Privacy Policy

Baton — TV Remote · Effective August 11, 2026

1. What stays on your phone

The app talks to your TV directly over your own Wi-Fi network. Everything involved in that never leaves your phone and your network:

• your TV's network address, hardware (MAC) address, name, and serial number;
• anything you type with the phone keyboard for the TV;
• the TV audio that plays in your headphones — it streams from the TV to your phone over your Wi-Fi and is not recorded or uploaded anywhere;
• the list of apps installed on your TV and your favorites;
• your copy of the support chat history.

The app asks for one system permission — Local Network access. It is used for exactly one thing: finding your TV on your Wi-Fi and sending it commands. The app does not request your location, contacts, photos, camera or microphone.

2. Anonymous usage statistics

The app sends us anonymous statistics about how it is used, so we can see which features help and which fail. This is on from the first launch and can be turned off at any time with the "Share anonymous stats" switch in the app's Settings.

What is sent

• product events: that the app was opened, which screens were shown and for how long, that a search for devices ran and whether it found one, that a connection was made or lost and at which stage, that a feature was used (for example the keyboard, the trackpad or sound on phone), and counts of remote key presses grouped by kind (navigation, volume, playback and so on) — never which channel was opened or what was typed;
• the kind of connected device (TV or player) and the brand word from its model name;
• the app version and build number, the iOS version, the device model identifier (for example the internal name of an iPhone model) and the phone's language;
• a random install identifier generated on your phone.

What we do to keep it anonymous

The install identifier is random and is not linked to your Apple ID, your phone number, your name or anything else about you. No IP address is stored with the events (see section 5). No network names, no device names, no channel names and no typed text are ever sent. If the app is deleted, the identifier is gone with it; a reinstall gets a fresh one that nothing links to the old one.

Turning it off

Turn the switch off at any time. That withdraws your consent: the app deletes any unsent events and deletes the install identifier itself, so turning it back on later starts a fresh, unlinked identifier.

3. The support chat

The Help tab contains a chat where an assistant answers your questions. Answers are generated with the help of a third-party AI service. Before your first message is sent, the app asks for your permission and tells you what will be shared. Nothing goes to the chat service until you agree.

What is sent with a chat message

• your message and the recent chat history (up to the last 20 messages);
• a short technical card that helps answer you: the app version, your phone's model and iOS version, the type and model of the connected TV or player, whether the app is connected (or how far setup got), and your answer about TV volume if you gave one.

The card contains no names, no addresses and no network details. No install identifier and no device identifier are sent with chat messages, so your conversation is not linked to the usage statistics above.

Who processes it

Messages go to our own server, which passes them to a third-party AI service (we currently use OpenRouter to reach a large-language-model provider) for the sole purpose of writing the reply. We require that any such provider protects your data to the same standard described in this policy: your messages may be used only to generate the reply, and not for advertising or profiling. Our server does not keep transcripts of your conversation — it relays messages and returns the answer.

Your controls

• you can withdraw your chat consent at any time in the app's Settings;
• "Delete Chat History" in Settings removes the conversation from your iPhone;
• if you want any support data connected with your messages removed on our side, write to support@baton.tel and we will handle it.

4. What we do not do

• no advertising, and no advertising identifiers;
• no tracking across apps or websites — this is why the app never shows Apple's App Tracking Transparency prompt: there is nothing to ask about;
• no third-party analytics or advertising SDKs inside the app;
• no accounts, no sign-in, no purchases;
• we do not sell, rent or share your data with anyone, except passing chat messages to the AI service as described above.

5. This website and server logs

When you open pages on this website, our web server keeps standard short-lived access logs (visitor IP address, page, time) for security; they are deleted after 14 days. The app's data endpoints are excluded from access logging: we do not record which IP address sent statistics or chat messages, and we never store an IP address together with the install identifier.

6. Data retention, summarized

• anonymous usage events: up to 12 months on our server, then deleted;
• chat messages: not stored on our server; your phone keeps its own copy until you delete it in Settings;
• website access logs: 14 days.

7. Children

The app is suitable for all ages and collects no personal information from anyone, including children. We do not knowingly collect personal data from children.

8. Changes to this policy

If the app ever starts collecting something new, this policy will be updated first and the effective date above will change. The current version always lives at this address.

9. Contact

Questions about privacy, or a request to access or delete data: support@baton.tel. See also the support page.