Privacy Policy: "שלט לטלוויזיה" (TV Remote)
This policy explains what information the "שלט לטלוויזיה" app for iPhone and Android phones ("the App") collects, why, who receives it, how long it is kept, and your rights. The App has no user accounts and does not ask for your name, email, phone number, or location. The policy was written for the iPhone; on Android, wherever it says "iPhone" it means your phone, and the differences are set out in section 2 ("The App on Android") and section 3.
1. Summary
- TV control happens only on your home network, directly between your iPhone and your TV. Your TV's name, model, IP address and pairing key stay on your iPhone.
- The App never collects the PIN or pairing code shown on your TV.
- Unless you turn it off, the App sends usage statistics and error/crash reports (no name, no contact details, no screen recordings) to our analytics provider, PostHog, on servers in the United States, to help us fix setup problems. We tell you this on the first screen, and you can turn it off at any time in Settings → Legal & Privacy.
- To receive fixes, the App checks for updates with Expo's EAS Update service, which receives your device's IP address and a random update ID. This happens whether or not usage data sharing is on, and is used only to deliver updates (section 3a).
- Payments are handled entirely by Apple (on iPhone) or Google (on Android, through Google Play). We never see your card details, and we have no access to your Apple or Google account.
- We do not sell your data, do not use it for advertising, and do not track you across other companies' apps or websites.
2. Information that stays on your device
| Information | Why | Where it is kept |
|---|---|---|
| Local network scan results (TVs found on your Wi‑Fi: name, model, IP address) | To find and connect to your TV | On your iPhone only; not sent to us |
| Pairing key / token issued by your TV after you approve the connection | So you don't need to approve again every time | On your iPhone only, in the iOS Keychain |
| The App's own pairing certificate (Google TV / Android TV only): a random key and a certificate named "TV Remote IL" that the App creates on your iPhone the first time you connect to a Google TV or Android TV. It contains no personal information | After you enter the code shown on the TV, the TV remembers this certificate, so it recognises the App next time without a new code | In the iOS Keychain on this iPhone only (not synced to iCloud and not moved to another device). The private key never leaves your iPhone; only the certificate is sent, and only to your TV over your local network. Never sent to us |
| Last connected TV and brand; your favorites | One-tap reconnect and your custom buttons | On your iPhone only |
| Your analytics choice, and whether you have Pro | App settings | On your iPhone only |
| Your TV's network hardware address (MAC address). A MAC address is a device identifier | To recognise your TV, and to send it a wake signal on your local network ("turn on from the App", where available in the App). On a Google TV or Android TV, the App reads it from the certificate the TV presents when the App connects | On your iPhone only; never sent to us, to analytics or in error and crash reports |
| Text you type to your TV (keyboard, where available in the App) | To type into a text field open on your TV, such as a search box | Not stored by the App. Each change in the field goes directly to your TV over your local network as you type, and the text is cleared from the App when you close the screen. It isn't sent to us, to analytics or in error and crash reports. What the TV, or the app open on it, does with the text (for example, search history) depends on them |
| Your voice and the recognized text in voice typing (where available in the App) | To turn what you say into text for your TV, which you can also correct by typing | Not stored. Recognition happens on your iPhone itself, using Apple's speech recognition, which is part of iOS; your voice is not recorded or stored, and is never sent to us, to analytics, in error and crash reports, or to a server for recognition. The recognized text appears in the text field and goes to your TV over your local network as it is recognized, like typed text, and is cleared from the App when you close the screen |
Local Network permission. iOS asks you to allow the App to find devices on your local network. The App uses this only to discover and control your TV (Samsung, LG, Google TV or Android TV) and, where available, to turn it on. It does not scan for, store, or report other devices on your network. If you decline, you can still enter the TV's IP address manually, or change the permission later in iPhone Settings.
Your TV's own software. The App talks directly to the remote-control interface built into your TV (on a Google TV or Android TV, the TV's "Android TV Remote Service"). The App doesn't use a Google, Samsung or LG account or cloud service for this, and we receive nothing about you from the TV maker or from Google. What the TV itself, its maker or Google collect is governed by their own terms and privacy policies, not by this policy.
Keyboard and passwords. The keyboard is meant for search and ordinary text. It shows what you type in plain view, it can't tell whether the field on the TV is a password field, and on some TVs (depending on the model) the local network connection isn't encrypted. We recommend not typing passwords with it. Not every field or app on the TV accepts text from the phone; this depends on the TV model and the app.
App shortcuts. Where available in the App, when you tap an app button (Netflix, YouTube, Prime Video or Disney+), the App only asks your TV, over your local network, to open that app: depending on the type of TV, it sends the TV the app's identifier or a link that opens the app. On Samsung TVs, the App also asks the TV whether the app is installed. The App sends no information to the companies that run these apps, and the analytics tool doesn't learn which app you opened. What the app on your TV collects is governed by its own terms and privacy policy. If the app isn't installed on or supported by your TV, it may not open; this depends on the TV model.
Microphone and Speech Recognition permissions (voice typing). Where available in the App, you can type to your TV by voice. The first time you tap the microphone button, iOS asks you to allow access to the microphone and to speech recognition. The microphone is on only from when you tap the microphone button until you tap "סיום" (Done), stop speaking, or close the screen. Recognition happens on your iPhone, using Apple's speech recognition, which is part of iOS. Voice typing is available only in languages your iPhone can recognize without an internet connection (you can choose Hebrew or English). If the language you chose can't be recognized on the device, the App tells you so, doesn't offer voice typing in that language, and never sends your voice to a server for recognition. If you decline, the rest of the App works as usual, and you can change these permissions at any time in iPhone Settings.
The App on Android. Everything in this section also applies to the App for Android phones, with these differences:
- Pairing keys and the pairing certificate are kept in the Android Keystore instead of the iOS Keychain. The pairing certificate's private key is generated inside the Android Keystore and never leaves it. The pairing keys issued by Samsung and LG TVs are kept in the App's private storage, encrypted with a key held in the Android Keystore. Only the App can use them, they are not included in your phone's backup, and Android deletes them when you delete the App. So after a reinstall or a move to a new phone, you need to approve the connection on the TV again. Never sent to us.
- Network permissions. Android has no Local Network prompt. The App uses permissions Android grants at install: internet and network access, checking whether the phone is on Wi‑Fi, and the Wi‑Fi Multicast permission, which lets it look for your TV on your home network and send it a wake signal. It uses them only to find and control your TV and, where available, to turn it on. The App does not request the location permission or the "Nearby devices" permission, does not read your Wi‑Fi network name, and does not scan for Wi‑Fi networks.
- Voice typing is not available on Android, and the App does not ask for microphone access there.
- Notifications. If you allow notifications, the reminder before the free week ends is a local notification scheduled by your phone; it does not go through any server.
- Other permissions. Besides the network permissions, the App on Android declares the permissions below. None of them gives the App access to your location, contacts, files or Wi‑Fi network name.
- Google Play purchases (com.android.vending.BILLING): to buy a subscription and restore purchases through Google Play.
- Showing notifications (POST_NOTIFICATIONS): for the reminder before the free week ends. On Android 13 and later your phone asks whether to allow notifications; you can say no, and change your choice at any time in your phone's settings.
- Running after the phone restarts (RECEIVE_BOOT_COMPLETED): to set a scheduled reminder again after the phone is turned off and on.
- Keeping the phone awake (WAKE_LOCK): to keep the phone awake for a moment so the reminder arrives on time.
- Vibration (VIBRATE): for a short vibration, for example when you tap buttons.
- App icon badge (permissions of the home screens of various phone makers, such as Samsung, Huawei and OPPO): so a small number (a badge) can be shown on the App's icon.
- Android backup. Your saved TVs (including their names, models, IP and MAC addresses), pairing keys and the pairing certificate, as well as your favorites, your settings and the installation ID in section 4, are not included in Android backups to your Google Account and are not copied when you transfer data to a new phone. If you turned on backup to your Google Account on your phone, Android may back up only technical settings of the App's components, such as a scheduled reminder and the random update ID in section 3a, under your settings and Google's terms; so after a reinstall or a move to a new phone, the update ID may be kept. The backup is kept in your Google Account, and we don't receive it.
Deleting the App. Deleting the App deletes the information above from your iPhone, except items in the iOS Keychain: iOS may keep the pairing keys and the App's pairing certificate after the App is deleted. They stay on this iPhone only and are never sent to us. If you reinstall the App on the same iPhone, a Google TV or Android TV you paired before may accept it again without a new code. Removing a TV in the App doesn't delete the App's pairing certificate, because one certificate serves all your Google TV and Android TV sets. To make a TV stop trusting the App, remove it on the TV itself: on a Google TV or Android TV, clear the data of the "Android TV Remote Service" app in the TV's app settings; on Samsung and LG, remove the App from the TV's list of connected devices. Menu names differ by model.
3. Purchases
Subscriptions are processed by Apple through the App Store under your Apple Account. Apple handles payment, billing, renewals, cancellations and refunds under its own privacy policy (https://www.apple.com/legal/privacy/). The App only receives a confirmation from Apple (via StoreKit) of which product is active, so it can unlock Pro. We receive aggregated sales reports from Apple that do not identify you.
On Android, subscriptions are processed by Google through Google Play, under your Google Account. Google handles payment, billing, renewals and cancellations under its own privacy policy (https://policies.google.com/privacy). The App only receives from Google Play (via Google Play Billing) which subscriptions are active and which offers are available to you, such as whether you are eligible for the free week, and acknowledges the purchase with Google Play so that it completes. In Google Play Console we can see the order details Google shows developers (for example the order ID, subscription, price and status), and we use them only to handle cancellations, refunds and your requests. Your card details never reach us.
3a. App updates
To deliver fixes without waiting for a new App Store version, the App checks for updates with EAS Update, a service of 650 Industries, Inc. ("Expo"). The App checks a few seconds after it opens, and also if it failed to open. These checks happen whether or not usage data sharing (section 4) is on, because this is how the App receives fixes, including security fixes. Each check sends Expo:
- your device's IP address, which any server the App connects to necessarily sees;
- a random update ID that the App creates on your iPhone the first time it checks. It isn't your Apple or Google account or an advertising identifier (the IDFA, or Android's advertising ID), it is different from the installation ID in section 4, and it stays the same until you delete the App;
- technical details needed to pick the right update: the platform (iOS or Android), the App's runtime version, the update channel, and the IDs of the App version and updates installed on your iPhone, including updates that failed to open;
- if the App crashed within its first seconds, a short technical description of that error (up to 1,024 characters), so the service can offer a fix.
Purpose. Only to deliver updates to the App and to recover from an update that fails to open. We don't use this data for advertising or to track you, and we don't combine it with the usage data in section 4. The App doesn't send Expo your name, contact details, your TVs' details or anything you type.
Who receives it, where, and for how long. Expo processes this data as our service provider under its own terms and privacy policy (https://expo.dev/privacy). According to that policy, Expo may transfer and store data on servers outside your country, including in the United States, and keeps information only as long as reasonably necessary for the purposes it describes.
Your choice. There is no switch for update checks, because the App needs them to receive fixes. Deleting the App deletes the random update ID from your iPhone; a reinstall creates a new one. On Android, if you turned on backup to your Google Account, the ID may be kept after a reinstall or a move to a new phone (section 2, "Android backup").
4. Usage statistics and error reports (on by default, you can turn them off)
Your choice. Sharing usage data is on when you install the App. We tell you this on the App's first screen, with a link to this policy, before any usage data is sent. You can turn it off at any time in Settings → Legal & Privacy → "שיתוף נתוני שימוש". From that moment, no usage events or error reports are sent from your device. The App works the same, including Pro, whether this is on or off.
What is collected when it's on:
- A random identifier created for this installation of the App (not your Apple or Google account, not an advertising identifier (the IDFA, or Android's advertising ID), and not linked to your name). It stays the same until you delete the App, so we treat the data as personal data under privacy law even though we don't know who you are.
- Usage events, such as: a setup screen was shown, a brand was selected (Samsung, LG, Google TV / Android TV, or one of the other brands listed in the App, such as Hisense or Sony; never free text), a TV was or wasn't found (as a count bucket), pairing succeeded or failed (with a technical reason code), a first command worked or a command failed (with the kind of command, such as arrows, keyboard or app shortcut, never the text typed or which app), the upgrade screen was shown or closed, a purchase or free trial started or failed, a restore was attempted, an error message was shown, voice typing was used (only whether any text was recognized, never your voice, what you said or the recognized text), and a summary of how many commands were used in a session (as a range). Also app version, whether you have Pro, and basic technical details the analytics tool attaches to every event (device manufacturer and model, iOS or Android version, app version and build number, device language and locale, time zone, screen size, and the analytics library version), plus the random installation identifier described above.
- Error and crash reports: technical information about an error or crash in the App's code (error type, where in the code it happened, app and iOS or Android version), sent through PostHog. Along with these, the App sends PostHog a technical log of the connection with your TV, in batches (connection and pairing steps, error codes, key codes and the length of any typed text, never the text itself, your TV's name, IP address or MAC address), to help us fix connection and typing problems. Separately, if you turned on "Share With App Developers" in your iPhone's Settings (Privacy & Security → Analytics & Improvements), Apple may share crash logs with us. That is controlled by Apple and your iPhone settings, not by the App. On Android, if you turned on sharing usage and diagnostics data with Google on your phone, Google may show us crash and error data in Google Play Console, under your settings.
What is never collected: screen recordings, your name, email, phone number, contacts, photos, precise or approximate location, the advertising identifier, your TV's IP address, name, model or MAC address, your Wi‑Fi network name, PINs or pairing codes, pairing keys or the App's pairing certificate, voice recordings or what you say in voice typing, anything you type, or which app you open with an app shortcut.
IP address and location. Your IP address is necessarily seen by the analytics servers when data is sent. We configured the service to discard the client IP address and not derive location from it.
Why (purpose). Only to understand where setup fails, fix bugs and crashes, and improve the App. We don't use this data for advertising, don't combine it with data from other sources to identify you, and don't create user profiles.
Who receives it. PostHog Inc. is a service provider that processes the usage data on our behalf under its own terms and privacy policy (https://posthog.com/privacy). The data is stored on PostHog's US Cloud (https://us.i.posthog.com), in the United States. The data sent to PostHog is not linked to your name, email or IP address; it is identified only by a random installation ID.
One analytics project for our apps. The same PostHog project also holds usage data from another app of ours, and every event is tagged with the app it came from. Each app creates its own random installation ID. We don't send PostHog any identifier shared by the two apps, don't create user profiles, and don't link or combine usage data from the two apps.
Retention. Usage events and error and crash reports are kept for as long as needed to operate and improve the App, and no longer than 12 months (the data retention period of our PostHog plan), and are then deleted.
5. What we do NOT do
- No tracking across other companies' apps or websites (so the App does not show Apple's "Allow tracking" prompt).
- No advertising SDKs, no Meta/Facebook SDK, no data brokers.
- No sale or rental of personal data.
- No marketing messages. The App does not send marketing emails, SMS or push notifications. If this changes, we will ask for your consent first.
6. Legal basis and your rights (Israel)
We process data in accordance with the Israeli Protection of Privacy Law, 5741-1981, and its regulations, including the Protection of Privacy (Data Security) Regulations, 5777-2017. Providing analytics data is voluntary; there is no legal obligation to provide it, and if you turn it off, nothing changes in how the App works.
You have the right to request access to information about you and to request its correction or deletion. We answer requests to access, correct or delete data within 30 days, in accordance with the Israeli Protection of Privacy Law and its regulations. Because we don't know who you are, to act on analytics data we need the random installation identifier: you'll find it in the App under Settings → Legal & Privacy, in the ״מזהה התקנה״ (installation ID) row; tap it to copy or send it. Turn analytics off and email the identifier to us at support@hustlemania.dev. You can also simply turn analytics off and delete the App; the identifier is then discarded on your device.
You may complain to the Israeli Privacy Protection Authority (https://www.gov.il/he/departments/the_privacy_protection_authority).
7. Data transfers outside Israel
Analytics data is transferred to and stored in the United States by PostHog, which processes it under its own terms and privacy policy. App update checks go to Expo (section 3a), which may process them in the United States. Transfers of personal data from Israel abroad are subject to the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001.
8. Security
Data is sent over encrypted connections (HTTPS). On-device data is stored in the App's private storage; pairing keys and the App's pairing certificate are stored in the iOS Keychain, readable only by the App and only after the iPhone has been unlocked once since it was restarted. On Android, the pairing certificate is kept in the Android Keystore, and pairing keys are encrypted with a key held there (section 2). Access to the analytics dashboard is limited to the developer only.
9. Children
The App is a general utility and is not directed at children. We don't knowingly collect personal information from children. If you believe a child has provided data, contact us and we'll delete it.
10. Changes
If we change this policy we'll update the date above and, for material changes (for example new types of data or a new recipient), we'll notify you in the App and ask for consent where required.
11. Contact
Amir Angel · support@hustlemania.dev
Support requests: when you contact us from the app, we attach by default an app diagnostics ID, the app version, build and update ID, so we can find the related error logs. You can remove them before sending. We use them only to handle your request and fix bugs.
Samsung and LG are trademarks of their respective owners. Google, Android TV and Google TV are trademarks of Google LLC. This App is an independent product and is not affiliated with, endorsed by, or sponsored by Samsung Electronics, LG Electronics or Google LLC. Hisense, TCL, Sony, Philips, Xiaomi, Toshiba and Panasonic are trademarks of their respective owners; the App is not affiliated with, endorsed by, or sponsored by them. Netflix, YouTube, Prime Video and Disney+ are trademarks of their respective owners; the App is not affiliated with them.