Privacy Policy

Effective date: 25 September 2026. Last updated: 25 September 2026.

1. Who we are

Tuned ("Tuned", "we", "us", "our") is an artificial intelligence universal television remote application for iOS and Android. Tuned lets you control televisions and connected devices on your home network, find something to watch, browse listings, set reminders, and ask an assistant in plain language for help.

The data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (GDPR) is:

The developer of Tuned
Email: privacy@tunedremote.download
Website: tunedremote.download

This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have. It applies to the Tuned mobile apps, the Tuned backend service they connect to, and this website.

2. A quick summary

You can start using Tuned without giving us your name or email. Your phone creates a private cryptographic key that acts as your account.
Adding your email is optional and is only used so you can sign in on more than one phone and recover your account.
Your phone talks only to the Tuned backend. Tuned then uses a small number of trusted companies to answer searches, run the assistant, and send sign-in emails.
Direct remote commands (such as volume, channel, and opening an app) are handled on your device and are not sent to the assistant or to any third party.
The keys and credentials used to pair with and control your televisions stay on your phone. They are never sent to our servers.
We do not use your data for third-party advertising profiling, and the app does not use your microphone, camera, contacts, or precise location.
You can delete your account and its data at any time, in the app or by email.

3. Personal data we collect

3.1 Account and device identity

Device key. When you first open Tuned, your phone generates a cryptographic key pair (Ed25519). The private key stays on your phone in the secure keystore. The public key is sent to us and is your account identifier.
Install identifier. A random identifier for the app installation, used to link a device to your account and to help with support. This is not an advertising identifier and is not a hardware identifier.
Device details. The platform (iOS or Android), a device name, and the app version.
Session tokens. Short-lived access tokens and rotating refresh tokens that keep you signed in. We store only a hashed form of the refresh token.
Email address (optional). If you choose to sign in with email, we store your email address and send you a one-time six-digit code. The code is stored only as a hash and expires after about ten minutes.
Display name (optional). A name you choose for yourself, which defaults to a generic placeholder if you do not set one.

3.2 Household, profiles, and devices

Household settings. A household name, your country or region, your time zone, an area or region you set for local listings, your television platform, any packages you have, the streaming services you use, and your favourite or hidden channels. The region and time zone are first suggested from your device settings and you can change them.
Household members and invites. If you share a household, we store the membership and the invite codes used to join.
Profiles. For each viewer profile: a name, a colour, whether it is a child profile, an optional maturity rating limit, favourite genres, favourite teams, and layout preferences.
Rooms. Room names and volume routing choices.
Controlled devices. For each television or device you add: a name, brand, model, type, the control protocol and transports, its capabilities, and its local network identifiers (IP address and MAC address). These identifiers are stored so the app can find and reconnect to your equipment. The credentials used to pair with and control a device are held only on your phone and are not sent to us.

3.3 Your library and viewing activity

Watchlist, follows, and progress. Titles you save, series or teams you follow, and how far through a title you are.
Feedback. Titles you mark as seen or not interested.
Reminders. Reminders you set, including the target, the time, and any label. Reminders are delivered as local notifications on your phone and are also stored with your account so they can sync across your devices.
Viewing history (with your consent). If you turn on personalisation, the app records what your paired televisions are doing (the channel, app, or title on screen, and when it started and stopped) so that recommendations can reflect what you watch. This is off unless personalisation is enabled, very short sessions are ignored, and turning personalisation off stops the recording and asks our server to forget what was recorded.

3.4 Assistant requests

When you ask the assistant a question in plain language, the text of your request, recent turns of that conversation, and context about your household (such as your region, the services you use, your time zone, quiet hours, whether the profile is a child profile, and a short summary of what the profile tends to watch) are sent to our backend and on to Google's Gemini model to produce an answer. See section 6.

We do not store the text of your assistant conversations on the Tuned backend. We keep a count of how many requests a household has made, to apply usage limits.

3.5 Subscription status

If you buy a subscription, we store your plan, whether you are in a trial, the renewal period, and usage counters. Payment is handled by the app stores. We do not receive or store your full card number or bank details.

3.6 Technical and support data

We process basic technical information needed to run a networked service, such as IP addresses seen by our servers and standard server logs, and any information you send us in a support or compatibility report, or in an email to us.

3.7 Data we do not collect

The app does not access your microphone, camera, contacts, or photos, and it does not collect precise (GPS) location. On some older Android versions the operating system requires a location permission before an app may scan for Bluetooth devices. Where that applies, Tuned requests it only so it can find Bluetooth remotes and accessories, and it is not used to determine where you are. The app does not build advertising profiles about you, and it contains no third-party analytics or advertising software.

4. Why we use your data, and our legal basis

Under the UK GDPR and GDPR we must have a lawful basis for using your personal data. Our bases are set out below.

What we do	Why	Legal basis
Create and secure your account, keep you signed in, sync your data across devices	To provide the app you asked for	Performance of a contract
Store your household, profiles, devices, library, and reminders	Core features of the app	Performance of a contract
Send a sign-in code by email	To let you sign in and recover your account	Performance of a contract
Answer your assistant questions	To provide the assistant feature	Performance of a contract, and our legitimate interest in providing a useful assistant
Keep the service secure, prevent abuse, and enforce usage limits	To protect users and the service	Legitimate interests
Record viewing history to personalise recommendations	To improve what we suggest	Consent (the personalisation setting)
Manage subscriptions and trials	To provide and bill paid features	Performance of a contract
Keep backups of our database	To recover the service if something goes wrong	Legitimate interests
Respond to legal requests and keep records we are required to keep	Compliance	Legal obligation

Where our basis is legitimate interests, we have considered your rights and only rely on it where our interest is not overridden by them. Where our basis is consent, you can withdraw it at any time (see section 9). Withdrawing consent does not affect processing that already took place.

5. How the app is built (and why that protects you)

Your phone communicates only with the Tuned backend. The keys we use to reach third parties (such as the assistant model and the title database) stay on our servers, and your phone never holds them. Direct remote commands are recognised and carried out on your device over your home network, Bluetooth, or infrared, without being sent to the assistant or to any third party. The private key that identifies your account, and the credentials used to pair with your televisions, are held only on your phone.

We share personal data only with the service providers we need to run Tuned. We do not sell your personal data.

6.1 Providers that may process your personal data

Google (Gemini API). When you use the assistant, your request text and the household context described in section 3.4 are sent to Google's Gemini model to generate a reply. See the Google Privacy Policy at https://policies.google.com/privacy and the Gemini API terms at https://ai.google.dev/gemini-api/terms.
The Movie Database (TMDB). When you search for a title, your search terms and region are sent to our backend, which queries TMDB for matching titles and for where a title can be watched. See the TMDB Privacy Policy at https://www.themoviedb.org/privacy-policy. This product uses the TMDB API but is not endorsed or certified by TMDB.
Wikimedia (Wikidata). To build the links that open a title in the right streaming app, our backend queries Wikidata for service identifiers. See the Wikimedia Privacy Policy at https://foundation.wikimedia.org/wiki/Policy:Privacy_policy.
Cloudflare. We use Cloudflare to send your one-time sign-in code by email, to deliver email sent to our addresses, to serve this website, and for network and security services. When you sign in with email, your email address and the code are processed by Cloudflare to deliver the message. See the Cloudflare Privacy Policy at https://www.cloudflare.com/privacypolicy/.
OVHcloud (OVH SAS), on servers in Canada. Our backend and database are hosted by this provider, which processes the data described in this policy on our behalf as part of hosting the service.
Apple and Google (app stores). The apps are distributed through the Apple App Store and Google Play, and any purchases are processed by them. See the Apple Privacy Policy at https://www.apple.com/legal/privacy/ and the Google Privacy Policy at https://policies.google.com/privacy.

6.2 Subscriptions provider

We use a subscription management provider, RevenueCat, to check the status of your subscription across your devices. RevenueCat receives purchase and subscription information and an app-specific identifier, not your name or card details. See the RevenueCat Privacy Policy at https://www.revenuecat.com/privacy.

6.3 Advertising

The free version of Tuned may show promotions. We do not currently use a third-party advertising network, and we do not share your personal data with anyone for advertising. If we introduce a third-party advertising network, we will update this policy before we do. Paid subscribers do not see promotions of this kind.

6.4 Other disclosures

We may disclose personal data if required by law, to respond to a valid legal request, to enforce our terms, or to protect the rights, safety, and property of our users or others. If the business is transferred, personal data may be transferred as part of that transaction, subject to this policy.

6.5 Where our catalogue comes from

To build the shared guide and title catalogue that everyone sees, our backend collects information from public data sources, including TMDB, TVMaze, TheSportsDB, a streaming availability service, public listings feeds in XMLTV format, and public broadcaster and platform listings. This catalogue is general reference data about programmes and channels and does not contain your personal data.

7. International transfers

We are based in the United Kingdom. Our backend and database are hosted in Canada, which the United Kingdom and the European Commission recognise as providing adequate protection for personal data handled by commercial organisations. Some of the providers in section 6 (for example, Google, TMDB, Cloudflare, and Wikimedia) are based in the United States or operate globally, so your personal data may be transferred outside the United Kingdom and the European Economic Area. Where it is, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or Addendum, the European Commission's Standard Contractual Clauses, or a country that has been formally recognised as providing adequate protection. You can ask us for more detail using the contact in section 12.

8. How long we keep your data

Account and household data (your account, household, profiles, devices, library, reminders, and viewing history) is kept while your account exists, and is deleted when you delete your account or the specific item. Deleting a profile or household also deletes the data attached to it.
Backups. Our database is backed up nightly and each backup is kept for up to 14 days, so data you delete may remain in a backup until that backup expires. Backups are used only to recover the service.
Sign-in codes expire after about ten minutes and are then unusable.
Session refresh tokens last up to about ninety days and are replaced or revoked as you use and sign out of the app.
Assistant conversation text is not stored on the Tuned backend. It is processed by Google to answer your request and is subject to Google's own retention for the Gemini API.
Server logs are kept for a limited period for security and troubleshooting.
Emails you send us are kept for as long as we need them to deal with your request.
Records we are legally required to keep (such as records relating to purchases and tax) are kept for as long as the law requires.

9. Your choices and rights

You control several things directly in the app:

Personalisation. Turn viewing-history personalisation on or off. Turning it off stops recording and asks our server to forget what was recorded.
Notifications and permissions. Control notifications and the local network permission.
Reset this phone. Clear the account and setup from a single phone.
Delete your account. Delete your account and all associated data from Settings, then Account, then Delete account. If you cannot open the app, you can ask us to delete it by email, as described at https://tunedremote.download/delete-account.

Under the UK GDPR and GDPR you also have the right to: access your personal data; ask us to correct it; ask us to delete it; object to or restrict certain processing; withdraw consent; and receive your data in a portable format. To exercise these rights, including to get a copy of your data, use the contact in section 12. We will respond within the time the law allows (usually one month). You will not have to pay a fee in most cases.

You have the right to complain to a data protection authority. In the United Kingdom this is the Information Commissioner's Office (https://ico.org.uk). You may also complain to the authority in your country of residence in the EEA.

10. Security

We take reasonable measures to protect your personal data. Traffic between the app and our backend is encrypted in transit. We do not use passwords: your account is protected by a cryptographic key held in your phone's secure storage. Sign-in codes and refresh tokens are stored only in hashed form. The credentials used to control your televisions never leave your phone. No system can be guaranteed to be perfectly secure, but we work to protect your information and to limit what we collect.

11. Children

Tuned is not directed at children and is not intended for use by children under the age of 13 (or the minimum age of digital consent in your country, which may be higher). We do not knowingly collect personal data from children. The app includes an optional "child profile" feature, which is a content-filtering setting created and managed by the adult account holder for use within a household. It does not create a separate account for a child. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. How to contact us

For any question about this policy or your personal data, or to make a data protection request, contact: