recorded against that video's own identifier on the platform and not against you or your household, for up to 90 days, so that the next person who shares the same video gets an answer without it being watched again. We do not store the link you shared or the post's words against your account. If you save the title to your list, we record that it came from a share and from which platform (for example "From TikTok"), as part of your library (section 3.3).

3.10 Data we do not collect

The app does not access your microphone, camera, contacts, or photos, and it does not collect precise (GPS) location. On some older Android versions the operating system requires a location permission before an app may scan for Bluetooth devices. Where that applies, Tuned requests it only so it can find Bluetooth remotes and accessories, and it is not used to determine where you are. Tuned itself does not build advertising profiles about you. Apart from the Google Mobile Ads and Unity LevelPlay software used for ads on the free plan (sections 3.7 and 6.3), Google Firebase Analytics, which collects data only if you consent (sections 3.8 and 6.4), and Apple's own ad attribution on iPhone (section 3.11), the app contains no third-party analytics or advertising software.

3.11 How you found the app (iPhone)

We advertise Tuned on the App Store with Apple Ads. To learn whether those ads bring people who find the app useful, the iPhone app asks Apple's AdServices framework for a token and sends it to our backend, which asks Apple whether an Apple Ads campaign led to this install. Apple tells us which of our campaigns, ad groups, keywords and ads it was, the country, whether the ad was tapped or seen and when, or that no ad was involved. We keep that answer with your household so we can see whether a campaign's installs go on to set up a TV. We do not keep the token. This does not use your advertising identifier, does not identify your device to us, and does not track you across other companies' apps or websites, so Apple does not ask for tracking permission for it. Android apps do not do this.

4. Why we use your data, and our legal basis

Under the UK GDPR and GDPR we must have a lawful basis for using your personal data. Our bases are set out below.

What we do	Why	Legal basis
Create and secure your account, keep you signed in, sync your data across devices	To provide the app you asked for	Performance of a contract
Store your household, profiles, devices, library, and reminders	Core features of the app	Performance of a contract
Send a sign-in code by email	To let you sign in and recover your account	Performance of a contract
Answer your assistant questions	To provide the assistant feature	Performance of a contract, and our legitimate interest in providing a useful assistant
Find the film or series in a post you share to Tuned, and remember what was seen in a shared video	To provide the share feature, and to answer the next share of the same video without watching it again	Performance of a contract, and our legitimate interest in answering quickly and at a reasonable cost
Answer your support requests, in the app and by email	To help you use the app	Performance of a contract, and our legitimate interest in helping the people who use Tuned
Collect crash reports	To find and fix errors in the app	Legitimate interests
Collect setup and connection steps	To find and fix where connecting a television fails	Legitimate interests
Keep the service secure, prevent abuse, and enforce usage limits	To protect users and the service	Legitimate interests
Record viewing history to personalise recommendations	To improve what we suggest	Consent (the personalisation setting)
Manage subscriptions and trials	To provide and bill paid features	Performance of a contract
Show and measure ads on the free plan	To pay for the free plan	Consent, given in Google's consent form, for personalised ads and for storing or reading information on your device. Legitimate interests for the other purposes listed in that form, which you can object to there
Count app opens and screens viewed with Google Firebase Analytics	To understand which features are used and to improve the app	Consent, given in the consent form also used for ads (in the UK, the EEA and Switzerland), or the equivalent consent logic elsewhere. You can withdraw it at any time (see section 9)
Add a request when you finish a video you chose to watch	To give you what the video was for	Performance of a contract
Keep backups of our database	To recover the service if something goes wrong	Legitimate interests
Respond to legal requests and keep records we are required to keep	Compliance	Legal obligation

Where our basis is legitimate interests, we have considered your rights and only rely on it where our interest is not overridden by them. Where our basis is consent, you can withdraw it at any time (see section 9). Withdrawing consent does not affect processing that already took place.

5. How the app is built (and why that protects you)

Apart from the app stores, our subscription provider (section 6.2), Google's analytics service once you consent (section 6.4), and, on the free plan, the ad services of Google and Unity (section 6.3), your phone communicates only with the Tuned backend. The keys we use to reach third parties (such as the assistant model and the title database) stay on our servers, and your phone never holds them. Direct remote commands are recognised and carried out on your device over your home network, Bluetooth, or infrared, without being sent to the assistant or to any third party. The private key that identifies your account, and the credentials used to pair with your televisions, are held only on your phone.

We share personal data only with the service providers we need to run Tuned, with Google and Unity for the ads on the free plan (section 6.3), and with Google for analytics if you consent (section 6.4). We do not sell your personal data, although some US state laws may treat the advertising described in section 6.3 as a sale or sharing of personal information; that section explains how to opt out.

6.1 Providers that may process your personal data

Anthropic (Claude API). When you use the assistant, your request text and the household context described in section 3.4 are sent to Anthropic's Claude model to generate a reply. See the Anthropic Privacy Policy at https://www.anthropic.com/legal/privacy.
Google (Gemini API). If Claude is unavailable, the same assistant request is sent to Google's Gemini model instead. When you share a post to Tuned, the post's words and video are sent to Gemini, as described in section 3.9. See the Google Privacy Policy at https://policies.google.com/privacy and the Gemini API terms at https://ai.google.dev/gemini-api/terms.
The Movie Database (TMDB). When you search for a title, your search terms and region are sent to our backend, which queries TMDB for matching titles and for where a title can be watched. See the TMDB Privacy Policy at https://www.themoviedb.org/privacy-policy. This product uses the TMDB API but is not endorsed or certified by TMDB.
Wikimedia (Wikidata). To build the links that open a title in the right streaming app, our backend queries Wikidata for service identifiers. See the Wikimedia Privacy Policy at https://foundation.wikimedia.org/wiki/Policy:Privacy_policy.
Cloudflare. We use Cloudflare to send your one-time sign-in code and our replies to support requests by email, to receive email sent to our addresses and check that it came from its sender, to serve this website, to read TikTok posts you share to Tuned (section 3.9), and for network and security services. When you sign in with email or write to support, your email address and the message are processed by Cloudflare to deliver it. See the Cloudflare Privacy Policy at https://www.cloudflare.com/privacypolicy/.
OVHcloud (OVH SAS), on servers in Canada. Our backend and database are hosted by this provider, which processes the data described in this policy on our behalf as part of hosting the service.
Google (Firebase Analytics). If you consent, Google LLC processes app-open and screen-view events as described in sections 3.8 and 6.4. See https://firebase.google.com/support/privacy.
Apple and Google (app stores). The apps are distributed through the Apple App Store and Google Play, and any purchases are processed by them. See the Apple Privacy Policy at https://www.apple.com/legal/privacy/ and the Google Privacy Policy at https://policies.google.com/privacy.

6.2 Subscriptions provider

We use a subscription management provider, RevenueCat, to check the status of your subscription across your devices. RevenueCat receives purchase and subscription information and an app-specific identifier, not your name or card details. See the RevenueCat Privacy Policy at https://www.revenuecat.com/privacy.

6.3 Advertising

The free plan shows ads served by Google AdMob, a service of Google, and Unity LevelPlay, a service of Unity Technologies. Our backend chooses which network the app asks first, and the app asks the other when the first has no ad. Paid plans do not show ads. Ads appear in the app's own layout and are labelled as ads, and you can choose to watch a video ad for an extra assistant request.

Google receives the information described in section 3.7 directly from the Google Mobile Ads software in the app, and uses it as an independent controller under its own privacy policy: to choose, show, and measure ads, to prevent fraud, and, where you have allowed it, to personalise ads. See how Google uses information from sites or apps that use its services at https://policies.google.com/technologies/partner-sites and the Google Privacy Policy at https://policies.google.com/privacy.

Unity receives the information described in section 3.7 directly from the Unity LevelPlay software in the app, and uses it under its own privacy policy for the same purposes. See the Unity Privacy Policy at https://unity.com/legal/game-player-and-app-user-privacy-policy. Unity's software starts only after Google's consent form has been dealt with, and it reads the answers you give there.

We do not give Google or Unity your name, email address, or account details for advertising.

Your choices:

UK, EEA, and Switzerland. Before any ad is requested, Google's consent form asks whether your data may be used for personalised ads and whether information may be stored on or read from your device, and you can decline. You can change your answer at any time in Settings, then Privacy, then Ad choices.
iPhone. Before Apple's tracking question, a short screen explains what it is for. If you say no, your advertising identifier is not used. You can change your answer in the iPhone's Settings, under Privacy & Security, then Tracking.
Android. You can reset or delete your advertising ID in your device's settings.
US states with privacy laws. Where the law gives you the right to opt out of the sale or sharing of personal information, you can opt out in Settings, then Privacy, then Ad choices.

6.4 Analytics

Usage analytics are provided by Google Firebase Analytics, a service of Google LLC. Google receives the information described in section 3.8 directly from the Firebase software in the app, and processes it on our behalf as a processor, to provide us with reports about how the app is used. Collection is off until you consent. See Google's information about Firebase and privacy at https://firebase.google.com/support/privacy and the Google Privacy Policy at https://policies.google.com/privacy.

Your choices: you can withdraw your consent at any time. On the free plan, change your answer in Settings, then Privacy, then Ad choices. If you do not see that option, or you want analytics switched off on any plan, email privacy@tunedremote.download and we will help. On iPhone, you can also stop the advertising identifier being used by changing your answer in the iPhone's Settings, under Privacy & Security, then Tracking.

6.5 Other disclosures

We may disclose personal data if required by law, to respond to a valid legal request, to enforce our terms, or to protect the rights, safety, and property of our users or others. If the business is transferred, personal data may be transferred as part of that transaction, subject to this policy.

6.6 Where our catalogue comes from

To build the shared guide and title catalogue that everyone sees, our backend collects information from public data sources, including TMDB, TVMaze, TheSportsDB, a streaming availability service, public listings feeds in XMLTV format, and public broadcaster and platform listings. This catalogue is general reference data about programmes and channels and does not contain your personal data.

7. International transfers

We are based in the United Kingdom. Our backend and database are hosted in Canada, which the United Kingdom and the European Commission recognise as providing adequate protection for personal data handled by commercial organisations. Some of the providers in section 6 (for example, Google, Anthropic, Unity, TMDB, Cloudflare, and Wikimedia) are based in the United States or operate globally, so your personal data may be transferred outside the United Kingdom and the European Economic Area. Where it is, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or Addendum, the European Commission's Standard Contractual Clauses, or a country that has been formally recognised as providing adequate protection. You can ask us for more detail using the contact in section 12.

8. How long we keep your data

Account and household data (your account, household, profiles, devices, library, reminders, and viewing history) is kept while your account exists, and is deleted when you delete your account or the specific item. Deleting a profile or household also deletes the data attached to it.
Backups. Our database is backed up nightly and each backup is kept for up to 14 days, so data you delete may remain in a backup until that backup expires. Backups are used only to recover the service.
Sign-in codes expire after about ten minutes and are then unusable.
Session refresh tokens last up to about ninety days and are replaced or revoked as you use and sign out of the app.
Assistant conversation text is not stored on the Tuned backend. It is processed by Anthropic, or by Google if Claude is unavailable, to answer your request, and is subject to that provider's own retention for its API.
Video offers (section 3.7) are kept while your account exists.
Advertising data collected by the Google Mobile Ads and Unity LevelPlay software is kept by Google and Unity under their own policies.
Analytics data collected by Google Firebase Analytics (section 3.8) is kept by Google for 2 months, then deleted.
Apple Ads attribution (section 3.11) is kept for 180 days, or until your household is deleted if that is sooner.
Server logs are kept for a limited period for security and troubleshooting.
Crash reports are deleted 90 days after they reach us.
Support conversations, from the app or by email, are kept for as long as we need them to deal with your request and to keep a record of the help we gave. If you delete your account, they are no longer linked to it, and you can ask us to delete them using the contact in section 12.
Emails you send us are kept for as long as we need them to deal with your request.
Counts of Tuned's own promotions are daily totals that do not identify you.
Records we are legally required to keep (such as records relating to purchases and tax) are kept for as long as the law requires.

9. Your choices and rights

You control several things directly in the app:

Personalisation. Turn viewing-history personalisation on or off. Turning it off stops recording and asks our server to forget what was recorded.
Ad choices. Where the law gives you a choice about ads, change it in Settings, then Privacy, then Ad choices, as described in section 6.3. This is currently offered on the free plan.
Analytics consent. Withdraw your consent to usage analytics as described in section 6.4, in the same place on the free plan or by emailing privacy@tunedremote.download.
Notifications and permissions. Control notifications and the local network permission.
Reset this phone. Clear the account and setup from a single phone.
Delete your account. Delete your account and all associated data from Settings, then Account, then Delete account. If you cannot open the app, you can ask us to delete it by email, as described at https://tunedremote.download/delete-account.

Under the UK GDPR and GDPR you also have the right to: access your personal data; ask us to correct it; ask us to delete it; object to or restrict certain processing; withdraw consent; and receive your data in a portable format. To exercise these rights, including to get a copy of your data, use the contact in section 12. We will respond within the time the law allows (usually one month). You will not have to pay a fee in most cases.

You have the right to complain to a data protection authority. In the United Kingdom this is the Information Commissioner's Office (https://ico.org.uk). You may also complain to the authority in your country of residence in the EEA.

10. Security

We take reasonable measures to protect your personal data. Traffic between the app and our backend is encrypted in transit. We do not use passwords: your account is protected by a cryptographic key held in your phone's secure storage. Sign-in codes and refresh tokens are stored only in hashed form. The credentials used to control your televisions never leave your phone. No system can be guaranteed to be perfectly secure, but we work to protect your information and to limit what we collect.

11. Children

Tuned is not directed at children and is not intended for use by children under the age of 13 (or the minimum age of digital consent in your country, which may be higher). We do not knowingly collect personal data from children. The app includes an optional "child profile" feature, which is a content-filtering setting created and managed by the adult account holder for use within a household. It does not create a separate account for a child. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. How to contact us

For any question about this policy or your personal data, or to make a data protection request, contact: