Privacy Policy
TVApplaunchЯ is an Android TV launcher. Most launcher settings, profiles, recently launched apps and selected wallpapers stay on your TV. This page also covers the optional TVApplaunchЯ website and Pro services.
TVApplaunchЯ is the product brand. Doc Squiffy Ltd. (registered as DOC SQUIFFY LIMITED in England and Wales, company number 14602932) is responsible for the personal information we use to provide these services. Our registered office is 37 Vulcan View, Bicester, United Kingdom, OX26 4AD. Use Support or write to the registered office for privacy questions or requests. Basic support does not require Pro. Read this notice alongside our Terms of Service.
What happens on your TV
- In sideload APK 1.3.66 and later, optional on-TV Fire TV Home setup asks for a temporary local VPN connection and ADB debugging approval to grant the launcher's one-time permission. It does not use an outside VPN server or turn on Home redirect automatically. Disconnect another VPN before the attempt and reconnect it afterwards. A bounded setup attempt stops its local connection when finished or cancelled. Setup status reports are stored locally in the app; you may choose to share a report with Support. Phone/computer setup remains an alternative, and firmware restrictions still apply. The Google Play edition is separate.
- The launcher stores your chosen settings, profiles, app arrangements, custom names, appearance choices and selected media in the app's private storage. Recent apps are limited to apps you open through TVApplaunchЯ. Your device provider's system backup may separately copy eligible app data according to your device settings.
- Weather is optional. After you enter a city, its name is sent to Open-Meteo to find coordinates and request weather. The app does not request precise device location. Remove the city to stop weather requests.
- When you activate or check Pro, your activation code or saved license token and an app-specific device identifier are sent to the TVApplaunchЯ service. Depending on app version and device support, the identifier is randomly generated for the installation or derived by hashing Android’s device/user identifier with the app’s namespace, so a reinstall on the same TV can reuse its activation slot. The raw Android identifier is not sent to our service. A factory reset or a different Android user can change the identifier. The token and app-specific identifier are encrypted in app-private storage with Android Keystore.
- On the Google Play edition, Google Play and RevenueCat handle optional in-app purchasing and purchase verification. TVApplaunchЯ uses the resulting purchase and entitlement status to decide whether to unlock Pro; it does not receive your full payment-card details.
- On the sideload/Fire TV edition, optional Home-button setup uses an Accessibility service only if you enable it. The Fire TV Home redirect observes foreground app/window identifiers and can respond to a held Menu key; it does not read screen text. Public builds do not record or upload an Accessibility event history. You can turn off the redirect and shortcut or disable the service in device Accessibility settings. The Google Play edition does not include this Fire TV Accessibility service. Android TV/Google TV installation guidance uses separate Launcher Manager setup, not an Android TV Accessibility fallback.
- Optional TV previews can read programme titles, app/package identifiers, artwork and launch actions from your TV's preview-channel listings. If you separately enable the recommendation-notification check and grant Android notification access, the app inspects notification category/package metadata and uses eligible streaming recommendation titles, artwork and launch actions. Notification access is broader at the operating-system level, but the launcher filters for streaming recommendations rather than personal-message notifications. These recommendation records are used locally and are not uploaded to Studio or our servers. You can disable the check and revoke notification access in your device settings. Third-party artwork requests may disclose your IP address to the artwork host.
- Local or portable backups can contain your settings and selected media. A portable export is not a transfer of your Pro entitlement, payment details or paired-device identity. Keep exported files private. Removing local app data does not remove a file you exported elsewhere.
Optional website, Studio and purchase services
If you buy a Pro code on the website, Stripe processes the payment. We use payment status and the contact details needed for code delivery, support and recovery; we do not store full card details. If you sign into Studio, a session cookie keeps you signed in. Layout drafts, backups, paired-device information, and files you explicitly save or upload are stored to provide those features. You can separately choose to send the installed-app list (names and package IDs) or copies of eligible installed TV app banners to Studio for a selected paired TV's preview. Banner copies are private to your Studio space, replace previous copies for that TV, and can be removed from Studio. They are not sent automatically. Sending a layout to a TV and restoring a backup both require your action and confirmation.
Stripe checkout email is used to send the purchased Pro code, support code recovery and non-sensitive support-reply alerts. Google Play does not share your purchase email with us. You may optionally add a recovery email in Studio; we send a verification link and only link the address after you confirm it. Verified recovery addresses can receive support replies as well as verification and code recovery emails. You can turn off support emails separately on the Support page. These addresses are not automatically added to marketing. Email delivery may be delayed or unavailable; you can save your code directly after website checkout.
When an authorised seller arranges included Pro access for a physical TV box, the seller may provide your recipient name, email address and order reference. We use these with seller, licence and delivery-status records to issue the included access, send the buyer information and handle support. This fulfilment record is separate from the Q11 interest list and does not automatically subscribe you to marketing. The seller's own privacy notice covers information they collect for the hardware purchase and physical delivery.
Optional emails and the Q11 waitlist
Update announcements are optional and separate from purchases and support. When you tick the consent box and submit your email address, you are subscribed immediately; no confirmation email is required. We record your address, the consent wording version and signup date, and retain confirmation dates for older signups that used email confirmation. Every announcement has an unsubscribe link; unsubscribing stops unsent announcements but does not change support settings. We retain an unsubscribe record to honour your preference. Contact us to request deletion. Email delivery uses Amazon SES; a message accepted by the provider is not a guarantee of inbox delivery.
The optional Q11 TVAppLauncher Box list is separate from general updates. Before launch it covers Q11 launch news, pricing, availability and the launch offer; after launch, new signups are asked to opt into latest news and new-product announcements. Existing consent is not automatically broadened. You join immediately after giving explicit consent and submitting your email address; no email confirmation is required. New signups are queued for an automatic thank-you email and an unsubscribe link. Repeat submissions do not create repeated welcome emails. Joining does not create an order or reservation, require payment, or reserve stock. The launch offer is 10% off either the introductory or regular device price, once per customer/account and email, for Q11/general-updates signups made before Q11 first launches, with no overall redemption cap. New post-launch signups do not earn this discount. We check signup timing against the first-launch cutoff and verified checkout email, and retain order discount-use records to prevent repeat use. Unsubscribing stops marketing without removing an earned signup benefit. We record which list and consent wording you chose alongside the consent details above, plus queued-message and delivery-attempt records. You can unsubscribe from either list independently; this cancels pending welcome/announcement emails for that list. A delivery already in progress may still arrive, and a message already handed to the email provider cannot be recalled.
Website customer accounts use Clerk for sign-in and verified email addresses. When Q11 website sales open, checkout will require a verified account. We associate your account with your order reference, payment status, delivery name and address, delivery phone number, destination and plug choice, accepted sales terms, dispatch and tracking information, and any device-support messages and replies. We use these records to process and track your order, arrange delivery, handle returns and device issues, and identify paid-device priority support. Necessary delivery information is shared with the supplier or delivery provider for fulfilment. Device support does not require a separate Pro code or marketing subscription. We do not automatically assign older guest orders to an account just because the email matches.
If you use Pro support tickets, we store your ticket messages, replies, ticket status and the associated Pro activation record so you can submit and track requests. Authorised support staff use Clerk authentication to access the staff dashboard and respond to tickets. Do not include passwords, payment-card details or other sensitive information in a ticket. Contact us using the developer contact details below to request access, correction or deletion of support information.
If you use optional AI features, your prompt and relevant selected appearance details are sent through Replit's AI service to the model provider used for the request, currently OpenAI for wallpaper generation. We store the resulting image and generation/credit records needed to provide the feature. Do not include sensitive personal information in a prompt. Selecting or applying an already saved image does not submit a new generation request. Providers process requests under their own applicable terms and privacy arrangements; this notice does not promise that every provider immediately deletes prompts or never uses them for other purposes.
Browser storage and website measurement
Essential session cookies support Studio and staff sign-in. They are separate from optional email consent. Browser storage also supports the preferences and purchase markers described below; blocking cookies or clearing site data may sign you out or reset browser preferences, but does not itself revoke Pro.
The website uses browser storage to remember when a Pro offer was shown and whether a purchase or active Studio session has already been verified, so repeat offers can be avoided. Temporary browser markers also help avoid counting the same purchase confirmation twice. These markers do not contain your activation code, email address or payment-card details. Clearing site data removes these browser preferences; they do not control your Pro licence.
When website analytics is enabled, Umami-style website measurement records page visits and interactions with Pro offers, pricing views, compatibility acknowledgements, checkout starts or failures, verified purchase confirmations and Q11 form submissions. Custom event properties describe the offer location, plan or outcome; they do not include activation codes, checkout session identifiers, email addresses or free-form messages. Website measurement is separate from the TV launcher and does not subscribe you to marketing emails. Browser/network information may be processed by the hosting or analytics service to provide measurement. Browser privacy controls can block measurement, and missing or blocked analytics does not prevent installation, signup or checkout.
Website advertising measurement
When a publisher enables measurement on a TVApplaunchЯ web banner, it reports visible banner loads and clicks to our website. We store the publisher hostname, placement label, banner size, campaign, event timestamps and a random identifier for that single banner load to avoid counting retries twice. This measurement does not use cookies, local storage, persistent visitor identifiers, account identities or full referring URLs. IP addresses are not stored in the advertising statistics; short-lived in-memory request limits help protect the collection endpoint. Statistics are approximate and do not identify unique people. This applies to web adverts, not an analytics SDK inside the TV launcher.
Q11 order fulfilment and urgent device support
For Q11 website orders, Doc Squiffy Ltd. remains responsible for its use of your information and seller obligations. Authorised staff can download a supplier spreadsheet containing the order reference/date, product, quantity, plug choice, recipient name and delivery address, and a delivery phone number where supplied. It uses our seller notification email, not your buyer email. Private Pro activation codes, card details, account passwords, support conversations and mailing-list preferences are not included in that supplier export. The owner passes the necessary delivery details to the overseas fulfilment partner and carriers so they can pack, dispatch and deliver the order; this is not permission for supplier marketing.
Verified payment creates the included hardware Pro entitlement and queues a purchase email to the verified checkout address. The code-bearing queued purchase message is encrypted at rest and available only to authorised delivery services and owner previews. Order/dispatch/refund messages are distinct from optional announcements. IPVanish and YouTube links in the purchase email are optional; the VPN affiliate relationship is disclosed. Visiting those external links exposes information such as your IP address to the destination under its own policies; we do not put your Pro code, email or order reference into the recommendation URLs.
Our account-based device-support service uses recorded payment/refund status to flag paid Q11 buyer issues as urgent and sort them ahead of ordinary device issues. This is queue priority, not an automated decision that removes consumer remedies or promises a response deadline. Completed refunds remove paid-order priority, not your access to records or statutory rights. You can contact us by email if account access fails, or challenge an incorrect priority/payment status.
Why we use information and our lawful bases
- Providing the service or carrying out a contract: processing purchases, issuing and verifying Pro, delivering requested Studio/sync/backup features, responding to support and arranging requested recovery or box-licence fulfilment.
- Consent: sending the separately selected general-update or Q11 launch emails, including the Q11 welcome email. You can withdraw that consent at any time using the relevant unsubscribe link or by contacting us, without affecting the lawfulness of earlier processing.
- Legitimate interests: keeping the service reliable and secure, preventing fraud and abusive requests, maintaining necessary support and delivery records, honouring unsubscribe preferences, and understanding service use where permitted. These interests are subject to your rights and do not override a legal requirement for consent.
- Legal obligations: keeping records required for accounting, tax, consumer-law obligations and lawful requests from authorities.
Network requests necessarily expose information such as an IP address to the receiving service. We use technical request logs and hashed rate-limit keys derived from email addresses or IP addresses, with request-window times and attempt counts, to protect signup, recovery and other endpoints. These keys are not treated as anonymous merely because they are hashed. We do not sell personal information. Pro/purchase checks use automated verification and abuse controls; contact us if you believe access or a check is incorrect.
Choices, service providers and international processing
You can use the free launcher without purchasing Pro or using Studio, weather or AI tools. You can remove a weather city, turn off optional Fire TV shortcuts, and remove local settings by uninstalling the app. Google Play, RevenueCat, Stripe, Open-Meteo and the AI service each process information required for the feature you choose under their own policies. The TV app does not include an advertising or analytics SDK and does not request broad storage or precise location access.
- Replit and its infrastructure providers: website/API hosting, databases, file storage, operational logs and AI-request routing.
- Stripe: website checkout, payment verification and payment-related contact details.
- Google Play and RevenueCat: in-app purchases and entitlement verification.
- Amazon Web Services / Amazon SES: customer-email delivery, recipient addresses, message content and delivery information.
- Clerk: customer and authorised staff authentication, verified sign-in email and session management, not the public Q11 mailing-list signup.
- Open-Meteo: optional city lookup and weather requests; no precise device-location permission is requested.
- OpenAI: requested AI wallpaper generation through Replit's AI service.
- Google Drive: encrypted off-site service-recovery archives where our backup system is enabled. This is an operational backup, not access to a customer's personal Drive account.
Information may also be shared with authorised sellers for the fulfilment or support they arrange, professional advisers or authorities where necessary, and a successor business if the service is transferred, subject to applicable data-protection duties. Third-party apps, stores and linked websites have their own practices; enabling a launcher feature does not give us control over them.
Some providers may process information outside the UK, including in the United States. Q11 direct fulfilment also involves an overseas supplier and international carriers receiving the minimum delivery information needed. A transfer to a separate overseas organisation may be a restricted transfer under UK GDPR and must have a valid legal mechanism, such as adequacy or appropriate safeguards with any required transfer-risk assessment; an exception can be used only where its actual legal requirements are met. We must establish the applicable arrangements before making a restricted transfer. A purchase, general privacy acknowledgement or this notice does not by itself waive those rules, and we do not claim an unsigned supplier agreement is already in place. Use Support or write to the registered office for actual recipient locations and applicable safeguards, or to request a copy or explanation. This notice is not a claim that all service data stays in the UK. See the ICO international-transfer guidance.
Q11 direct fulfilment is arranged with a supplier operating in China. When arranging an order, the necessary delivery information can therefore be sent to China as well as to carriers on the delivery route, subject to the international-transfer requirements above. Supplier fulfilment does not subscribe you to marketing or include your private Pro activation code.
How long information is kept and how it is protected
- TV-only data: stays in app/device storage until you change or remove it, clear app data or uninstall, subject to any separate device-provider backups and files you export yourself.
- Licences and purchases: retained while needed to provide continuing Pro entitlement, recovery and support, and afterwards where required for accounting, legal obligations, disputes or fraud prevention. An inactive TV does not automatically end a permanent licence.
- Studio files, layouts and backups: retained to provide the saved workspace and recovery features until you remove them through available controls or request deletion, subject to necessary legal/security records and recovery copies.
- Mailing lists: retained while subscribed to the selected list. After unsubscribe we retain the preference and necessary consent/delivery history to avoid resending, handle complaints and demonstrate the signup; a full deletion request is separate from unsubscribe.
- Support, fulfilment and technical records: retained for the time needed to handle the request, provide recovery, investigate delivery/security issues or meet legal obligations. Retention depends on the record's purpose rather than a single automatic deletion date for all data.
Access controls, HTTPS and protected application storage are used where applicable. Sensitive service tokens and selected email payloads are encrypted; this does not mean every stored field is end-to-end encrypted. Operational off-site backup archives are encrypted for service recovery. Deleted information may remain in restricted historical backups until their retention cycle ends; live deletion is not a promise that every recovery copy disappears immediately. No storage or transmission method is completely secure.
Your choices, rights and data requests
Use Support or write to the registered office to request access, correction, deletion, restriction or, where applicable, a portable copy of your personal information. No Pro purchase is required, and postal requests do not require an account. We may need proportionate proof that a request relates to your information; never send a password, full payment-card details or a private recovery key. We respond within applicable legal time limits and explain any lawful restriction or extension.
You can object to processing based on legitimate interests and to direct marketing. You can withdraw optional email consent independently for each list. Deletion may affect Studio, online recovery and support, while records needed for legal obligations or legitimate disputes may have to remain. Deleting a licence's online records is not the same as uninstalling the launcher or cancelling a purchase.
If you are unhappy with our handling of a privacy concern, you can complain to the UK Information Commissioner's Office (ICO), or the relevant data-protection authority where you live.
Children and changes to this notice
The online purchase, Studio, support and email-list services are not directed at children. Parents or guardians should supervise use of online features and purchases. If you believe a child has provided personal information that should not be held, contact us so we can assess and address it.
We update this page when the service or our data practices change and show the revision date above. Material changes requiring fresh consent will not be authorised simply by updating this notice. To remove TV-only information, clear app data or uninstall; this does not automatically delete online records or exported files.