Privacy By Design

1. Overview

This Privacy Policy explains how RemotePC by Breadworks (“RemotePC,” “the Software,” “we,” “us,” or “our”) handles information in connection with the Android App, the Windows Listener, and the website at remotepc.tech.

RemotePC is designed as a local-first remote control solution. All remote control communication occurs directly between your devices over your local network (LAN) and is not routed through external servers that we operate.

By downloading, installing, accessing, or using any part of RemotePC, you acknowledge this Privacy Policy. It should be read together with our Terms of Service, which govern your use of RemotePC generally and which this Policy is incorporated into by reference.

2. Definitions

Software

The Android App, the Windows Listener, related documentation and updates, and the Website.

Local Network / LAN

A private network not exposed to the public internet by default.

You / User

The person or entity using the Software.

Personal Data

Any information relating to an identified or identifiable natural person, as defined under Article 4(1) of the GDPR and analogous provisions of other applicable data protection laws.

3. Who We Are (Data Controller)

RemotePC by Breadworks is an independent, non-commercial project developed and made available by an individual developer operating under the name “Breadworks” (based in Athens, Greece). “Breadworks” is a project name used for RemotePC only — it is not a registered company, corporation, or other formal legal entity.

For the purposes of the GDPR and other applicable data protection laws, the individual developer behind RemotePC is the data controller for any personal data processed in connection with your use of the Software. You can reach us using the details in Section 19.

4. Scope of This Policy

This Policy applies to:

• The RemotePC by Breadworks Android App
• The RemotePC Windows Listener software
• The website at remotepc.tech

It does not apply to third-party services you choose to use alongside RemotePC — such as the Google Play Store or GitHub — which process data under their own privacy policies. See Section 10.

5. Data We Do Not Collect

RemotePC is built to minimize data processing. We do not collect, store, or transmit personal data to external servers.

• No personal information (e.g. name, email, location)
• No account data (no account system exists)
• No device identifiers or advertising IDs
• No usage analytics or behavioral tracking
• No remote session data leaves your local network

6. Local Data Processing

RemotePC processes data locally on your devices only, for functionality purposes, including:

• Network communication between your devices
• Input simulation (keyboard/mouse)
• Screen streaming within your local network
• File transfers initiated by the user

This processing does not involve servers operated by us and is not accessible to us. The current version of the Windows Listener also does not create or keep local logs of remote-control sessions.

7. Legal Basis for Processing (GDPR)

Where applicable under the General Data Protection Regulation (GDPR), the minimal, on-device processing described in Section 6 and Section 8 is carried out on one or both of the following bases:

• Performance of a contract (Article 6(1)(b)): processing that's strictly necessary to provide the remote-control functionality you've asked for by installing and using RemotePC.
• Legitimate interest (Article 6(1)(f)): where processing supports the core operation, stability, or security of the Software and doesn't override your rights and freedoms.

We don't rely on consent as a legal basis for this on-device processing because we don't collect the personal data in question in the first place — it never leaves your device or your local network. Where any narrow exception to that applies (for example, the GitHub update check described in Section 10), the relevant basis is noted there.

8. Android App Permissions

The Android App requests the following device permissions. Each is scoped to what's required for RemotePC's core local-network remote-control functionality — none is used for location tracking, advertising, profiling, or analytics of any kind.

Network & connectivity

INTERNET

Allows the app to open network sockets so it can communicate with your remote PC over the network.

ACCESS_NETWORK_STATE

Required for ConnectivityManager queries (allNetworks, getNetworkCapabilities, getLinkProperties) used by ServerDiscovery's VPN-aware channel selection.

ACCESS_WIFI_STATE

Required for reliable Wi-Fi state queries and for the multicast fallback strategy in ServerDiscovery (WifiManager.MulticastLock needs this to prevent the Wi-Fi radio from filtering multicast frames).

CHANGE_WIFI_STATE

Allows the app to modify Wi-Fi connectivity states when necessary for establishing or managing direct local network connections.

CHANGE_WIFI_MULTICAST_STATE

Works alongside ACCESS_WIFI_STATE to allow the app to acquire a multicast lock, ensuring incoming network discovery broadcasts are received.

ACCESS_LOCAL_NETWORK Android 17+ (SDK 37+)

Required for Android 17 (SDK 37+) Local Network Protections. Local network access (broadcast, multicast, unicast UDP/TCP to LAN addresses in both directions) is blocked by default and requires this permission.

Background operation & notifications

FOREGROUND_SERVICE

Required for running any background tasks as a foreground service with a visible notification (such as active connection or file transfer states).

FOREGROUND_SERVICE_CONNECTED_DEVICE

Specifically required by FileReceiveService using the connectedDevice foreground service type.

WAKE_LOCK

Required by FileReceiveService to hold a PARTIAL_WAKE_LOCK for its entire lifetime so Doze mode cannot suspend the CPU mid-transfer and stall or corrupt incoming file data.

POST_NOTIFICATIONS Android 13+ (API 33+)

Required on Android 13+ (API 33+) to post notifications, such as status updates during file transfers or connection states.

Storage & interface

WRITE_EXTERNAL_STORAGE maxSdkVersion 28

Used to save downloaded files. Marked with android:maxSdkVersion="28" because it only takes effect on Android 9 and below; MediaStore APIs handle storage writes on Android 10+ (API 29+).

VIBRATE

Gives access to the device vibrator for haptic feedback when interacting with controls or actions.

None of these permissions is used to collect analytics, build an advertising profile, or transmit data to us or to third parties. All network communication they enable occurs directly between your Android device and your Windows PC over your local network, consistent with Section 6.

9. Windows Listener Security Features

RemotePC is designed with a local-first security model. The Windows Listener, as the side accepting incoming connections, includes the following features to help protect data in transit:

These features are designed to reduce the risk of unauthorized access to data in transit, but they don't guarantee it in every case — for example if a feature is bypassed, misconfigured, or fails. Full disclaimers and liability limits for these features are set out in Sections 7, 12, and 13 of our Terms of Service.

10. Data Sharing & Third-Party Services

We do not sell, rent, or share any user data with third parties, and RemotePC does not integrate with third-party analytics, advertising networks, or cloud services — with the one limited exception below.

• Update checks: RemotePC may contact GitHub's public API to check for new versions. Like any internet request, this sends your device's IP address to GitHub, which processes it under GitHub's own privacy statement — we don't receive or store it. Nothing else is transmitted for this purpose.
• Google Play Store: if you downloaded the Android App from the Google Play Store, your use of that distribution channel is also subject to Google Play's own terms and privacy practices, which we don't control.

11. International Data Transfers

The only data leaving your device through your use of RemotePC is the request described in Section 10 that your Android App or Windows Listener may make to GitHub's API to check for updates, and any data you choose to submit through the Google Play Store. Both GitHub and Google are US-based companies that process data under their own privacy policies and applicable international-transfer safeguards.

We do not receive, store, or control this data, and we do not operate any servers of our own outside your local network to which your data could be transferred.

12. Data Retention

Since RemotePC does not collect or store personal data on servers we operate, we do not retain user data. Any data processed during use remains temporarily on your own devices and is controlled entirely by you.

Basic technical data (such as server logs for this website) may be temporarily retained by our hosting provider under its own retention practices, for security and operational purposes. See Section 16.

13. Your Rights (EEA / UK / GDPR)

14. California Privacy Rights (CCPA/CPRA)

15. Children's Privacy

RemotePC is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we don't knowingly collect personal data from children.

If you're using RemotePC on behalf of, or in the presence of, a minor, our Terms of Service require that you be their parent or legal guardian, or otherwise legally authorized, and that you accept both the Terms and this Policy on their behalf.

If you believe a child has given us personal information, contact us using the details in Section 19 and we'll take appropriate steps to address it.

16. Website

This website does not use analytics, tracking cookies, or advertising technologies.

Basic technical data (such as server logs) may be temporarily processed by the hosting provider for security and operational purposes (e.g. preventing abuse or diagnosing issues).

17. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in functionality, legal requirements, or improvements to the service — including changes to the permissions listed in Section 8.

Material changes will update the “Last Updated” date above and, where practical, be flagged in the app or on the Website. Continuing to use RemotePC after changes take effect means you accept them, to the extent the law allows; where the law requires your affirmative consent, we'll ask for it.

18. Governing Law

This Policy is governed by the laws of Greece (the Hellenic Republic), the developer's country of residence, consistent with Section 19 of our Terms of Service. If you're a consumer habitually resident in the EU, EEA, or UK, this doesn't take away the protection of mandatory consumer-protection or data-protection rules in your country of residence.

19. Contact

If you have any questions about this Privacy Policy, the permissions RemotePC requests, or our data handling practices, you can contact:

legal@remotepc.tech