Privacy Policy

Tuno — TV Remote (formerly Baton) · Effective August 11, 2026 · Updated October 4, 2026

1. What stays on your phone

The app talks to your TV directly over your own Wi-Fi network. Everything involved in that never leaves your phone and your network:

• your TV's network address, hardware (MAC) address, name, and serial number;
• anything you type with the phone keyboard for the TV;
• the TV audio that plays in your headphones — it streams from the TV to your phone over your Wi-Fi and is not recorded or uploaded anywhere;
• the list of apps installed on your TV and your favorites;
• your copy of the support chat history.

The app asks for one system permission — Local Network access. It is used for exactly one thing: finding your TV on your Wi-Fi and sending it commands. The app does not request your location, contacts, photos, camera or microphone.

2. Anonymous usage statistics

The app sends us anonymous statistics about how it is used, so we can see which features help and which fail. This is on from the first launch and can be turned off at any time with the "Share anonymous stats" switch in the app's Settings.

What is sent

• product events: that the app was opened, which screens were shown and for how long, that a search for devices ran and whether it found one, that a connection was made or lost and at which stage, that a feature was used (for example the keyboard, the trackpad or sound on phone), and counts of remote key presses grouped by kind (navigation, volume, playback and so on) — never which channel was opened or what was typed;
• the kind of connected device (TV or player) and the brand word from its model name;
• the app version and build number, the iOS version, the device model identifier (for example the internal name of an iPhone model) and the phone's language;
• a random install identifier generated on your phone.

What we do to keep it anonymous

The install identifier is random and is not linked to your Apple ID, your phone number, your name or anything else about you. No IP address is stored with the events (see section 6). No network names, no device names, no channel names and no typed text are ever sent. If the app is deleted, the identifier is gone with it; a reinstall gets a fresh one that nothing links to the old one.

Turning it off

Turn the switch off at any time. That withdraws your consent: the app deletes any unsent events and deletes the install identifier itself, so turning it back on later starts a fresh, unlinked identifier.

3. The support chat

The Help tab contains a chat where an assistant answers your questions. Answers are generated with the help of a third-party AI service. Before your first message is sent, the app asks for your permission and tells you what will be shared. Nothing goes to the chat service until you agree.

What is sent with a chat message

• your message and the recent chat history (up to the last 20 messages);
• a short technical card that helps answer you: the app version, your phone's model and iOS version, the type and model of the connected TV or player, whether the app is connected (or how far setup got), your subscription status, the answers you gave on the setup screens (for example about TV volume or whether the TV is switched on), the last 20 steps you took in the app's setup screens, and from the search for your TV: the brands of other TVs found on your Wi-Fi network (for example Samsung or LG), how many other devices answered on that network (your router not counted), and whether a VPN was on on your phone.

The card contains no names, no device names, no network names, no network (IP) or hardware (MAC) addresses and no Apple ID: the app removes them before sending. Chat messages do not carry the install identifier from section 2, so conversations are not linked to usage statistics.

Who processes it

Messages go to our own server, which passes them to a third-party AI service (we currently use OpenRouter to reach a large-language-model provider) for the sole purpose of writing the reply. We require that any such provider protects your data to the same standard described in this policy: your messages may be used only to generate the reply, and not for advertising or profiling.

What we keep and why

Our server keeps a copy of each support conversation: your messages, the replies, the technical card and the time. We keep it to continue the conversation with context, to handle requests you send us by e-mail, and to review answers so the assistant gets better at solving setup problems. No IP address is stored with conversations (see section 6). Conversations are stored on our own server with access limited to the people running Tuno, and are not used for advertising or profiling.

How long

Up to 90 days. Conversations older than 90 days are deleted automatically.

Your controls

• you can withdraw your chat consent at any time in the app's Settings; after that nothing new is sent;
• "Delete Chat History" in Settings removes the conversation from your iPhone;
• to have your conversations deleted from our server before the 90 days run out, write to support@baton.tel with the approximate date of the chat (and, if you like, a phrase you wrote) and we will delete them.

4. In-app purchases

Tuno Premium is sold through Apple's In-App Purchase. Payment, billing, refunds and your Apple Account are handled entirely by Apple. We never receive your card number, payment details, name or Apple Account information. To unlock the remote, the app checks with Apple on your phone whether Tuno Premium is active.

Purchase events are not sent to our usage statistics. If you use the support chat, the technical card described in section 3 includes your subscription status, so the assistant can help with questions about purchases.

5. What we do not do

• no advertising, and no advertising identifiers;
• no tracking across apps or websites — this is why the app never shows Apple's App Tracking Transparency prompt: there is nothing to ask about;
• no third-party analytics or advertising SDKs inside the app;
• no accounts and no sign-in; purchases go through Apple, and we never receive your payment details;
• we do not sell, rent or share your data with anyone, except passing chat messages to the AI service as described above.

6. This website and server logs

When you open pages on this website, our web server keeps standard short-lived access logs (visitor IP address, page, time) for security; they are deleted after 14 days. The app's data endpoints are excluded from access logging: we do not record which IP address sent statistics or chat messages, and we never store an IP address together with the install identifier.

7. Data retention, summarized

• anonymous usage events: up to 12 months on our server, then deleted;
• support conversations: up to 90 days on our server, then deleted; your phone keeps its own copy until you delete it in Settings;
• website access logs: 14 days.

8. Children

The app is suitable for all ages and collects no personal information from anyone, including children. We do not knowingly collect personal data from children.

9. Changes to this policy

If the app ever starts collecting something new, this policy will be updated first and the effective date above will change. The current version always lives at this address.

Tuno was called Baton before version 1.2. It is the same app from the same developer, and this policy covers it under both names.

10. Contact

Questions about privacy, or a request to access or delete data: support@baton.tel. See also the support page.