iRta Phone — Privacy Policy

This is the English version of the iRta Phone Privacy Policy. If any conflict arises between this English version and another language version, the English version shall prevail to the extent permitted by applicable law.

Last updated: 2026-09-08 Effective date: 2026-09-08

1. Introduction

iRta Team ("we", "us" or "our") is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, and how we store, protect and share it when you use the iRta Phone mobile application (the "App").

iRta Phone is a remote-control viewer. You use it to sign in with your account and remotely view and control a computer (the "Device") on which the iRta desktop software is installed and running.

Please read this Policy carefully. By using the App, you agree to this Policy. If you do not agree, please do not use the App. This Policy applies together with our User Agreement, our Children's Privacy Policy and our Third-Party Service Sharing List.

2. Information We Collect

We collect only the information needed to provide the App and its features.

2.1 Account and sign-in information

• Email address: required to sign in. A verification code is sent to this email address to complete sign-in.
• Account identifiers and credentials: after sign-in, we receive an account short ID ("short_id"), a session token and a device token that identify your sign-in session and your device.

2.2 Device information

To establish and maintain the connection, we collect technical information about the device on which the App is running:

• Device UUID: a random identifier generated locally by the App to identify your installation. It is not derived from your device's hardware identifiers.
• Device info: operating system and version (e.g. "iOS 17" or "Android 14"), the device model name, and the App version.

2.3 Connection and usage information

• Peer ID ("peerjs_id"): a random identifier generated for peer-to-peer connection establishment.
• Connection data: connection status and, for diagnostics, connection mode (direct or relayed) and network address information.

2.4 Remote-session data (transient)

When you establish a Remote Session, the following data is transmitted between the App and the Device. This data is sent peer-to-peer (directly) or via a relay server, and is not stored on our servers:

• Screen content: the Device's screen, transmitted as encoded video.
• Audio: the Device's audio, transmitted as encoded audio for playback.
• Input events: your touch gestures, translated into mouse and keyboard input, sent to the Device.
• Clipboard content: text, images or files you copy or paste across devices when clipboard sync is enabled.
• Files: files you transfer between the App and the Device.

2.5 Information we do not collect

The App does not:

• collect your phone number, real name or national ID for sign-in;
• run advertising SDKs or advertising identifiers;
• use third-party analytics or tracking SDKs;
• send push notifications via third-party push services;
• process in-app payments; or
• sell your personal information.

3. How We Use Your Information

We use your information only for the following purposes:

• to provide sign-in and account services (email verification, session management);
• to maintain the device list and establish connections between the App and your Devices;
• to establish peer-to-peer connections (including NAT traversal);
• to keep the Services secure, detect and prevent abuse or fraud, and diagnose faults;
• to comply with applicable laws and lawful requests; and
• to communicate with you about the App (for example, support responses).

We will not use your personal information for any purpose not described in this Policy without obtaining your consent where required by law.

4. Legal Basis for Processing

Where data-protection law requires a legal basis, we process your personal information on one or more of the following grounds:

• Performance of a contract: processing necessary to provide the App and its features to you (for example, sign-in and connection establishment).
• Legitimate interests: processing necessary for security, fraud prevention and fault diagnosis, where such interests are not overridden by your rights.
• Consent: where you have given consent, which you may withdraw at any time.
• Legal obligation: processing necessary to comply with applicable law.

5. Local Storage and Cookies

The App stores a small amount of data locally on your device (in the App's private storage), including your sign-in credentials, language preference, device UUID and connection history, so that you do not have to sign in again each time. This data is stored only on your device and is not uploaded to our servers beyond what is described in Section 2.

The App is a native mobile application and does not use web cookies or similar browser-based tracking technologies.

6. How We Share Your Information

We do not sell your personal information. We share your information only as described below:

• iRta Team backend services: account and connection data (Sections 2.1 to 2.3) is processed by the backend services we operate to provide the App.
• Public STUN servers: when establishing a direct peer-to-peer connection, the App sends binding requests to public STUN servers (for example, stun.cloudflare.com or stun.l.google.com), which see your public IP address and UDP port. This is necessary for NAT traversal. See the Third-Party Service Sharing List.
• Relay (TURN) servers: when a direct connection is not possible, the connection is relayed through a relay server (operated by iRta Team or, if you configure one, by a relay you choose). Relayed session data is encrypted in transit and is not stored on the relay server.
• Legal and security: we may disclose information where required by law, in response to lawful requests, or to protect the rights, property or safety of iRta Team, our users or others.

7. Storage and Retention

We store your personal information only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. When information is no longer needed, we delete or anonymize it.

Remote-session data (Section 2.4) is transient by design: it is transmitted in real time and is not stored on our servers.

8. Security

We use commercially reasonable technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure or destruction. Control-plane communication is encrypted, and peer-to-peer session data is encrypted in transit.

Please understand that no method of transmission or storage is completely secure. You are responsible for keeping your sign-in credentials and email account secure, and for using the App only on devices and networks you trust.

9. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete or export your personal information, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. To exercise these rights, please contact us using the details in Section 12.

If you are located in the European Economic Area, the United Kingdom, California or another jurisdiction with data-protection rights, those rights apply to you to the extent provided by applicable law.

10. Children's Privacy

The App is not intended for children. We do not knowingly collect personal information from children under 14 (or under the higher age threshold required by applicable law). If you are a parent or guardian and believe your child has provided us personal information, please contact us and we will delete it. For details, see our Children's Privacy Policy.

11. Updates to This Policy

We may update this Policy from time to time. When we make material changes, we will notify you through the App or by other reasonable means. Your continued use of the App after an update takes effect means that you accept the updated Policy.

12. Contact Us

If you have any questions, concerns or requests about this Policy or your personal information, please contact us at report@irta.app, or through the feedback entry in the App.