Privacy Policy

Baton — TV Remote · Effective August 11, 2026

1. What stays on your phone

The app talks to your TV directly over your own Wi-Fi network. Everything involved in that never leaves your phone and your network:

• your TV's network address, hardware (MAC) address, name, and serial number;
• anything you type with the phone keyboard for the TV;
• the TV audio that plays in your headphones — it streams from the TV to your phone over your Wi-Fi and is not recorded or uploaded anywhere;
• the list of apps installed on your TV and your favorites;
• your copy of the support chat history.

The app asks for one system permission — Local Network access. It is used for exactly one thing: finding your TV on your Wi-Fi and sending it commands. The app does not request your location, contacts, photos, camera or microphone.

2. Anonymous usage statistics — off by default

The app can send us anonymous statistics about how it is used, so we can see which features help and which fail. This is off by default. No statistics are recorded or sent unless you turn on "Share Anonymous Usage Stats" in the app's Settings.

What is sent if you turn it on

• a random install identifier — a random code the app makes up itself. It is not your Apple advertising identifier, not a device identifier, not your device name, and it is not derived from anything about you. Reinstalling the app creates a new one;
• the names of product events (for example "app opened", "connect succeeded", "connect failed") with their timestamps and technical parameters;
• the app version and build number, the iOS version, and the device model in generic form (such as "iPhone").

What we do to keep it anonymous

• the events contain no names, no e-mail addresses, no network details, no message texts and no content;
• we do not store your IP address together with these events, and we do not link the install identifier to your IP address or to any other data;
• we do not attempt to identify anyone from these events, and we do not combine them with any other data sets.

Turning it off

Turn the same switch off at any time. That withdraws your consent: the app deletes any unsent events and deletes the install identifier itself, so a later opt-in starts a fresh, unlinkable identity. On our server, events are kept for at most 12 months and then deleted.

3. The support chat

The Help tab contains a chat where an assistant answers your questions. Answers are generated with the help of a third-party AI service. Before your first message is sent, the app asks for your permission and tells you what will be shared. Nothing goes to the chat service until you agree.

What is sent with a chat message

• your message and the recent chat history (up to the last 20 messages);
• a short technical card that helps answer you: the app version, your phone's model and iOS version, the type and model of the connected TV or player, whether the app is connected (or how far setup got), and your answer about TV volume if you gave one.

The card contains no names, no addresses and no network details. No install identifier and no device identifier are sent with chat messages, so your conversation is not linked to the usage statistics above.

Who processes it

Messages go to our own server, which passes them to a third-party AI service (we currently use OpenRouter to reach a large-language-model provider) for the sole purpose of writing the reply. We require that any such provider protects your data to the same standard described in this policy: your messages may be used only to generate the reply, and not for advertising or profiling. Our server does not keep transcripts of your conversation — it relays messages and returns the answer.

Your controls

• you can withdraw your chat consent at any time in the app's Settings;
• "Delete Chat History" in Settings removes the conversation from your iPhone;
• if you want any support data connected with your messages removed on our side, write to support@baton.tel and we will handle it.

4. What we do not do

• no advertising, and no advertising identifiers;
• no tracking across apps or websites — this is why the app never shows Apple's App Tracking Transparency prompt: there is nothing to ask about;
• no third-party analytics or advertising SDKs inside the app;
• no accounts, no sign-in, no purchases;
• we do not sell, rent or share your data with anyone, except passing chat messages to the AI service as described above.

5. This website and server logs

When you open pages on this website, our web server keeps standard short-lived access logs (visitor IP address, page, time) for security; they are deleted after 14 days. The app's data endpoints are excluded from access logging: we do not record which IP address sent statistics or chat messages, and we never store an IP address together with the install identifier.

6. Data retention, summarized

• anonymous usage events: up to 12 months on our server, then deleted;
• chat messages: not stored on our server; your phone keeps its own copy until you delete it in Settings;
• website access logs: 14 days.

7. Children

The app is suitable for all ages and collects no personal information from anyone, including children. We do not knowingly collect personal data from children.

8. Changes to this policy

If the app ever starts collecting something new, this policy will be updated first and the effective date above will change. The current version always lives at this address.

9. Contact

Questions about privacy, or a request to access or delete data: support@baton.tel. See also the support page.