Privacy Policy

Last updated: October 20, 2026

This policy explains what data the Just Remote app for Android (“the app”) handles and why. The app is developed by CacaoBob Apps (“we”, “us”). If you have a question, write to cacaobobapps@gmail.com.

In short

• No account, no ads, no analytics and no location.
• We don’t run servers of our own, so we don’t collect or store your data anywhere.
• The app talks to your TVs (Apple TV, Android TV / Google TV, Samsung, LG, Roku, Fire TV) only over your local network.
• If the app crashes, a crash report goes to Firebase Crashlytics. You can turn this off in Settings.

Controlling your TV

The app finds Apple TVs and Android TV / Google TV devices on your Wi-Fi network (Bonjour / mDNS, or by an IP address you enter) and controls them directly over the local network: an Apple TV with the same protocols as Apple’s own remote, an Android TV with the Android TV Remote protocol over an encrypted (TLS) connection. None of this goes through the internet or through us.

• Samsung and LG TVs are found on your network with UPnP (SSDP) or by an IP address you enter, and are controlled over a WebSocket connection to the TV, encrypted where the TV supports it. To turn such a TV on, the app sends a Wake-on-LAN packet on your local network.
• For a Samsung or LG TV, the app stores the access key the TV issues when you allow the phone, and the TV’s network (MAC) address, which it needs to turn the TV on. A Samsung TV asks you to allow “Just Remote”; an LG TV asks without naming the app and, once you allow it, shows “Just Remote is connected”.
• Roku players and Roku TVs are found on your network with UPnP (SSDP) or by an IP address you enter, and are controlled with Roku’s External Control Protocol (ECP): plain HTTP requests to the Roku, only on your local network. There’s no pairing and no access key, and the Roku shows no prompt. The app stores the Roku’s serial number, to recognize it, and its network (MAC) address, to turn it on with a Wake-on-LAN packet on your local network.
• Fire TV devices are found on your network with Bonjour / mDNS or by an IP address you enter, and are controlled over an encrypted (HTTPS) connection to the Fire TV, only on your local network; a sleeping Fire TV is woken with a DIAL request on your local network. When you add one, it shows a 4-digit PIN; once you type it, the Fire TV issues an access key, which the app stores encrypted on your phone. The Fire TV sees the app as “Just Remote” followed by your phone’s model name, for example “Just Remote (Pixel 8)”, and lists it among its remotes.
• The list of your TVs, your apps and links, and your settings are stored only on your phone, together with what your TVs need to recognize the app: the pairing keys an Apple TV issues; for an Android TV, a certificate and key the app creates for itself, the TV’s certificate fingerprint, its network address and model, and its Bluetooth address, which the TV announces on the network and the app uses as its identifier. The same goes for the TV + box pairs you set up and the names you give to HDMI inputs. Uninstalling the app or clearing its data deletes all of it.
• Your Apple TV sees the app as “Just Remote” followed by your phone’s model name, for example “Just Remote (Pixel 8)”. An Android TV is told the app’s name and version and your phone’s manufacturer and model, and lists the remote as “Just Remote” among its paired devices.
• Links you add are sent to your TV, which opens them. The app’s log keeps only the start of a link (for example “https://www.youtube.com”), never the rest of it.

App names and icons

To show the names and icons of the apps on your Apple TV, and to let you search for apps to add, the app queries Apple’s public iTunes Search service (itunes.apple.com). It sends only the search text you type or the identifiers of the apps it looks up, and downloads their icons from Apple. These requests are anonymous and are covered by Apple’s privacy policy.

An Android TV doesn’t share its list of apps, and the app doesn’t ask for it. Icons of popular services come from the same iTunes Search lookups. When you add an app by its Google Play link, the app only reads the package name from the link on your phone; nothing is sent to Google Play. An icon you pick from your photos (with Android’s photo picker, no permission needed) stays on your phone.

A Samsung or LG TV tells the app which apps are installed on it; an LG TV also provides their icons, which the app loads from the TV over your local network. A Roku also tells the app which apps are installed on it and provides their icons, which the app loads from the Roku over your local network. None of this goes through the internet. A Fire TV tells the app which apps are installed on it; their icons are loaded from Amazon’s servers (m.media-amazon.com), as the Fire TV names them. These requests carry no information about you beyond what any image download does (your IP address).

Crash reports

When the app crashes or hits a serious error, it sends a report to Firebase Crashlytics, a service provided by Google, so we can find and fix the problem. A report contains:

• technical details of the error (the stack trace);
• your phone’s model, Android version and the app’s version;
• for a Samsung or LG TV: its model and software version;
• for a Roku: its model and software version, whether it’s a Roku TV or a player, and whether it’s connected over Wi-Fi or Ethernet;
• for a Fire TV: whether it runs Fire OS or Vega OS, its software version and remote-API version, whether it supports volume and power control, and whether it’s a stick/box or a TV;
• a random identifier of this installation of the app (not linked to your name or Google account);
• a short technical log of what the app was doing before the error. The log never contains the names of your TVs, PIN codes or text you typed.

Crash reports are on by default. You can turn them off at any time in Settings → Support → Send crash reports; reports not yet sent are then deleted. Crashlytics keeps crash data for 90 days. See Privacy and Security in Firebase for how Google handles it.

Reporting a problem

Settings → Support → Report a problem opens an email in your own email app, addressed to us, with the app’s technical log attached (the same kind of log as above: no TV names, PIN codes or typed text). Nothing is sent unless you send the email yourself. We use your email and the log only to answer you and fix the problem, and we delete them when they are no longer needed for that.

Purchases

Just Remote Pro is bought through Google Play. Google handles the payment under the Google Privacy Policy; we never see your payment details. The app only learns from Google Play which purchase is active on your account, in order to unlock Pro.

Permissions

• Internet and network state — to reach your TVs and the services described above, and, for the notification remote’s “At home” mode, to tell whether your phone is on your TV’s Wi-Fi network. This check happens on the phone; nothing is sent anywhere.
• Wi-Fi multicast — to find TVs on your network.
• Vibration — for haptic feedback on the remote’s buttons.
• Notifications, foreground service and start at boot — for the remote in the notification shade (Pro): to show it, to keep its connection to the TV while you use it, and to set it up again after your phone restarts.
• Google Play billing — to buy Just Remote Pro and restore it.

Sharing and selling

We don’t sell your data or share it with anyone. The only third parties involved are those named above: Google (Firebase Crashlytics and Google Play) and Apple (iTunes Search). Controlling an Android TV doesn’t involve any Google service: the app talks to the TV directly.

Your choices and deleting data

You can turn off crash reports in Settings, and remove everything the app stores on your phone by clearing its data or uninstalling it. To have crash reports linked to your installation or emails you sent us deleted earlier, write to cacaobobapps@gmail.com.

Children

The app is not directed at children under 13, and we don’t knowingly collect personal data from them.

Changes to this policy

If the way the app handles data changes, we will update this page and the date at the top.

Contact

CacaoBob Apps — cacaobobapps@gmail.com