Your account. Local TV control.
TVPilot uses Google sign-in for account backups and a direct local connection to control your TV. These serve different purposes.
Information in the account service
Google/Firebase identity identifies the signed-in account, including its account identifier and available email information. Firebase stores TV records under that account: a stable TV identity hash, model/manufacturer, Android and firmware details, and saved local connection address/port.
Saved customization includes the Home title/color, chosen dock apps, hidden apps and Continue Watching preference. Restore records can include installed package state baselines and the exact package, setting, permission, Home and companion-configuration values needed to reverse reviewed changes, with timestamps and operation progress.
Package choices can reveal which apps are installed or selected. These records are not public and are intended for the signed-in owner’s setup and restoration. Account data is not a live remote-control connection to your TV.
Information that stays on the phone
The phone’s ADB private identity is stored encrypted locally and is not uploaded to Firebase. Phone-local recovery journals, attribution and saved routing are retained separately so emergency recovery can remain available after sign-out.
Raw original historical-backup files imported through Android’s file picker stay on the phone. A validated typed restore journal can be saved to the account; the raw imported backup bundle is not uploaded.
TV data and streaming accounts
Your streaming accounts remain in their TV apps. TVPilot Home may read app-published TV resume listings when the reviewed permission is granted; availability and content depend on the provider. A launcher does not make a provider publish progress.
Optional third-party DNS
If you explicitly choose AdGuard DNS, this TV’s domain-name lookups are sent to the third-party service dns.adguard-dns.com across apps. That provider handles those DNS requests under its own policies. The option can affect playback and does not guarantee ad blocking. Previous DNS settings are recorded for Restore.
Sign-out, retention and deletion
Signing out is not account deletion. Account records remain until deleted through the account-deletion process. Phone-local recovery files are separate and remain on the phone after sign-out; removing the app or its local data removes those local recovery files and keys.
Deleting account cloud data can remove restore points and customizations. Restore any setup you need first, while the TV is reachable and debugging is authorized. A deletion request does not automatically erase files from an offline phone or reverse changes already made on a TV.
This website
These static pages do not embed analytics, third-party fonts or advertising. Your browser requests page assets, release metadata and a release APK from the site’s host when used; the host may process ordinary request information. The APK download is enabled only after release metadata and file-integrity checks.