Who is responsible
Voxoro AI UG (haftungsbeschränkt) is responsible for Calma Launcher and this website. In this policy, “we” means that company.
Voxoro AI UG (haftungsbeschränkt)Am Reitplatz 32
14624 Dallgow-Döberitz
Germany
contact@voxoroai.com
Use this contact for privacy questions and requests. Additional company information is available in our legal notice.
What this policy covers
This notice covers the current Calma website preview and Android app version 0.2.0. It distinguishes information stored on your television from requests sent to external services. Calma has no user-account system, advertising SDK, analytics SDK or automated crash-report upload in the current build.
The streaming apps you open, your TV operating system, app stores and backup services have their own privacy practices. Calma does not turn off or control their collection of information.
Visiting this website
This website is served at calma.voxoroai.com from a virtual machine on Google Cloud in the us-central1 region (Iowa, United States). Your browser sends your IP address, requested resource and normal connection/request information to that infrastructure so the website can be delivered securely over HTTPS.
Page content, images and videos are served from this website. Fonts use your device’s installed fonts. No third-party content or analytics requests are required. Weather and viewing entries in screenshots are demonstration content; the website does not contact the weather API or streaming services.
The web server keeps access and error logs for operation, troubleshooting and security. Access logs can include IP address, time, requested URL, response status, transferred bytes, referring page and browser user-agent. Error logs may include the request and connection details associated with a fault. The current server configuration rotates non-empty logs daily and retains up to 14 rotated files, with older archives compressed. This is a rotation limit, not a guaranteed 14-day deletion deadline: inactive log files and separately retained incident evidence may remain longer. These logs are not used for advertising or visitor profiling.
The legal basis for necessary website delivery and security is Article 6(1)(f) GDPR: our legitimate interest in providing this website, maintaining its security and investigating faults. This does not authorize optional tracking.
Hosting and international processing: website requests are processed in the United States. Google publishes a Cloud Data Processing Addendum describing processor duties and transfer provisions. The exact Google contracting entity, applicable account agreements, transfer mechanism and any additional provider logging must be confirmed against our hosting account; publication of this page is not confirmation that those contractual checks are complete. Contact us at contact@voxoroai.com for information about the safeguards applicable to your data.
Information used on your television
- Your setup: favorite app package names and order, background choice, requested weather city, weather cache, permission-prompt state and Home override preference are stored in the app’s private settings.
- Apps and sources: Calma queries installed launchable apps and TV input information, including input labels and connection state, to display and open the items on your home screen.
- Continue Watching: where available, Calma stores item identifiers, titles, subtitles, source app identifiers, resume links, artwork addresses, playback position, duration and update times.
These settings and viewing entries are not uploaded to a Calma account server. External artwork requests and platform backups are important exceptions to any assumption that all related information stays on the TV; they are described below. Calma does not request GPS, microphone or camera access.
Weather requests to Open-Meteo
The app sends the city name you enter to Open-Meteo’s geocoding service. It then sends the returned city coordinates to Open-Meteo’s forecast service. The provider also receives the connection’s IP address, request time and technical request information, including a Calma user-agent string. These are city coordinates, not a GPS measurement of your television.
Current behavior: weather loads automatically on startup and when the cached result needs refreshing. Berlin is the default before you choose a city. The cache freshness interval is 30 minutes; this is not a deletion deadline. This build has no separate weather-off switch, and no consent is inferred from an Android permission prompt.
The recipient is OpenMeteo GmbH, Hintere Schilligmatte 6, 6463 Bürglen (UR), Switzerland. Its published notice states that API logs may contain IP addresses and geographic coordinates and are deleted after 90 days. That is the provider’s stated period, not a Calma-controlled deletion guarantee. See Open-Meteo’s privacy information.
The proposed basis for this optional display is Article 6(1)(f) GDPR, with the interest of showing city-level weather without obtaining device location. The necessity and balancing assessment, and whether an opt-in or off switch is required, remain part of the pre-release review. This notice alone does not complete that assessment.
Continue Watching and artwork
With Android’s TV-listings permission, Calma reads entries exposed by the system Watch Next provider. Compatible apps can also send resume entries directly to Calma. Denying TV-listings access prevents that system import; it does not disable app-supplied entries. The source apps determine which titles and resume data they make available.
When a card contains an internet artwork address, Calma may load the image automatically as the card is displayed, before you select it. The image host and any redirect destination receive your IP address and request details. The requested address may identify a title or contain identifiers supplied by the source app. A local artwork address is opened through Android’s content system instead.
Recipients vary with the source app and the artwork address it supplies. Consult that provider’s privacy notice for its processing and retention. The current build does not offer a separate external-artwork consent switch or a verified recipient allowlist. Before release, these flows need a documented legal-basis and security review; granting Android TV access does not by itself authorize every third-party request.
Resume entries are used to display and reopen the content you choose. The proposed basis is Article 6(1)(b) GDPR where this is necessary to provide a feature you request under an applicable app-use agreement; optional external requests require a separate necessity or consent assessment.
Optional Home launcher override
If you enable Calma Launcher override in Android’s Accessibility settings, the service receives relevant window-state events from supported stock launcher packages and can filter remote key events to handle the Home key. It uses the event’s package and activity identity to bring Calma to the foreground. Other key events are passed through.
The service is configured not to retrieve window content. It does not inspect on-screen text, capture screenshots, click other apps’ controls, or record a history of remote-key presses or window events. Those events are not sent to Calma or a third-party server; the on/off preference is stored locally.
This feature is optional. You can turn it off in Android’s Accessibility settings or use Menu → Launcher settings → Home launcher → Restore Google TV Home. The proposed basis for handling events solely to provide this requested feature is Article 6(1)(b) GDPR where an app-use agreement applies. A separate, clear activation disclosure is still required before public release.
Backups and diagnostics
Android backup is currently enabled. Depending on the TV, platform and your account settings, app preferences and viewing entries may be included in cloud backup or device transfer. Whether a backup takes place, its recipient, storage location and retention are controlled by the applicable platform and your backup settings. Clearing the app’s local data does not necessarily erase a previously created backup.
Failed artwork loads can currently write the full artwork address and error details into Android’s diagnostic log. That address may contain viewing identifiers or tokens. Calma does not automatically upload these logs. They may nevertheless be accessible through privileged device diagnostics, developer tools or bug reports you choose to share. Review and redact diagnostics before sending them to anyone.
If you contact us
If you email us, we receive your address, message, attachments you choose to provide and associated delivery metadata. Our email delivery provider processes that correspondence to deliver and store it. Please send only information needed to explain your request, and avoid passwords, authentication tokens or unnecessary sensitive details.
The legal basis is Article 6(1)(b) GDPR for inquiries necessary for an existing or prospective contract, Article 6(1)(f) for our legitimate interest in answering other inquiries, and Article 6(1)(c) where we must handle a statutory request. Your email address and enough context are needed for a reply; providing unrelated personal information is not required.
Correspondence is retained only while needed to handle the inquiry and necessary follow-up, or where applicable legal retention duties or the establishment, exercise or defence of legal claims require longer storage. A verified mailbox provider and retention procedure must be recorded before public launch. Contact: contact@voxoroai.com.
Retention and your controls
- Local preferences and weather cache: kept until replaced or until you clear Calma’s app storage or uninstall it. The current build has no time-based cleanup for these preferences.
- Resume entries: the store is limited to 12 entries, with the latest per app shown. Entries may be replaced by a refresh, a newer entry or removal. There is no age-based deletion schedule.
- Hidden-item markers: removing a system card retains a local identifier/update-time marker so that the same item stays hidden. These markers have no automatic expiry.
- Artwork: downloaded images are cached in memory and the cache is cleared when the launcher view is detached or the app process ends.
- Provider logs and backups: follow the recipient’s retention practices, not the local app’s cache lifetime.
Remove a viewing card using the Continue Watching trash control. Revoke TV-listings permission in Android settings to stop future system imports; this does not automatically erase stored entries or stop updates sent by compatible apps. For a full local reset, use Android’s app settings to clear Calma’s storage. Disable the Home override and restore your usual launcher first. Manage existing backups separately through your platform settings.
Because this build has no per-feature switch for weather and external artwork, stopping its network requests currently requires stopping the app or restricting its network access through your device or network controls.
Recipients and international processing
The app’s external recipients are the weather provider, artwork/content hosts selected by the source apps, and any platform backup service enabled for your device. A streaming app you open receives the selected launch or resume request and then handles its own service. We may also use email service providers for correspondence or disclose information where a binding legal duty requires it.
Open-Meteo is based in Switzerland, which the European Commission currently recognizes as providing an adequate level of protection under Article 45 GDPR. That recognition does not establish the location or safeguards of every downstream service. See the Commission’s adequacy decisions.
The website’s United States hosting location is identified above. Contractual safeguards for that hosting account, variable artwork hosts, platform backups and email handling have not all been verified and remain part of the release review. We do not claim that all processing is confined to the EU or that a specific transfer agreement is already in place.
Your GDPR rights
Where the GDPR applies, and subject to its conditions, you may request access, correction, erasure, restriction and portability of your personal data. You may object to processing based on legitimate interests for reasons relating to your particular situation. If processing is based on consent, you may withdraw it for the future without affecting earlier lawful processing.
Write to contact@voxoroai.com. We normally respond within one month; any permitted extension will be explained within that period. We may request proportionate identity verification, but do not ask you to send unnecessary identity documents. We cannot remotely read or erase information held only on your TV; the controls above let you remove that local information. Requests concerning an independent provider’s records may need to be addressed to that provider.
You can complain to a supervisory authority, particularly where you live, work or believe a breach occurred. For our Brandenburg establishment, the authority is Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany. See its contact page.
Calma does not make decisions about you that have legal or similarly significant effects through automated processing, and does not build advertising profiles. No personal data is sold by the current Calma service.
Changes to this notice
We will update this notice when Calma’s actual data flows or deployment change. New purposes, optional tracking or consent-based features require their own assessment and, where applicable, a fresh choice. Posting a revised privacy notice is not a substitute for consent.
Version: 25 September 2026. The website-hosting description reflects the deployed setup; app and contractual review items remain open. This notice is not a GDPR compliance certification.