Privacy policy

Who is responsible

Poti (the Android app, the Windows program and the server that connects them) is provided by Orlando Mina. For anything about your data, write to orminamadro@gmail.com.

What the server stores

Only what's needed to know which phone can control which PC:

• For each PC: a random identifier, the Windows computer name, a fingerprint (hash) of its key and the date it last connected.
• For each paired phone: a random identifier, the phone's model name, the PC it's paired with, a fingerprint of its key, the pairing date and the date it last connected.
• Keys are never stored in plain text, only their fingerprint.

What goes through the server without being stored

While you use the app, the server relays between your PC and your paired phones the names of apps with sound, their icons, volumes and mute state, what's playing (app, title, artist and artwork) and the commands you send from your phone. None of this is stored or sent to anyone else.

The server also sends your PC's program the list of phones paired with it (the model name, the pairing date and whether the app is connected), so you can see and remove them.

The server uses your IP address only in memory, to limit pairing attempts and the number of connections, and doesn't store it. Its technical log records when a PC connects or disconnects and when a phone is paired, forgotten or removed, with its random identifier, without IP addresses or names.

All communication is encrypted (secure WebSocket over TLS).

What's stored on your devices

On your phone, in its secure storage: the pairing key, the PC's name and your preferences (theme, color and whether apps that aren't playing are shown).

On your PC, in the %APPDATA%\Poti folder: the computer name and the PC's key, encrypted with your Windows user.

What it's used for

Only so your phone can control your PC's sound. Poti has no ads or analytics, and doesn't sell or share your data with anyone. The basis for processing it is providing the service you ask for when you use the app.

How long it's kept

When you use “Forget this PC” in the app, or “Remove” in Poti's window on your PC, that phone is deleted from the server right away. PCs and phones that don't connect for 180 days are deleted automatically.

Where the server runs

The server runs on a virtual private server rented by the person responsible, whose provider acts as the hosting provider. The app is downloaded from this website and, once it's published, from Google Play, which follows its own privacy policy.

Your rights

You can ask to access, correct or delete your data, or to restrict its use, and you can object to its processing, by writing to orminamadro@gmail.com. To delete a phone, just use “Forget this PC” in the app or “Remove” on your PC. If you think your rights haven't been respected, you can complain to the data protection authority in your country.

Children

Poti isn't intended for children under 13.

Changes

If this policy changes, the new version will be published on this page with its date.