Privacy Policy

Effective date: October 21, 2026

Remoter is a remote desktop (RDP and VNC) client for Android, published by Andrei Tanas (“the developer”). This policy describes what information the app handles and where it goes. The short version: Remoter does not collect, transmit, or sell any personal data. If you subscribe to Remoter Anywhere, its relay handles the connection details described below in order to carry your connections, and it cannot see what you do in them.

Data stored on your device

Remoter stores the following information locally, on your device only:

• Connection settings you create (host names or addresses, ports, display options).
• Usernames and domains you enter for your connections.
• Passwords, if you choose to save them. Saved passwords are encrypted with AES-256 using a key held in the Android Keystore, which is hardware-backed on most devices.
• TLS certificates you choose to trust for your servers (certificate pinning).
• A small thumbnail of each saved computer’s screen, taken when you leave a session, which is shown in your list of connections.
• When you last connected to each saved computer.

None of this information is ever sent to the developer. If Android backup is turned on for your device, Android includes it in your device backup to your Google account, as it does for other apps, so that it can be restored on a new device; the developer has no access to these backups. Saved passwords are backed up only in encrypted form, and the key that decrypts them never leaves the original device, so after a restore you will need to enter them again. Screen thumbnails and your Premium purchase status are never included in backups.

Uninstalling the app, or clearing its data in Android settings, permanently deletes all of it from the device.

Network connections

For the computers you add yourself, Remoter connects directly from your device, using the RDP or VNC protocol. No server operated by the developer is involved, and your remote desktop session content travels only between your device and your remote computer. To find a computer by name, Remoter uses DNS and, on your local network, NetBIOS name lookups.

Remoter Anywhere

Remoter Anywhere is an optional subscription for reaching your computers from anywhere. You install Remoter Agent on the computer, which connects out to a relay operated by the developer on Cloudflare. Your phone connects to the same relay, and the relay passes the connection between the two.

• Your sessions are encrypted end to end. Everything you see and type in a session, including the passwords you sign in with, is encrypted between your phone and your computer, with keys exchanged when you pair them by scanning a QR code. The relay forwards this encrypted data and cannot read it.
• What the relay handles: the internet (IP) addresses of your phone and your computer, your computer’s Remoter ID (a code derived from its encryption key, not from anything about you), whether your computer is online, and when sessions start and end and how much data they carry. This is used only to make connections, to keep the service from being abused, and to troubleshoot it. Cloudflare keeps the relay’s request logs for at most 7 days.
• Checking your subscription: the app sends your Google Play purchase token to the relay, which asks Google whether your subscription is active. The relay does not store the purchase token. The access pass it gives your phone contains only a one-way code made from it, and expires within a day.
• Subscription limits: a subscription covers a set number of computers and of sessions at a time. To apply this, the relay keeps, under that one-way code, the Remoter IDs of the computers you connected to in the last 30 days with when you last did, and which sessions are open. A computer is forgotten 30 days after your last session to it.
• Usage records: for each session, the relay records under that one-way code when it ended, how long it lasted, how much data it carried and how it ended, and it records refused connections and subscription checks the same way. These records contain no IP addresses, no Remoter IDs and nothing from inside the session. They are used to watch the relay’s health and costs and to apply the fair-use terms, and the developer receives daily summaries of them. They are kept in Cloudflare Analytics Engine for about three months, then deleted automatically.
• Pairing: your phone creates an encryption key that never leaves it (it is held in the Android Keystore). Your computer stores the matching public key, and your phone’s name as set in Android, so that it can show you which phones are paired. Both are sent only to your computer, through the encrypted connection.
• Scanning the QR code uses Google Play services’ code scanner, which processes the camera image on your phone and gives Remoter only the code. Remoter itself does not ask for camera access.

Remoter Agent for Windows

Remoter Agent, the Windows companion app for Remoter Anywhere, stores on your computer only: its encryption key, the list of phones you paired (their names, public keys and when they were paired), and a log of sessions (when they started and ended, and which phone). It connects only to the Remoter Anywhere relay and to your computer’s own Remote Desktop or VNC server. It contains no advertising, analytics or tracking. Uninstalling it removes the app; its key and paired phones stay in C:\ProgramData\Remoter, so that reinstalling keeps your phones paired, until you delete that folder.

Clipboard

If you enable clipboard synchronization, clipboard content is exchanged between your device and the remote computer for the duration of a session. Clipboard data is never stored by the app beyond what is needed for the transfer, and never leaves those two endpoints.

Purchases

Optional Premium features are sold through Google Play, as a one-time purchase or as a monthly subscription, and Remoter Anywhere as a monthly subscription. Payment is processed entirely by Google; the developer never receives your payment details. The app keeps a copy of your purchase record, as signed by Google Play, on the device so Premium features work offline. For Remoter Anywhere, the relay checks your subscription with Google, as described above.

Analytics and advertising

Remoter contains no advertising, no analytics, and no tracking of any kind. The only third parties involved are Google, for purchases through Google Play Billing and for the QR code scanner (governed by Google’s privacy policy), and, for Remoter Anywhere, Cloudflare, which hosts the relay (governed by Cloudflare’s privacy policy).

Permissions

Remoter asks for the notification permission to show the status of active connections while the app is in the background. On Android 17 and later it also asks for local network access (listed by Android under Nearby devices), which it needs to reach computers on your Wi-Fi or local network. Network access is used solely to reach the remote computers you configure, for Google Play Billing, and, with Remoter Anywhere, to reach the relay.

Changes to this policy

If this policy changes, the updated version will be published at this address with a new effective date.

Contact

Questions about this policy or the app: support@remoter.ca