Privacy Policy

• Account information. When you sign in with Apple or Google, we receive information such as your name, email address, provider account identifier, and authentication result. Apple may provide a private-relay email address. We use this information to create and secure your Beam account. Authentication tokens and provider credentials are not included in diagnostics.
• Subscription information. Purchases are processed by Apple or Google and managed through RevenueCat. We receive subscription status and a RevenueCat app-user identifier linked to your Beam account. We do not receive payment-card details.
• Advertising information. We use Google AdMob to show ads to non-subscribers. AdMob may process device and advertising identifiers and, where applicable, approximate location and ad-interaction data to deliver and measure ads. On iOS, App Tracking Transparency controls tracking permission. Where required, Google's consent controls govern personalized advertising. Declining personalized advertising does not disable the App, although non-personalized ads may still be shown. Beam separately records bounded advertising-operation events, independently of the optional technical-diagnostics setting. These cover the lifecycle of an ad: when one is requested, filled, or fails to fill; when it is displayed, clicked, closed, or fails to display; when a rewarded ad is offered, accepted, dismissed, or completed; the reward outcome; and the revenue the advertising SDK reports for an individual impression. Each event carries a random event identifier, the event time, the ad format and placement, a normalized SDK error code where one applies, App version, platform, operating-system version, and bounded technical detail such as load latency, whether an ad was ready, and which Premium feature prompted an offer. Events also carry a random session identifier that groups a single App launch and a random attempt identifier that joins one rewarded attempt across its stages. When you are signed in, Beam links these events to your Beam account using your verified session; when you are signed out they remain anonymous. Beam does not attach advertising, installation, or hardware identifiers to these events and does not use them to build advertising profiles.
• Technical diagnostics and usage events. Beam automatically records technical events and, when diagnostic upload and sharing are enabled, uploads them only to operate, secure, debug, and improve the App and its TV compatibility. Authenticated diagnostics are linked to your Beam account while retained in identifiable form. Signed-out diagnostics use random install, session, scan, event, and peer-correlation identifiers.
• App and phone context. Diagnostics may include event time and duration, App version and native build number, release channel, platform, operating-system version, locale, phone manufacturer and model, and foreground/background state.
• Network and TV discovery context. Diagnostics may include Wi-Fi and reachability state; the phone's local IP/subnet context; multicast, local-network-permission, SSDP, mDNS, UPnP, and control-port outcomes; TV local IP/host, port, friendly name, manufacturer, model, inferred brand and protocol; discovered service/device types; and bounded, sanitized SSDP headers, UPnP description material, mDNS service metadata, addresses, and TXT records.
• Pairing, connection, and control context. Diagnostics may include the selected driver, pairing method and stage, whether a stored pairing credential existed or was reused, protocol handshake stage, HTTP/WebSocket/TCP/TLS outcome, remote close code, timeout, retry, normalized error, bounded command-use counts by command type, and failed-command context such as a technical key, app identifier, or input identifier.
• Reliability and advertising-operation context. Diagnostics may include sanitized JavaScript exception messages and stacks, and banner or rewarded-ad load, load-failure, fail-open, and SDK error-code outcomes.

Diagnostic values are bounded and sanitized before local persistence and again before upload. The Beam backend performs an additional defensive sanitization pass before storage.

Beam diagnostics never intentionally collect:

• Beam access or refresh tokens, authorization headers, or Apple, Google, RevenueCat, AdMob, or other provider credentials;
• pairing PINs, TV client keys, certificates, private keys, tokens, or saved pairing secrets;
• Wi-Fi passwords;
• keyboard buffers, entered text, TV text content, search text, or clipboard content;
• voice recordings, audio, or transcripts;
• unrestricted network traffic or payloads unrelated to Beam's TV discovery and control protocols; or
• cookies, authorization material, or credential-bearing full request/response headers.

Beam discovers and controls TVs directly over your local Wi-Fi network. TV commands, pairing credentials, keyboard text, and voice content are not routed through the Beam cloud. As described above, bounded technical TV, network, discovery, pairing-stage, connection, and command-outcome data may be included in diagnostics so Beam can reproduce failures and add support for more TV models.

• To provide and secure the App and your account: performance of our contract with you and Beam's legitimate interests in service security.
• To process and validate subscriptions: performance of our contract.
• To show and measure personalized advertising where applicable: your consent, which you can withdraw using the available device or advertising privacy controls.
• To support a free tier with non-personalized advertising: Beam's legitimate interests in funding the service, subject to applicable law.
• To automatically collect technical diagnostics and usage events to discover and support TV models, investigate compatibility failures, maintain reliability, prevent abuse, and improve the App: Beam's legitimate interests in operating and improving a universal TV remote.

Beam limits diagnostics to technical data reasonably connected to these purposes, excludes the secret and content categories listed above, and provides a Settings control to object by disabling future diagnostic upload and sharing. Bounded local diagnostic capture continues while upload and sharing remain disabled.

We disclose information only as needed to service providers that help operate Beam, including:

• Apple and Google for sign-in, app distribution, purchases, and platform services;
• Google AdMob for advertising;
• RevenueCat for subscription management;
• Sentry for crash and application-reliability monitoring; and
• Amazon Web Services for backend hosting, database, network, and storage infrastructure.

These providers process data for their stated service purposes and under their applicable terms and data-protection commitments. Beam may also disclose information where required by law, to protect users or the service, or as part of a lawful business succession. We do not sell personal information. Personalized advertising may qualify as "sharing" for cross-context behavioral advertising under some U.S. state laws; available ATT and advertising privacy controls can be used to opt out.

Beam retains identifiable raw diagnostics in its diagnostic store for no longer than 90 days. Before that period ends, each retained diagnostic record is irreversibly transformed into an anonymous compatibility record.

Beam keeps the account link on advertising-operation events for an operational target of 89 days and no longer than 90 days, then removes that account link. The remaining bounded event may be retained without an account relation to measure ad availability and diagnose SDK failures.

The anonymous record may retain general technical facts such as event type, TV brand, manufacturer, model, classifier result, protocol, service/device types, known standard ports, App version, major operating-system context, normalized error/stage/outcome, bounded duration, and a calendar-day date. It removes the Beam account and paired-device relation; install, session, event, scan, peer, batch, and request identifiers; IP addresses; non-standard uniquely identifying ports; TV friendly names; device UUIDs, serial numbers, MAC addresses, and discovery instance identifiers; raw discovery headers/XML/TXT; exact timestamps; and free-form messages or stacks. Its internal record identifier is replaced with a fresh random value unrelated to the original account, device, installation, or event.

Because the resulting compatibility record cannot reasonably be linked back to a person, household, account, installation, or device, Beam may keep it indefinitely to improve compatibility with existing and future TV models. Anonymous compatibility records are not restored to identifiable form.

Account information is otherwise retained while your account exists and as needed for legal, security, accounting, dispute, and fraud-prevention obligations. Service providers may retain limited operational records under their applicable retention settings and legal obligations.

Technical diagnostic upload and sharing initialize as ON unless you previously disabled them. You can disable future diagnostic upload and sharing at any time in Settings → Data & Privacy → Technical diagnostics. An explicit opt-out remains in effect across normal App restarts and updates. Disabling diagnostic upload and sharing does not remove the App's core remote-control functionality and does not disable bounded local diagnostic capture, which continues on your device. Those locally retained diagnostics are not uploaded or shared with Beam while diagnostic upload and sharing remain disabled. If you re-enable diagnostic upload and sharing, bounded local diagnostics still retained on your device may be uploaded under this policy.

Depending on where you live, including the EU/EEA, UK, and Türkiye, you may have rights to access, correct, delete, restrict, or object to processing; request data portability; withdraw consent where processing is based on consent; and lodge a complaint with the competent data-protection authority. In Türkiye, this includes rights under the KVKK and complaints to the Personal Data Protection Authority. Contact support@beamremote.app to exercise a right. Beam will assess and respond to requests as required by applicable law.

You can delete your Beam account in the App. Account deletion removes or de-identifies the account and associated personal account data, subject to limited records Beam must retain by law or for security, fraud prevention, or dispute resolution.

Account deletion also immediately removes the account relation from retained advertising-operation events.

User-linked diagnostic records are immediately subjected to the irreversible anonymization process described above rather than merely having the account ID removed. The anonymous technical compatibility facts remain and may be retained indefinitely, but they can no longer be associated with the deleted account or a person, household, installation, or TV.

Deleting a Beam account does not cancel an Apple App Store or Google Play subscription. Store subscriptions must be managed through the applicable store account.

Beam uses reasonable technical and organizational measures designed to protect information, including transport encryption, access controls, bounded diagnostic payloads, credential redaction, and defensive sanitization on both the App and backend. No transmission or storage method is completely secure.

Beam is not directed to children under 13 or the higher minimum age required by applicable law, and we do not knowingly collect their personal information.

Beam and its service providers may process information in countries other than your own. Where required, Beam relies on applicable safeguards for international transfers and provides further information upon request.

We may update this Privacy Policy and publish a new version in the App. Material changes are presented through the App's legal-version flow before continued use.

Beam is operated by EFE ÜNVERDİ, Pancarlı Mahallesi, Yunus Emre Caddesi, 27060 Şehitkamil/Gaziantep, Türkiye, the data controller for the App.

This document is governed by the laws of Türkiye without prejudice to mandatory consumer and data-protection rights in your country of residence.