TVkip
EnglishEN

Draft — have a lawyer review before publishing. Remove this notice once reviewed.

Privacy Policy

TVkip · Last updated: 2026-11-03

TVkip needs no account and shows no ads. TV commands and local casting stay on your home network. Diagnostics, service requests and support emails involve limited personal data, as explained below.

1. Who we are

TVkip is provided by AR AI LABS LTD (“we”, “us”). We are the controller of personal data processed for our own service operations, diagnostics and support. Contact: support@tvkip.com.

TVkip is provided by AR AI LABS LTD, registered in England and Wales, company number 17483830. Registered office: Suite A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE.

2. What we don't collect

  • No account is required, and we do not ask for your name, email address or phone number to use the remote. We receive contact details if you choose to contact support.
  • No location, contacts, photo library contents, browsing history or advertising identifier (IDFA). We don't ask for App Tracking Transparency permission because we don't track you.
  • No list of the TV shows or apps you watch is sent to us.
  • No ads and no advertising SDKs.

Apple app

3. What stays on your device

To control your TV, the app stores on your iPhone or iPad (and, if you use them, your Apple Watch and widgets through an App Group on the same device):

  • The TVs you've added: name, brand, model, network address, room and icon.
  • Pairing keys or tokens your TV gives the app, stored in the iOS Keychain.
  • Your layout, favorites, scenes and settings.
  • Kids Mode rules, parent PIN and each child's daily TV time.

If you turn on iCloud sync (Pro), your TVs (names, rooms, icons and order), favorite apps and scenes are synced through your own iCloud account using Apple's iCloud key-value storage. Pairing keys, Kids Mode PINs and usage are never synced. We can't read your iCloud data. Apple's privacy policy applies to iCloud.

Features that use your device's data on the device only

These features work only on your iPhone or iPad. Nothing they read is sent to us:

  • Photos and videos (casting): the items you pick go directly from your iPhone to your TV over your home network. They never pass through our servers. The same applies to music you cast from your library.
  • Screen mirroring: your screen is encoded on your iPhone and streamed straight to your TV over your home network. Nothing is uploaded.
  • HomeKit (scenes): the app lists and runs the Home scenes you choose. Your home's data stays in Apple's Home framework on your device.
  • Motion sensors (motion remote): read only while you hold the motion button, to move the pointer on your TV.
  • Microphone and speech recognition (voice search): used only while you hold the voice button. Recognition runs on device; the text goes to your TV.

4. Local network use

The app needs iOS's Local Network permission to find and control TVs on your Wi-Fi. It uses:

  • SSDP (a multicast "who's there?" message on your network) and Bonjour to discover TVs and media players. This is why the app requests Apple's multicast networking entitlement.
  • Direct connections to your TV (HTTP, WebSocket or TLS) to send button presses, text, app launches and volume.
  • A small media server on your iPhone that your TV reads the photos, videos, music or screen you cast or mirror from.
  • Wake-on-LAN packets to turn on TVs that support it.

This traffic stays inside your home network. We don't receive it.

5. Optional diagnostics

Diagnostics help us improve reliability. They are enabled by default and can be switched off in Settings. Events describe feature use, pairing results and performance. They use pseudonymous identifiers, so we do not describe them as fully anonymous. Events:

  • contain no name, email, IP address, TV serial number, MAC address, pairing key, Wi-Fi name, error text or what you watch; your region is sent as a country code only, and when you installed the app only as the week;
  • use a random installation identifier that changes every calendar month and a random identifier for each app launch. These can connect events within their lifetime; they are not used for advertising or tracking across other apps or websites;
  • are sent to config.tvkip.com, operated using Cloudflare Workers. Our event store excludes raw IP addresses. Abuse protection uses a daily-changing salted IP hash in short-lived memory. Cloudflare still processes network-request information; see section 6;
  • are stored in Cloudflare Workers Analytics Engine and deleted after 90 days. We may keep monthly totals without any identifiers for longer.

Events from the demo TV are never sent.

Turn them off any time: Settings > Privacy > Share Diagnostics. Turning them off stops sending immediately and deletes the waiting events and the install identifier from your device. Crash reports come only from Apple (App Store Connect), and only if you've allowed "Share With App Developers" in iOS Settings > Privacy & Security > Analytics & Improvements.

If you choose Send Report, the app opens an email for you to review before sending. It includes technical connection and performance details and recent diagnostic activity. The report is designed to omit pairing secrets and direct network identifiers. Your email address, message and any attachments are personal data; review them before sending.

6. Remote configuration

The app requests configuration updates from config.tvkip.com through Cloudflare. The configuration request has no app installation identifier. Cloudflare processes IP addresses and technical request data to deliver and secure the service; infrastructure logs may be retained for those purposes. Retention depends on the applicable service settings and legal requirements, rather than the 90-day event-store limit.

7. TV app catalogues

If you add a Vizio TV, the app downloads the public app catalogue from scfs.vizio.com at most once a day. Vizio receives your IP address and technical request information; its privacy terms apply.

8. Purchases

Apple processes App Store payments. We do not receive your payment-card details. The app uses StoreKit purchase and entitlement information to provide Pro and restore purchases. Apple’s privacy terms apply to its own processing.

9. Support emails

When you contact support, we receive your address, message and attachments. We use them to answer and resolve your request and retain them only while needed for that purpose, follow-up, legal obligations or legal claims. Support mail is forwarded through Spaceship and handled in Google Gmail. Do not send passwords, payment details or unnecessary sensitive information.

Website and service providers

This website uses no advertising trackers or analytics cookies. Hosting and security providers process technical request information such as IP addresses to deliver and protect it. Apple handles App Store payments and optional iCloud services under its own privacy terms.

International processing

Cloudflare, Spaceship, Google, Apple and the services you choose may process information outside the UK or EEA. Where restricted transfers occur, appropriate safeguards are required, such as adequacy decisions or applicable contractual safeguards. Contact support for information about the safeguards relevant to your data. Do not assume that all processing takes place in the UK.

  • Local storage and network use to provide the remote: performance of a contract (Art. 6(1)(b) GDPR).
  • Diagnostics: legitimate interests in service reliability and aggregated statistics (Article 6(1)(f)), subject to applicable electronic-communications rules. You can object by switching diagnostics off.
  • Support and service security: performance of our contract or legitimate interests in answering requests and protecting the service; compliance with legal obligations where applicable.

11. Your rights

Where applicable, you may request access, correction, deletion, restriction or portability of personal data, object to processing, and withdraw consent without affecting earlier lawful processing. Contact support@tvkip.com; we respond within the applicable legal deadlines. You can complain to the UK Information Commissioner’s Office (ICO) or your local supervisory authority. Turning off diagnostics deletes queued events and the installation identifier; it does not erase events already received. Device and iCloud data are managed through the app and your Apple settings.

California residents: we don't sell or share personal information as defined by the CCPA/CPRA.

12. Children

Kids Mode is operated by a parent or guardian. Its rules and usage stay on the parent’s device. Diagnostics are described above and are not used for advertising or profiling children. Do not include children’s personal details in support messages unless necessary.

13. Changes

If we change this policy, we'll update the date above and, for material changes, tell you in the app's release notes before they take effect.

Android & Wear OS — English addendum

The platform-specific Apple descriptions above apply to the Apple app. This addendum describes the Android and paired Wear OS internal-test builds; the operator, support, rights and international-processing provisions above also apply. Last updated: 6 November 2026.

Saved data, backup and exports

TVkip stores saved TVs, settings and pairing credentials on your Android phone. Pairing credentials and purchase-verification receipts are encrypted using Android Keystore. No TVkip account or advertising SDK is required. Android cloud backup is disabled in the current build, and backup and device-transfer rules exclude all app-data domains.

You may export your TV library and scenes through Android’s file picker. Exports include TV names, rooms, local network addresses and scene actions; they exclude pairing credentials, parent profiles and PINs, usage, purchases and app settings. Your chosen file provider may store the export in its cloud service. Import does not connect to a TV or run a scene; imported TVs may need pairing again.

Media, screen sharing and dictation

Only media you choose is copied to TVkip’s private cache and served to the selected TV on your local network. Cached files may remain until you clear the cache, Android reclaims them, or you remove the app’s data or uninstall it. TVkip does not request your entire media library.

Android requests screen-sharing consent for every mirroring session. Shared content can include private information and notifications within the scope you select. The current Android build streams screen images/video without capturing audio or the microphone, holds the stream in memory and does not save a recording. Stop sharing in TVkip or Android’s sharing controls. Protected content may appear black. Local TV control and media streams may use unencrypted HTTP; use a network you trust.

Dictation opens your phone’s speech-recognition service. TVkip requests offline recognition where available, but the service may process audio online under its own terms. TVkip receives the recognized text and sends it to the selected TV; it does not itself record microphone audio.

Wear OS and diagnostics

The paired watch exchanges TV names and identifiers, connection status, TV-app names and identifiers, and remote commands with your Android phone through Google Play services Data Layer. It receives no TV network addresses, pairing credentials, parent PINs, purchase tokens or receipts. The phone must remain available; Android background and network restrictions apply.

The current Android build sends no automatic optional analytics events. If you export a diagnostic file, you review it and choose its destination; this does not send it to us automatically. It includes app and Android versions, CPU architecture, phone manufacturer/model, TV platform, connection state and non-sensitive preferences. It excludes TV names/network addresses, pairing keys, parent PINs, purchase tokens/receipts and network logs. A document provider you choose may use cloud storage. If you send the file to support, the support-email provisions above apply.

Google Play purchases

Android Pro purchases are not enabled in the current internal test. When enabled, Google Play will handle payment-card details. Purchase verification will send the product identifier, Google purchase token and a random installation identifier over HTTPS to TVkip’s verification service. The service will check with Google and return a signed, time-limited entitlement; the phone stores the signed receipt and token hash. The source is designed not to persist raw purchase tokens. The service and its hosting provider also process connection information for delivery and abuse prevention. This flow must be reconciled with the deployed service before purchases are enabled.

14. Contact

AR AI LABS LTD · support@tvkip.com · https://www.tvkip.com/privacy/