Effective date and last updated: August 16, 2026
This privacy policy applies to the Android mobile application ControlTV: Smart TV Remote (identified by package name com.umbrabyte.controltv), developed and published by Umbrabyte Apps. It complements the general Umbrabyte Privacy Policy and serves as the official privacy policy linked within the app and its Google Play Store listing.
Plain language summary: ControlTV turns your phone into an intuitive, zero-ad universal remote control for compatible Smart TV, Android TV, and Google TV devices over your local Wi-Fi network. All TV discovery via DNS-SD (mDNS), saved TV connection profiles, remote navigation commands, and custom preferences are processed and stored strictly locally on your device and local Wi-Fi subnet. Umbrabyte operates no cloud servers to intercept or monitor your TV usage, requires no user account, includes zero advertisements, and never sells or rents personal data. Data only leaves your local network when Google Play processes an optional PRO purchase or when you contact direct support.
This summary does not replace the detailed terms set forth below.
1. Scope and key facts
ControlTV: Smart TV Remote is a modern universal remote control utility designed for Android TV, Google TV, and compatible smart displays connected to the same local Wi-Fi network. It provides D-pad navigation, touchpad gestures, remote typing, system voice search, local photo casting, and direct access to Android screen mirroring.
- No account or registration required: The application does not ask you to create a user account, profile, or provide personal credentials.
- 100% On-Device & Local Network Processing: Device discovery via DNS-SD (mDNS, UDP 5353) and remote command delivery via secure TLS sockets (TCP 6466/6467) operate entirely within your local Wi-Fi subnet.
- No Umbrabyte remote control servers: Umbrabyte does not own or operate intermediate proxy servers or telemetry databases. Your keystrokes, remote clicks, and saved TVs are never sent to external servers.
- Zero ads or cross-app tracking: The application contains no advertising SDKs or tracking libraries. The app manifest explicitly strips (
tools:node="remove") permissions tied to advertising identifiers (AD_IDandAdServices). - No data sales: Umbrabyte does not sell, rent, or trade user personal information under any circumstances.
- No automated profiling: We do not perform user profiling, viewing habits analysis, or automated decision-making.
- Platform integration: Optional PRO purchases (
controltv_pro_lifetimepermanent single purchase) are handled via official Google Play Billing APIs. In-App Update checks use official Google Play Core APIs.
2. Data Controller
The developer and data controller for any data received directly by Umbrabyte (such as customer support correspondence) is:
- Full Name: Cristian Donet Segura
- Studio Name: Umbrabyte Apps
- Business Address: Calle Pintor Camarón, nº 24, 12560 Benicasim, Castellón, Spain
- Tax ID (NIF): 20468489F
- D-U-N-S® Number: 374071851
- Privacy & Support Contact: support@umbrabyte.app
Platform services such as Google Play Store act as separate independent controllers for data processed under their own privacy policies.
3. Data processed by the application
3.1 Information stored and processed on device
The app processes the following information solely within the private local storage of the app or system locations selected by you:
| Data Category | Information Examples | Storage Location |
|---|---|---|
| Saved Smart TVs | TV name, model/brand, local IP address, and protocol version | Private local Room database (AppDatabase) on device |
| App preferences & settings | Haptic feedback, dark theme configuration, and onboarding completion status | Private local preferences (DataStore) on device |
| Daily usage quota tracking | Counter managing the 15 daily free remote actions | Private local preferences (DataStore) on device |
| Purchase status & PRO entitlement | Cached local PRO entitlement status (controltv_pro_lifetime) |
Private local preferences (DataStore) on device |
3.2 Permissions & device access
Android permissions are requested transparently only when initiating a feature requiring them:
| Permission / Capability | Purpose & Usage | Necessity |
|---|---|---|
Local Network (android.permission.ACCESS_LOCAL_NETWORK) |
Discovers compatible TVs on the local Wi-Fi subnet via DNS-SD (mDNS, UDP 5353) and establishes direct TLS sockets (TCP 6466/6467) | Required for TV discovery and remote pairing |
Internet (android.permission.INTERNET, ACCESS_NETWORK_STATE) |
Used for local Wi-Fi socket communication, Google Play Billing receipt validation, and Play Core update checks | Required for networking and platform billing |
Media Projection / Foreground Service (CastFGService) |
Enables local screen casting when explicitly initiated by the user. Screen frames remain strictly within the active local session | Required only during active screen mirroring sessions |
Billing (com.android.vending.BILLING) |
Connects to Google Play Billing API for optional one-time PRO purchase | Used when purchasing or restoring PRO |
The application does NOT request GPS location, contacts list, call logs, SMS, microphone recordings, health data, advertising ID (GAID), unselected photo gallery files, or biometric data.
3.3 User-initiated sharing and local media casting
When using photo casting, selected image URIs from the Android Photo Picker are streamed directly to your paired local TV. When using screen mirroring, Android’s official system casting dialog handles the projection. No media content is stored or transmitted outside your local area network.
3.4 Data Umbrabyte does NOT receive
During standard use of ControlTV, Umbrabyte does not receive or store on servers:
- Keystrokes, search queries, or passwords typed on your TV.
- TV channels watched, volume levels, or device names.
- Photos cast or screen mirroring video streams.
- Wi-Fi credentials or router configuration.
4. External services & data communications
4.1 Android TV Remote Protocol (Local TLS)
Communication with Android TV and Google TV devices uses standard secure TLS connections over your private Wi-Fi network. No intermediary server is used.
4.2 Distribution and payments via Google Play Billing
Optional lifetime PRO access (controltv_pro_lifetime) is processed via official Google Play Billing. Google handles your payment methods, transaction receipts, and billing details. Umbrabyte never receives or stores credit card numbers or financial details.
4.3 Update checks via Google Play Core
The app uses official Google Play Core APIs to check if Google Play has published a newer version and offer seamless updates.
5. Purposes and legal bases
Under the EU General Data Protection Regulation (GDPR), processing operations rely on:
| Activity / Feature | Purpose | Legal Basis |
|---|---|---|
| TV remote control & local connection | Provide requested app functionality | Contract performance (Art. 6.1.b GDPR) |
| Local network discovery & casting | Allow discovery of TVs and media casting | Explicit user consent via permission prompt (Art. 6.1.a GDPR) |
| PRO purchases & license management | Fulfill orders & statutory accounting | Contract performance (Art. 6.1.b) & Legal compliance (Art. 6.1.c GDPR) |
| Update checks & app stability | Keep app secure and updated | Legitimate interest (Art. 6.1.f GDPR) |
6. Data retention, deletion & management
| Data Type | Retention Period | Deletion Method |
|---|---|---|
| Saved TVs & local preferences | As long as app is installed or until manually cleared | Clear app storage in Android Settings or uninstall app |
| Local PRO purchase status | Duration of app installation; restorable via Google Play | Automatically synced with Google Play account |
| Transaction records in Play Console | Statutory tax and accounting retention periods | Retained by Google and Umbrabyte for legal compliance |
| Support email correspondence | Up to 3 years max to resolve inquiries | Periodic inbox deletion |
7. Data security
App data is isolated within Android’s private app sandbox. Remote control communications with paired TVs use encrypted TLS sockets on your local network. Transactions and update checks strictly use encrypted HTTPS connections.
8. Your rights worldwide
You hold privacy rights including access, correction, deletion, and objection under GDPR (EEA/Spain), UK GDPR, CCPA/CPRA (California/US), LGPD (Brazil), PIPEDA (Canada), and Privacy Act (Australia). Contact support@umbrabyte.app to submit requests.
9. Children’s privacy
ControlTV is a remote control utility intended for general use. We do not knowingly collect personal data from children under 13 (or local statutory age).
10. Changes to this privacy policy
We will publish any policy updates at this web address, updating the effective date above.
11. Contact information
Cristian Donet Segura — Umbrabyte Apps
Calle Pintor Camarón, nº 24
12560 Benicasim, Castellón, Spain
Email: support@umbrabyte.app
Website: https://umbrabyte.app