Legal
RemoTune Privacy Policy
Effective date: October 11, 2026
This Privacy Policy describes how OllaAI ("RemoTune", "we", "us" or "our") handles information in connection with the RemoTune desktop and mobile applications, the website at https://remotune.app, the account service and related services (together, the "Service").
RemoTune controls media directly between your computer and phone on your own network. Media content stays on your devices. Limited technical, connection and control-operation statistics may be sent to our systems as described below; they are not needed to perform remote control.
1. Information that stays on your devices
The applications store settings and connection data locally, including paired-device names and identifiers, pairing credentials, network addresses and diagnostic logs. Media titles, artists, artwork, playback positions and the values used to control volume or playback are exchanged directly between your devices. We do not receive that content unless you choose to send it in a support request. Limited player classifications and successful command types may be reported as described in Section 2.
You can remove paired devices in the applications and delete local data by uninstalling them.
2. Information we may collect
Account information. If you sign in with an identity provider such as Google or Apple, we receive information the provider shares with us, which may include an account identifier, your name and your email address. We use it to create and maintain your RemoTune account and to determine your plan. We do not receive your provider password.
Plan and purchase information. When you continue to Kelviq checkout, we send your account name, verified email and a billing reference to link the purchase to your RemoTune account. Kelviq and its payment providers handle the payment. We retain customer, checkout, order, subscription and refund identifiers; plan, payment and refund status; amounts, currency and tax; paid periods and cancellation dates; and billing operation records including the acting account, selected reason and time. These records let us apply access, show purchase history and manage cancellations and refunds. We do not store full card details, billing addresses or raw webhook payloads.
Session and security information. To keep you signed in and protect your account, we generate session credentials and store them in a hashed form together with related timestamps.
Service operation and usage information. We collect desktop lifecycle events, successful mobile connections and successful remote-control operations to understand reliability and which device and player combinations are used. Reports contain a random desktop installation identifier, a domain-separated SHA-256 pseudonym derived from the mobile pairing identifier, desktop and mobile OS and OS versions, app versions, system language, mobile hardware model, event time, a fixed player and host classification, command type and whether the existing control path accepted the command or confirmed playback state. Relative time-jump commands also include their signed duration, such as -10 or +10 seconds. We do not send raw pairing identifiers, LAN computer identifiers, pairing or authentication credentials, media-session identifiers, media titles, artists, artwork, window titles, URLs, playback positions or volume/shuffle/repeat values in these reports. System volume operations are classified separately from media players. The identifiers represent app/device identities, not a count of people, and a mobile identity may survive reinstallation. Desktop start reports also include whether the saved account was verified as signed in, absent (guest), or could not be verified at startup. The account-related field in these start reports is limited to that membership state; no account identifier or authentication token is included. New connection and control reports do not include an account identifier. The existing signed-in desktop login statistics may be associated with an account. Windows crash reports contain the desktop technical information, a fixed diagnostic code and the Windows exit code, without crash dumps, raw logs or file paths. Reports are sent by the desktop in small, bounded, in-memory batches; failed or pending reports are discarded on delivery failure or exit, with no offline storage or retry queue. The Service continues to work locally if statistics cannot be sent.
Website analytics. We use Google Analytics to measure visits to the RemoTune website and clicks on desktop download and mobile store links. Download-click events include the target product category, platform, desktop release version and architecture where applicable, and the clicked URL. These events measure clicks, not completed downloads or app installations. When you visit these pages, Google may receive online identifiers, including cookie-based IDs, and technical information such as your IP address, browser and device information, page URL and referrer. We disable Google Analytics Enhanced Measurement and advertising features. Apart from the download and store-link clicks described above, we do not collect scroll or other outbound-link interactions for this purpose. Google processes this information under its own privacy policy.
Advertising information. The free plan may display advertising in the future. Advertising partners may then collect device identifiers and similar information to deliver and measure ads. We will update this Policy and, where required, ask for your consent before introducing advertising.
Communications. If you contact us, we keep the correspondence and any information you include.
3. How we use information
We use information to provide, maintain and improve the Service; to create and manage accounts and plans; to deliver updates; to secure the Service and prevent abuse; to respond to requests; to communicate with you about the Service; and to comply with legal obligations.
We do not sell personal information.
4. Legal bases
Where required, we process personal information on the basis of performing our contract with you, our legitimate interests (such as securing and improving the Service), your consent where we ask for it, or compliance with legal obligations.
5. Sharing
We share personal information with service providers that help us operate the Service, such as hosting, infrastructure, identity, payment, analytics and advertising providers, who process it on our behalf or under their own terms as described above. We may also disclose information when required by law, to protect the rights, safety or property of RemoTune or others, and in connection with a merger, acquisition or sale of assets.
6. International processing
We may process and store information in countries other than your own, including the Republic of Korea. Where required, we rely on appropriate safeguards for international transfers, such as adequacy decisions or standard contractual clauses.
7. Security
We use reasonable technical and organizational measures to protect information, including encryption in transit to our servers and hashed storage of credentials. Traffic between your own devices on your local network may not be encrypted, and RemoTune is intended for trusted networks. No system is completely secure.
8. Retention
We keep personal information for as long as needed for the purposes described in this Policy, including maintaining your account, complying with legal obligations and resolving disputes. Session credentials expire automatically. When you delete your account, we delete or anonymize associated information within a reasonable period, except where retention is required by law.
Raw usage and control-operation records are deleted after 90 days. Device identities that have not been observed for 90 days and connection relationships unused for 90 days are deleted. Daily aggregate statistics without account or installation identifiers may be retained longer for service operations.
Administration records are deleted after 365 days. Administrator sessions expire after eight hours and are revoked on sign-out or withdrawal of administrator access.
Billing transaction and operation records are retained separately for account entitlements, purchase support, accounting and legal obligations. Account billing sessions expire after eight hours.
9. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal information, to data portability, and to withdraw consent. To exercise these rights or to delete your account, contact us at support@olla.ai.kr. We may need to verify your identity. You may also lodge a complaint with your local data protection authority.
You can use the core Service without an account, sign out at any time, and revoke RemoTune's access from your identity provider's account settings.
10. Children
The Service is not directed to children under 13, or the minimum age required in your country. We do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
11. Device permissions
The mobile application requests permissions needed for its features, such as local network access to find and connect to your computer and camera access to scan a connection QR code. You can manage permissions in your device settings.
12. Changes to this Policy
We may update this Policy from time to time. We will post the updated Policy on our website and, for material changes, give reasonable notice through the Service or other means. The effective date above shows when this Policy was last revised.