GTD TV Studio — Privacy Policy

Effective date: 10 May 2026 · Last updated: 4 July 2026

This page covers GTD Launcher, GTD Plugin for Emby and GTD Setup (collectively, "the apps"), all developed and published by GTD TV Studio.

Short version: we do not collect, transmit or sell any personal data. Everything you configure stays on your device. The launcher does send anonymous crash reports and basic app-usage telemetry to Google's Firebase service so we can fix bugs and understand which features are used — never any content of your library, searches or credentials. Optional features that talk to third parties (Google Drive, Emby, TMDB, football APIs, the weather widget, YouTube search) only do so when you enable or use them, and you control the credentials.

1. Data we collect about you

The GTD Launcher uses Firebase Crashlytics and Firebase Analytics to receive anonymous crash diagnostics and basic usage telemetry. The GTD Plugin for Emby and the GTD Setup companion include neither and collect nothing.

What's transmitted from the launcher:

Crashlytics — when the app crashes: stack trace, native crash dump, device manufacturer + model, Android version, free memory at the time of the crash, app version, an anonymous installation UUID (regenerated when you uninstall). No account, no email, no library content, no search queries.
Analytics — anonymous app-instance ID, country (derived from IP, not stored), app open / session events, app version, OS version, device brand + model. Used to see things like "how many users updated to the latest version" or "is the new search screen actually used". No personal identifiers.

Both can be disabled at the OS level via Settings → Privacy → Usage & diagnostics on Android TV. There is no in-app toggle yet — we may add one.

2. Data the apps store on your device

What	Where	Why
Launcher preferences (themes, layout, banner sizes, focus effects, channel order)	Local SharedPreferences in the app's private storage	So your customisation persists across launches
Emby server URL, username, access token	Encrypted DataStore in the plugin's private storage	So the plugin can reach your Emby server
API keys you enter (TMDB, football-data.org, api-football.com)	Encrypted DataStore in the plugin's private storage	Optional integrations — none active unless you supply keys
Oppo player / Samsung soundbar IP addresses	Plugin SharedPreferences	Only used if you configure the Oppo remote feature
Premium purchase flag (boolean)	SharedPreferences	Cached so the app knows whether to show paywalls. Reconciled with Google Play on every launch

None of this leaves your device unless you enable cloud backup (see §4).

3. Permissions we request and why

Permission	Used for
`INTERNET`, `ACCESS_NETWORK_STATE`	Talking to your Emby server, optional TMDB / football APIs, Google Play Billing, the weather widget (approximate location from your IP), YouTube search, and (only if you enable it) Google Drive backup
`WRITE_EPG_DATA` / `READ_TV_LISTINGS`	Publishing and reading the home-screen channels (the rows you see on the launcher)
`POST_NOTIFICATIONS`	Football match start / goal notifications (only if you enable them)
`FOREGROUND_SERVICE`	Live football match polling so the goal notification fires reliably
`BIND_VOICE_INTERACTION`	Suppresses the system Assistant overlay so the launcher's own search/voice flow can run
`BIND_DREAM_SERVICE`	Provides the optional Emby-backdrops + Aerial screensaver
AccessibilityService	Optional features only: Oppo remote control, idle detection, custom remote-button mapping. The service does not read screen content beyond detecting key events you press
`CAMERA` (Setup app only)	The QR scanner pairs the mobile companion with the launcher on your TV. The Google Code Scanner SDK runs in-system; no images are transmitted

4. Third-party services

The apps integrate with several third parties, each optional and triggered explicitly by you:

Google Play Billing — used to verify Premium purchases. Governed by Google's Privacy Policy.
Google Drive API — only invoked if you enable Cloud backup. Stores a single JSON file with your settings in your own Drive's app-folder (the drive.appdata scope, which can only see that private folder — not the rest of your Drive). We never see it. Governed by Google's Privacy Policy.
Your Emby server — the plugin connects to whatever URL you provide. Communication goes directly between your device and your server.
The Movie Database (TMDB) — optional. Only called if you provide your own API key. TMDB privacy policy.
football-data.org / api-football.com — optional. Only called if you provide your own API key. Governed by their respective privacy policies.
Weather (launcher, optional) — if you enable the weather widget, the launcher looks up your approximate location from your IP address via ipwho.is (over HTTPS) and fetches the forecast from Open-Meteo. No GPS / precise location, no account. Disable the widget to stop this.
YouTube (launcher) — when you use search, your query is sent to YouTube (Google) to return results. No account is used. Governed by Google's Privacy Policy.
Apple Aerials — the screensaver fetches publicly-available 4K nature videos hosted by Apple. No account, no identifier.
Firebase Crashlytics + Firebase Analytics (launcher only) — Google's crash-reporting and basic-usage-analytics services, used to fix bugs and understand which features are used. Data is anonymous (see §1 for the exact fields). Governed by Google's Firebase Privacy Policy.

5. Google Drive access (limited-use disclosure)

The optional Cloud backup feature in GTD Launcher requests the https://www.googleapis.com/auth/drive.appdata scope. This scope grants access only to a hidden, app-specific folder in your own Google Drive — it cannot read, list or touch any of your other files. We use it for a single purpose: to store and restore one JSON file containing your launcher settings, so you can move them between devices. GTD TV Studio's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or sell this data, and it is never used for advertising.

6. Data we sell or share

Nothing for advertising or to humans. The crash + usage telemetry described in §1 is processed by Google's Firebase pipeline strictly for the purpose of improving the launcher. We never sell, share, license or hand-off data to any other third party for advertising or analytics.

7. Children

The apps are not directed at children under 13. They have no age-verification because they collect no personal data in the first place.

8. Your rights

The crash + usage telemetry (see §1) is keyed only to an anonymous installation UUID and an anonymous app-instance ID — both regenerate every time you uninstall and reinstall, so there's no persistent link to your identity. You can wipe everything by uninstalling the app; for the cloud-backup feature, delete the JSON file from your own Google Drive's app folder. We hold no other personal data about you, so there's nothing else to delete, export or correct on our side.

9. Changes to this policy

If we ever change how the apps handle data, we'll update this page and bump the "Last updated" date. Material changes will also be highlighted in the in-app changelog.

10. Contact

Questions, issues or requests:

Email: gokukinto@gmail.com
GitHub Issues (after launch): linked from each app's Play Store listing