Effective date: September 17, 2026
This Privacy Policy describes how Smartago LLC (“we”, “us”, “our”) handles information in connection with the Hotel & BnB TV Launcher application for Android TV (package com.hotel.bnb.smart.hospitality.tv.launcher, the “App”) and its companion web dashboard at hoteltvapp.com (the “Dashboard”).
The App is a home-screen replacement for televisions in guest rooms. It is designed for hotels, guest houses, bed & breakfasts and short-term rentals, and is installed and managed by the property owner or manager (the “Host”). It is not intended for personal home use. We comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
1. Who is responsible for what
Because the App is used by a business to serve its guests, two roles apply:
- For the Host’s own account and devices (the Host’s sign-in, the televisions the Host links, the App’s technical data) — Smartago LLC is the data controller.
- For information about guests that the Host chooses to enter in the Dashboard (for example a guest’s name, room and stay dates, or the Wi-Fi details shown on the room’s TV) — the Host is the data controller and Smartago LLC processes that information on the Host’s behalf, only to display it on the Host’s own televisions. The Host is responsible for informing guests as required by local law.
2. Information the App collects
2a. The television’s identity and status (technical data)
When a Host links a television to their account, the App stores in our Google Cloud Firestore database, under the Host’s account: an anonymous device ID created by Firebase Authentication; the television’s brand, manufacturer and model; the App’s version; the room label the Host assigns; a push-notification token (Firebase Cloud Messaging), so the Host can send settings and commands to that television from the Dashboard; and a “last seen” timestamp so the Dashboard can show whether the television is online. Linking uses a short-lived 8-digit code shown on the television; the code expires automatically.
2b. Activation and diagnostics (our own servers, no third-party analytics)
On first start the App registers the device with our server at api.smartago.net using a random device identifier, the App’s version, the device model and the country/language detected from the connection. If the App crashes or stops responding, it sends a diagnostic report (App version, device model, Android version, the technical error trace) so that we can fix the fault. These reports contain no account information and no screen content. The App does not include Google Analytics, Crashlytics, or any advertising SDK.
2c. Weather (approximate location)
To show the weather on the home screen, the App derives an approximate location from the device’s internet connection (not GPS) and sends only coordinates — never an account or device identity — to the third-party service Open-Meteo. The Host can also type a city by hand.
2d. Settings backup (optional)
The Host can back up the launcher’s settings to our server and restore them on the same or a replacement television using the device ID. The backup contains the launcher’s configuration only.
2e. Feedback (optional)
If the Host sends feedback from inside the App, we receive what they wrote, together with the device ID and App version, so that we can reply and reproduce the issue.
2f. Information entered by the Host in the Dashboard
The Host may enter details to be shown on a room’s television: the property’s name and logo, Wi-Fi network and password, house information, and guest details for the current stay. This information is stored under the Host’s account and delivered to the linked televisions. The App displays it; it does not analyse it or use it for any other purpose (see section 1).
3. What the App does not collect
- The list of applications installed on the television is read locally so the launcher can show and open them. It never leaves the device.
- The App does not read, record or transmit the content of any screen, and does not know what guests watch in Netflix, YouTube or any other application.
- The App does not access the television’s camera or microphone.
- The App has no advertising, no in-app purchases and no user-profiling of any kind.
4. Permissions and special services the App uses
The App asks for the following, and explains each one on screen before it is enabled:
- Accessibility service (“Home button service”). Used for one purpose only: when the HOME button is pressed, or the television’s stock home screen comes to the front, the service brings this launcher back so the room’s TV always returns to the screen the Host set up. To do this it receives hardware key presses and is told when another application’s window comes to the front. It does not read screen content, does not record what is watched, and does not collect, store or share any personal or sensitive data. It is enabled by the Host during setup and can be switched off at any time in the television’s Accessibility settings.
- Query all packages (app inventory). Required for the App to work as a launcher: to list and open the applications installed on the television. Processed locally, never shared.
- Display over other apps and run at start-up. So the launcher can appear when the television is switched on and so the parental-control lock can appear over other applications when a Host-set daily limit is reached.
- Usage access. Only if the Host enables the daily screen-time limit; it counts foreground time of applications on the device and is not transmitted.
- Device administrator / Device Owner (optional). A Host who owns the television may set the App as its Device Owner (a step the Host performs deliberately with the provisioning tools we provide; it never happens silently). This keeps the App as the home screen, restricts system settings on the guest-room TV, and allows the Host to sign guests out of streaming applications at check-out. It is never used to collect information.
- Network, Wi-Fi state and Bluetooth state. To show connection status and the battery level of connected remotes and controllers on the home screen.
- Notifications, foreground service. To keep a radio station the Host selected playing when leaving the launcher, and to run the optional screen-time limit.
5. How we use the information
- To link a television to the Host’s account and deliver the Host’s settings, house information and commands to it.
- To show weather and connection status on the home screen.
- To keep the App stable: diagnostic reports are used only to find and fix faults.
- To answer feedback and support requests.
We do not use any of this information for advertising, marketing or profiling.
6. Sharing
We do not sell, rent or trade personal information. We share information only with the service providers that make the App work, and only what each needs: Google (Firebase Authentication, Cloud Firestore and Cloud Messaging — hosting and delivery of the data described in section 2a and 2f), Open-Meteo (coordinates for weather, without identity), and our own hosting providers. We may disclose information where required by law.
7. Storage, security and retention
- All data is encrypted in transit (HTTPS / TLS). Firestore data is encrypted at rest by Google.
- Access to a Host’s data is limited to that Host’s authenticated account by Firebase security rules; the televisions can only read the documents of the account they are linked to.
- Television records and Host-entered information are kept for as long as the television stays linked or until the Host removes them in the Dashboard or deletes the account.
- Diagnostic reports and activation records are kept for operational purposes for a limited period and then deleted or anonymised.
- Link codes expire automatically and are removed.
8. Your rights and deletion
Depending on where you are, you may have the right to access, correct, delete or restrict the processing of your personal information. A Host can unlink or remove a television in the Dashboard at any time. To delete a Host account and every television and setting stored under it, or to ask about any data, see our data deletion page or write to support@smartago.net. Guests should direct requests about information a Host entered to that Host (see section 1).
9. International transfers
Our servers and service providers may be located outside your country. Where information is transferred internationally we rely on appropriate safeguards, including the providers’ standard contractual clauses.
10. Children
The App is a business tool for property owners and is not directed to children. We do not knowingly collect personal information from anyone under 16. The optional parental-control features are configured by the Host and operate on the device.
11. Changes
We may update this policy. The effective date at the top changes when we do, and significant changes are announced on our website or in the Dashboard.
12. Contact
Smartago LLC
5305 Limestone Road, Wilmington, DE 19808, United States
Email: info@smartago.net · Support: support@smartago.net · Website: hoteltvapp.com