GDPR Compliance
Last Updated: January 1, 2026
RemoteX is committed to protecting the personal data of users in the European Union and European Economic Area in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller
RemoteX acts as the Data Controller for the personal data collected through the App. For inquiries regarding data protection, please contact:
- Data Protection Contact: dpo@remotex.app
2. Legal Basis for Processing
We process your personal data under the following legal bases:
2.1 Contract Performance (Article 6(1)(b))
- Processing your account information to provide the service
- Managing your subscription
- Syncing subscription status across your devices
2.2 Legitimate Interests (Article 6(1)(f))
- Improving the App based on anonymous usage data
- Preventing fraud and ensuring security
- Providing customer support
2.3 Legal Obligation (Article 6(1)(c))
- Complying with tax and accounting requirements
- Responding to lawful requests from authorities
2.4 Consent (Article 6(1)(a))
- Marketing communications (where applicable)
- Optional analytics and crash reporting
3. Your Rights Under GDPR
As a data subject in the EU/EEA, you have the following rights:
3.1 Right of Access (Article 15)
You have the right to obtain confirmation whether we are processing your personal data and, if so, to access that data and receive information about how it is processed.
How to exercise: Email dpo@remotex.app with subject "Data Access Request"
3.2 Right to Rectification (Article 16)
You have the right to correct inaccurate personal data and to complete incomplete data.
How to exercise: Update your profile in the App or email us
3.3 Right to Erasure / Right to be Forgotten (Article 17)
You have the right to request deletion of your personal data when:
- The data is no longer necessary for the purpose it was collected
- You withdraw consent (where consent was the legal basis)
- You object to processing and there are no overriding legitimate grounds
- The data was unlawfully processed
How to exercise: Visit our Delete Account page or email dpo@remotex.app
3.4 Right to Restriction of Processing (Article 18)
You have the right to request that we restrict processing of your data in certain circumstances.
How to exercise: Email dpo@remotex.app
3.5 Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
How to exercise: Email dpo@remotex.app with subject "Data Portability Request"
3.6 Right to Object (Article 21)
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
How to exercise: Email dpo@remotex.app
3.7 Right Not to be Subject to Automated Decision-Making (Article 22)
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. RemoteX does not currently use automated decision-making.
4. Response Time
We will respond to your requests within 30 days. This period may be extended by 60 additional days for complex requests, in which case we will inform you within the initial 30 days.
5. Identity Verification
To protect your privacy, we may need to verify your identity before fulfilling your request. This may include:
- Confirming your email address
- Requesting additional information if needed
6. Data We Collect
| Data Category | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Email Address | Account creation, communication | Contract | Until account deletion |
| Device ID (anonymous) | Subscription management | Contract | Until account deletion |
| TV Device Info | Remote control functionality | Contract | Stored locally only |
| Usage Analytics | App improvement | Legitimate Interest | 26 months (anonymized) |
| Crash Reports | Bug fixing | Legitimate Interest | 90 days |
7. International Data Transfers
Your data may be transferred to countries outside the EU/EEA. When this occurs, we ensure appropriate safeguards are in place:
- Supabase: Uses servers with appropriate security certifications
- RevenueCat: Compliant with data protection requirements
- Standard Contractual Clauses where applicable
8. Data Protection Officer
For any data protection inquiries or to exercise your rights, contact our Data Protection team:
- Email: dpo@remotex.app
9. Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your EU/EEA member state.
10. Children's Data
RemoteX does not knowingly collect personal data from children under 16 (or the applicable age in your jurisdiction). If we discover that we have collected data from a child, we will delete it promptly.
11. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit (TLS/HTTPS)
- Encryption of data at rest
- Access controls and authentication
- Regular security assessments
12. Changes to This Policy
We may update this GDPR policy from time to time. Material changes will be communicated through the App or via email.
RemoteX