Privacy Policy
Last updated: September 25, 2026
This Privacy Policy describes how Klebo Ltd ("Klebo", "we", "us"), a company registered in the Republic of Cyprus, handles information when you use the TV Gallery for Google Photos Smart TV application (the "App") and the pages at anytv.app/gallery (together, the "Services"). Klebo Ltd is the data controller. Contact: support@anytv.app.
The short version: the App shows photos you choose from your Google Photos on your TV. Your photos and sign-in credentials are never stored on our servers. The App uses Google Analytics for Firebase to measure app usage, without sending your photos, account details, or sign-in tokens to Analytics, and Sentry for crash reporting. Neither the App nor this website contains advertising, and we do not sell your data.
1. Information the Services process
1.1 Google account sign-in
You connect the App to your Google account using Google's device sign-in flow: you sign in on Google's own pages on your phone, and Google issues the TV sign-in tokens. These tokens are stored only on your TV. Our Klebo-operated OAuth endpoints forward sign-in, refresh, and revocation requests between your TV and Google. The token endpoint attaches the App's confidential credential where required. These endpoints process tokens and codes only while handling requests and do not store them. Application logs contain the timestamp, caller IP address, HTTP method, route category, status code, and response time. They do not contain query strings, request or response bodies, tokens, device codes, or Google account data. The caller IP is also used by an in-memory rate limiter. We use operational logs for security, abuse prevention, troubleshooting, and service operations, and retain them only as long as needed for those purposes.
1.2 Google Photos data
With your consent, Google grants the App read-only access to the photos and albums you explicitly select for this TV in Google Photos, via Google's interfaces built for photo-frame devices. The App can list your selected items and download those images to display them on the TV screen. The App cannot see the rest of your Google Photos library, and cannot add, modify, delete, or share anything in your account.
1.3 Basic profile and account-binding information
The App receives your stable Google account identifier (the profile
sub value), name, and profile picture. Your name and picture
are shown only in the TV's settings and menu so you can see which account
is connected. The identifier is not displayed; it is used to bind device
cleanup to the account that created the device and to prevent a pending
disconnect from deleting or revoking access under a different account.
Your email address is not stored or displayed by the App.
1.4 Data stored on your TV
The App stores locally on your TV: sign-in tokens; a profile cache containing your Google account identifier, name, and profile-picture URL; the TV's Google Photos device registration, including the Google-provided settings link and selected-source names and identifiers; a random setup request identifier; the device name you chose; and preferences such as slideshow speed. While a disconnect is incomplete, the App also stores a recovery record containing the target device, cleanup phase, and bound account identifier. This lets cleanup resume after a restart or sign-in expiry and verifies that it continues under the same Google account. While removal of an expired or mismatched saved sign-in is incomplete, the App stores a non-secret cleanup flag so it can block photo access after a restart and retry token deletion. If Google access has ended but the TV runtime cannot delete a local record, the App may replace the encrypted token with a non-credential tombstone and a pending-cleanup record with a non-secret completion marker. These markers contain no token, device identifier, or Google account identifier. If Google access is revoked but the device entry could not be removed, the App stores a warning until you begin a new setup. Photo images may be held temporarily by the TV runtime or its browser cache for display.
1.5 App usage analytics
The App uses Google Analytics for Firebase, provided by Google, to understand how the App is used and identify problems in setup and playback. Analytics is enabled automatically and has no in-app off switch. We send fixed event names for actions such as signing in, opening settings, and starting a slideshow, and fixed screen names. The SDK also processes an app-instance identifier, session and engagement information, app version, device and operating-system information, and approximate location derived from the network connection.
We do not send Analytics any photos, album or photo identifiers or names, selected-photo counts, Google account identifiers, profile information, device names you choose, sign-in tokens, or error-message contents. Advertising ID collection and advertising personalization are disabled. The App contains no advertising. For more about Google's processing, see How Google uses information from sites or apps that use its services.
1.6 Crash reporting
The App uses Sentry to report crashes and errors. Reports contain the error type, code location, app version, device model, operating-system version, device settings such as language and time zone, and a random installation identifier that is not linked to your Google account. The App also sends Sentry app session information, such as when a session started, how long it lasted, and whether it ended in a crash. Error messages, photos, account details, and sign-in tokens are excluded. Sentry processes these reports on our behalf; see Sentry's privacy policy.
1.7 This website
The pages at anytv.app/gallery contain no analytics, advertising, or third-party tracking scripts. To deliver and secure the pages, the hosting server necessarily processes standard request information such as your IP address, requested URL, date and time, browser or user-agent information, and HTTP status. Technical server logs may record this information for security, abuse prevention, troubleshooting, and service operations, and are retained only as long as needed for those purposes.
1.8 Support
If you contact us, we receive your email address, your message, and any information you choose to include.
2. How information is used
We use the information described above solely to provide the Services: to sign you in, to display the photos you selected on your TV, to show which account is connected, to bind device cleanup to that account, to recover an interrupted disconnect, to remember your preferences, to secure the Services, to understand and improve app usage and reliability through the analytics and crash reporting described in Sections 1.5 and 1.6, and to respond to support requests. We do not use your Google data for advertising, we do not sell personal data, and we do not share it with third parties except Google itself (as the provider of your account and photos, and the provider of Analytics as described in Section 1.5), Sentry (only the diagnostic reports described in Section 1.6), or where required by law.
3. Google API Services User Data Policy
The App's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is used only to provide the user-facing features described in this Policy, is never transferred to third parties except as necessary to provide those features or comply with law, and is never used for advertising or sold.
4. Retention and deletion
We retain no Google Photos or Google account data on our servers. Analytics data is processed by Google and retained according to our Google Analytics property's retention settings. Disconnecting your Google Photos account does not disable Analytics or delete previously collected analytics data. The same applies to crash reports held by Sentry. For requests concerning Analytics or crash reports, contact us at the address below. Local account, profile, and device data is kept while the connection is active and is cleared after a successful disconnect, a local-forget recovery, an unrecoverable sign-in expiry, or clearing the App's data. A pending-disconnect record is retained while remote cleanup is incomplete, including across a restart or sign-in expiry, so that the App can resume safely after renewed sign-in. A token-cleanup flag is retained only until the saved token is confirmed removed or replaced by a non-credential tombstone. An inert completion marker may remain when the TV runtime refuses deletion; it is ignored on restart and contains no user data. A successful disconnect tries to remove the TV's registration, revokes the Google OAuth grant, and clears the local account, profile, device, and recovery records; non-account preferences such as slideshow speed may remain until you clear the App's data. Google OAuth revocation removes all scopes the account granted to this Google Cloud project and can invalidate tokens issued to its other registered clients. If device removal fails, its Google Photos device entry may remain. If you forget local state or clear App data before remote cleanup finishes, the device or App access may remain and must be removed from your Google Account permissions page or from the connected-device controls in Google Photos. Technical request logs and support emails are kept only as long as needed for the purposes described in this Policy or to meet legal obligations.
5. Legal bases
Where EU data-protection law applies, we process personal data: to perform our contract with you (providing the App you asked for); with your consent, which Google collects on its consent screen when you connect your account (you can withdraw it at any time as described in Section 4); for our legitimate interests in operating and securing the Services, preventing abuse, and troubleshooting failures; and to comply with legal obligations.
6. International transfers
Your photos and account data are processed by Google under Google's own terms. Our OAuth endpoints may process transient authentication requests outside your country. Google may also process Analytics data outside your country under its applicable terms, and Sentry processes crash reports in the United States. Where required, such processing uses safeguards provided by applicable law.
7. Security
All communication between your TV, our OAuth endpoints, and Google uses encrypted HTTPS connections. The App's confidential credential is kept on our server, never on the TV. Sign-in tokens remain on your TV and are not transmitted to us for storage. No system is completely secure, but the design minimises what could be exposed: we do not retain your Google Photos content or sign-in credentials on our servers.
8. Children
The Services are not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, or port your personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority (in Cyprus, the Office of the Commissioner for Personal Data Protection). Because we store no Google user data server-side, most requests concerning your photos and account are best exercised directly with Google; for anything relating to us (for example support correspondence), contact support@anytv.app and we will respond within the timeframes required by law.
10. Changes to this Policy
We may update this Policy from time to time. The "Last updated" date at the top reflects the latest version. For material changes we will provide reasonable notice, for example in the App or on this website.
11. Contact
Klebo Ltd
SOHO Embassy, Omonoias Avenue 13
3052 Limassol, Cyprus
Email: support@anytv.app