隐私政策
版本 1.0 · 最后更新 2026-10-25 · 生效日期 2026-10-25
1. 我们是谁
TV Remote（下称「本 App」）是一款在 iPhone 与 iPad 上通过家庭 Wi-Fi 遥控三星与 LG 智能电视的工具，由 Lu Li（下称「我们」）发布。我们是你使用本 App 时、本政策所述有限个人信息的处理者。
联系方式：support@gougou.me · 网站：https://gougou.me
2. 一句话说明
- 遥控指令只在你的局域网内传输。 指令从手机直接发到你的电视，不经过我们的服务器。
- 我们不运营账号系统。 使用本 App 不需要注册，我们不会收到你的姓名或邮箱。
- 电视列表与配对密钥保存在你的设备上。 配对密钥存放在 iOS 钥匙串中。
- 无广告、无第三方统计、无跨 App 追踪。 我们不使用 IDFA，不请求 ATT 授权，不出售个人信息。
- 唯一离开设备的数据，是发往你电视的遥控指令、你主动发给我们的支持邮件，以及你自己设置的设备备份。
以上仅为便于理解的摘要，具体以本政策正文为准。
3. 我们不收集的信息
| 数据 |
是否收集 |
| 你按下的按键、输入的文字或搜索内容 |
否（直接发往你的电视，我们不接收） |
| 电视画面、观看记录或应用使用情况 |
否（本 App 无法读取，也不收集） |
| 精确或粗略位置 |
否（本 App 不申请定位权限） |
| 相机、麦克风、相册、通讯录、日历、健康数据 |
否（本 App 不申请这些权限） |
| 姓名、邮箱、电话、通讯地址 |
否（你主动发邮件联系支持时除外） |
| 广告标识符（IDFA）或归因数据 |
否 |
| 上报给第三方的崩溃日志或统计数据 |
否 |
4. 本 App 在你的设备上处理哪些数据
以下数据仅保存在你的设备上本 App 的私有容器或 iOS 钥匙串中，我们无法远程读取。
4.1 电视档案
为让你不用每次重新连接，本 App 在本机保存每台已添加电视的：
- 名称、品牌、型号（电视提供时）、MAC 地址（可获取时）；
- 最近一次使用的 IP 地址（仅作缓存，路由器的 DHCP 可能改变它）；
- 该电视支持的能力、最近连接时间与收藏的应用。
4.2 配对凭据
三星电视的授权令牌、LG 电视的客户端密钥，以及某些电视使用的自签证书 SHA-256 指纹，只保存在 iOS 钥匙串中，不写入数据库、UserDefaults 或日志。移除电视或清除本地数据会一并删除。
4.3 局域网通信
本 App 使用 Bonjour 在本地网络中发现电视，并通过 HTTP 或 WebSocket 连接电视（三星通常为 8001 / 8002 端口，LG 为 3000 / 3001 端口）。若电视使用自签证书，本 App 会在你确认指纹后固定该指纹，之后只接受同一证书。
遥控指令、键盘输入的文字和应用启动请求会发送到你的电视。电视可能在其「已授权设备」列表中显示本 App 的名称（例如「TV Remote iOS」），并按电视厂商自己的隐私政策处理这些连接信息。我们不下发、不中转、不保存这些指令。
4.4 设置
是否显示唤醒与旧版发现的说明、引导页是否已读等偏好保存在 iOS UserDefaults 中，不含个人标识。
4.5 本机日志
连接失败等技术信息会写入 iOS 统一日志（os.Logger），不会自动发送到任何地方；日志不包含配对凭据。我们无法远程读取它们。
5. 权限
- 本地网络： 用于发现和连接同一 Wi-Fi 下的电视。若拒绝，本 App 无法工作。可在 iOS 设置 → 隐私与安全性 → 本地网络中随时关闭。
- Bonjour 服务： 系统据此在局域网内查找电视，不需要单独授权。
- 钥匙串： 用于安全保存配对凭据，受设备锁保护。
- 其他： 本 App 不申请相机、麦克风、相册、通讯录、定位或蓝牙权限。
6. 购买
本版本没有 App 内购买，也不收费。我们不收集任何支付信息，不接入订阅或购买服务商。
7. 离开设备的数据
| 接收方 |
目的 |
数据 |
合法性基础（EEA/英国） |
| 你的电视（局域网内） |
执行你按下的遥控操作 |
按键指令、你输入的文字、应用启动请求、连接时的设备名称 |
由你发起的操作 |
| 我们的邮件服务商 |
仅当你发邮件联系支持 |
你自行提供的内容 |
同意 / 正当利益 |
| Apple Inc. |
仅当你使用 iCloud 或电脑备份设备 |
按 Apple 隐私政策处理的设备备份内容 |
由你发起；Apple 按其政策处理 |
我们不接入任何分析、广告、崩溃上报或数据经纪服务，不出售个人信息，不将其用于跨场景行为广告。
8. 服务提供商
本 App 不接入第三方 SDK。iOS 自身（Bonjour、Network 框架与系统备份）按 Apple 的条款处理数据；电视厂商按其自身政策处理电视端的连接与操作记录。
9. 保存期限与删除
| 数据 |
位置 |
保存期限 |
| 电视档案（名称、IP、MAC、型号、收藏） |
你的设备 |
直至你移除该电视、清除本地数据或删除本 App |
| 配对令牌、客户端密钥与证书指纹 |
iOS 钥匙串 |
直至你移除该电视、清除本地数据或删除本 App |
| 设置与引导状态 |
你的设备 |
直至你修改或删除本 App |
| 遥控指令与输入文字 |
发往你的电视 |
不保存在本 App；电视端按厂商政策处理 |
| 支持邮件 |
我们的邮件服务商 |
最长 24 个月 |
10. 安全
配对凭据存放在 iOS 钥匙串中，受设备锁保护；本 App 不对凭据写日志。使用 TLS 的电视连接会按你确认过的证书指纹校验，指纹不符时拒绝连接。由于指令只在局域网内传输，且我们不运营中转服务器，主要风险在于你的 Wi-Fi 网络本身与他人是否可访问同一网络。建议使用有密码的 Wi-Fi，并避免在公共网络上使用本 App。
11. 你的隐私权利
根据你所在地区的法律，你可能享有访问、更正、删除、限制或反对处理、数据可携带、撤回同意，以及向当地监管机构投诉的权利。
由于我们没有账号、也不持有你的电视数据：
- 设备上的数据： 可在 App 内移除电视，或执行「清除本地数据」。
- 电视端的数据： 由电视厂商控制，请按其政策在电视设置中管理。
- 支持邮件： 可要求我们删除。
行使任何权利请发送邮件至 support@gougou.me。我们将在 30 天内答复（加州请求为 45 天），并可能需要验证请求。
EEA / 英国（GDPR / UK GDPR）： 我们的合法性基础为履行合同（提供 App）与正当利益（安全与改进）。你可反对基于正当利益的处理，并向所在国监管机构投诉。
加州（CCPA / CPRA）： 过去 12 个月我们未出售或共享个人信息，也不会明知而出售或共享 16 岁以下消费者的个人信息。你享有知情、删除、更正与选择退出出售/共享的权利，我们不会因你行使权利而歧视你。
中国大陆（PIPL）： 本 App 在你的设备与局域网内处理遥控数据，不向我们传输。你可联系我们行使 PIPL 项下的权利。
12. 跨境传输
我们位于 中华人民共和国。若你发邮件联系我们，邮件可能由位于其他国家的服务商处理；在需要时，传输依据标准合同条款或适用的充分性认定。除邮件与你自行使用的设备备份外，本 App 不向我们传输数据。
13. 儿童
本 App 不面向 13 岁以下（EEA / 英国为 16 岁以下）儿童。我们不会明知而收集儿童的个人信息。
14. 第三方链接
本 App 及本页面可能链接到 Apple 或其他网站，其隐私实践适用其自身政策，而非本政策。电视厂商的名称与图标归其各自所有者。
15. 政策变更
当 App 功能或法律要求变化时，我们可能更新本政策。新版本会标注新的「最后更新」日期；重大变更会在生效前于 App 内或本页说明。生效日之后继续使用即表示你接受更新后的政策。
16. 联系我们
Lu Li
邮箱：support@gougou.me
Privacy Policy
Version 1.0 · Last updated 2026-10-25 · Effective date 2026-10-25
1. Who we are
TV Remote ("the App") is a tool for controlling Samsung and LG smart TVs over your home Wi-Fi from iPhone and iPad, published by Lu Li (the "Developer"). We are the data controller for the limited personal data described in this policy.
Contact: support@gougou.me · Website: https://gougou.me
2. The short version
- Remote commands stay on your local network. They go from your phone straight to your TV and never through a server of ours.
- No account. You do not register, and we do not receive your name or email.
- Your TV list and pairing keys stay on your device. Pairing keys are kept in the iOS Keychain.
- No ads, no third-party analytics, no cross-app tracking. We do not use the Advertising Identifier (IDFA) and do not request App Tracking Transparency permission.
- What leaves your device: commands sent to your TV, a support email you choose to send us, and any device backup you set up yourself.
This is a summary; the rest of this policy explains the details.
3. What we do not collect
| Data |
Collected? |
| Keys you press, text you type, searches you send |
No — sent to your TV, not to us |
| TV screen, viewing history or app usage |
No — the App cannot read it and does not collect it |
| Precise or coarse location |
No — the App does not request location |
| Camera, microphone, photo library, contacts, calendar, health data |
No — the App does not request these permissions |
| Name, email, phone, postal address |
No — except when you email support yourself |
| Advertising identifier (IDFA) or attribution data |
No |
| Crash logs or analytics sent to third parties |
No |
4. What the App processes on your device
The data below is stored only in the App's private container or in the iOS Keychain on your device. We cannot read it remotely.
4.1 TV profiles
So you don't have to reconnect every time, the App stores on the device, for each TV you add:
- name, brand, model (when the TV reports it) and MAC address (when available);
- the last IP address used (as a cache — DHCP may change it);
- the capabilities the TV reported, the last connection time, and your favourite apps.
4.2 Pairing credentials
The authorisation token for Samsung TVs, the client key for LG TVs, and the SHA-256 fingerprint of a self-signed certificate (for some TVs) are kept only in the iOS Keychain — not in the database, UserDefaults or logs. Removing a TV or clearing local data deletes them.
4.3 Communication on your local network
The App uses Bonjour to find TVs on the local network and connects over HTTP or WebSocket (typically 8001 / 8002 for Samsung, 3000 / 3001 for LG). If a TV uses a self-signed certificate, the App pins its fingerprint after you confirm it and then accepts only that certificate.
Remote commands, text you type and app-launch requests are sent to your TV. The TV may show the App's name (for example "TV Remote iOS") in its list of authorised devices, and the TV manufacturer handles that connection information under its own privacy policy. We do not relay, store or have access to these commands.
4.4 Settings
Preferences such as whether you have seen the wake/legacy-discovery explanation and the introduction are stored in iOS UserDefaults with no personal identifiers.
4.5 Local logs
Technical information about failed connections is written to the iOS unified log (os.Logger) and is never sent anywhere automatically. The logs do not contain pairing credentials, and we cannot read them remotely.
5. Permissions
- Local Network — used to find and connect to TVs on the same Wi-Fi. Without it the App cannot work. You can turn it off in iOS Settings → Privacy & Security → Local Network.
- Bonjour services — the system uses these to find TVs on the local network; no separate permission prompt.
- Keychain — used to store pairing credentials securely, protected by the device lock.
- Nothing else — the App does not request camera, microphone, photo library, contacts, location or Bluetooth access.
6. Purchases
This version has no in-app purchases and costs nothing. We do not collect payment information and do not use a subscription or purchase provider.
7. What leaves your device
| Recipient |
Purpose |
Data |
Legal basis (EEA/UK) |
| Your TV (on your local network) |
To carry out the remote action you requested |
Key commands, text you type, app-launch requests, the device name used when connecting |
Action initiated by you |
| Our email provider |
Only when you email support |
What you choose to send |
Consent / legitimate interest |
| Apple Inc. |
Only if you back up the device to iCloud or a computer |
Device backup contents, handled under Apple's privacy policy |
Initiated by you; Apple acts under its own policy |
The App contains no analytics, advertising, crash-reporting or data-broker SDKs. We do not sell personal information and do not use it for cross-context behavioural advertising.
8. Service providers
The App has no third-party SDKs. iOS itself (Bonjour, the Network framework and system backup) processes data under Apple's terms. TV manufacturers process connection and command records on the TV under their own policies.
9. Retention and deletion
| Data |
Location |
Retention |
| TV profiles (name, IP, MAC, model, favourites) |
Your device |
Until you remove the TV, clear local data, or delete the App |
| Pairing tokens, client keys and certificate fingerprints |
iOS Keychain |
Until you remove the TV, clear local data, or delete the App |
| Settings and introduction state |
Your device |
Until you change them or delete the App |
| Remote commands and typed text |
Sent to your TV |
Not stored by the App; the TV handles it under its maker's policy |
| Support email |
Our email provider |
Up to 24 months |
10. Security
Pairing credentials live in the iOS Keychain behind the device lock, and the App never logs them. TLS connections to TVs are verified against the certificate fingerprint you confirmed, and a changed fingerprint is rejected. Because commands stay on your local network and we operate no relay server, the main risk is the Wi-Fi network itself and who else can reach it. Use a password-protected Wi-Fi and avoid using the App on public networks.
11. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, to withdraw consent, and to complain to a supervisory authority.
Because we have no account and hold no TV data:
- Data on your device can be removed by removing a TV or using "Clear local data".
- Data on your TV is controlled by the TV manufacturer; manage it in the TV's settings under their policy.
- Support email can be deleted on request.
To exercise any right, email support@gougou.me. We answer within 30 days (45 days for California requests) and may need to verify the request.
EEA / UK (GDPR / UK GDPR): our legal bases are performance of a contract (providing the App) and legitimate interests (security and improvement). You may object to legitimate-interest processing and complain to your local authority.
California (CCPA / CPRA): we have not sold or shared personal information in the past 12 months and will not knowingly sell or share that of consumers under 16. You have the right to know, delete, correct and opt out, and we will not discriminate against you for exercising those rights.
China (PIPL): the App processes remote-control data on your device and local network and does not transmit it to us. You may contact us to exercise your rights under PIPL.
12. International transfers
We are located in the People's Republic of China. If you email us, your message may be processed by service providers in other countries under standard contractual clauses or an applicable adequacy decision where required. Apart from email and any device backup you set up, the App transfers nothing to us.
13. Children
The App is not directed to children under 13 (16 in the EEA/UK). We do not knowingly collect personal information from children.
14. Third-party links
The App and this page may link to Apple or other websites. Their privacy practices are governed by their own policies, not this one. TV manufacturer names and icons belong to their respective owners.
15. Changes to this policy
We may update this policy as the App or the law changes. A new version will carry a new "Last updated" date, and material changes will be described in the App or on this page before they take effect. Continuing to use the App after the effective date means you accept the updated policy.
16. Contact
Lu Li
Email: support@gougou.me
