1. Who we are
Royal Frame is developed and operated by Shai Tiri and is distributed under the HayotzerAI brand. HayotzerAI is a brand name and is not a separate legal entity.
The data controller is Shai Tiri, 37 Zamir Street, Arad, Israel. Privacy contact: shai7net@gmail.com.
This policy applies to the Royal Frame Android application, Windows desktop application and screensaver, associated websites and the online services used by them (the “Service”).
2. Information we process
Account information. When you sign in with Google, we receive your Google account identifier, email address and display name. We use them to authenticate you, identify you to authorized members of your household and attribute messages or sharing actions to the correct user.
Household information. We process household identifiers and names, memberships, roles and permissions to decide which people and devices may access, manage or control a Royal Frame Home.
Device information. For connected screens and controllers we may process a device identifier and name, platform, application version, device role, last-online time, connection status and approximate local media-cache size.
Pairing information. Short-lived pairing codes and pairing records connect a new screen or controller to a household.
Messages. We process a message's text, title, template, orientation, sender identifier, creation time and delivery state, including whether a screen received, displayed or acknowledged it.
Display and playback information. We process display settings, playlists, media order, hidden selections, playback state and remote-control instructions.
Media information. We may process file names, media types, file identifiers, download links, sharing and delivery status, small thumbnails and live screen-preview images.
Approximate location. If you enable the optional weather feature and grant permission, the app reads the device's last known approximate location. Coordinates are rounded to approximately area-level precision before being sent to Open-Meteo. We do not store location in our Firestore database.
Store information. Google Play and Microsoft Store may provide aggregate installation, performance or crash information under their own privacy policies. Royal Frame does not include an independent advertising, analytics or behavioral-tracking SDK.
3. How we use information
We use information to authenticate users; connect users, controllers and screens; manage households and permissions; transfer selected media; deliver messages and acknowledgements; synchronize playlists, settings and playback; provide optional weather; show screen status and previews; maintain security and reliability; diagnose errors; prevent abuse; process privacy requests; and comply with applicable law.
Where GDPR or similar law applies, the legal bases are performance of a contract, consent for optional permissions, legitimate interests in securing and maintaining the Service, and compliance with legal obligations. You may withdraw consent for an optional feature by disabling it or revoking its permission.
4. Photos, videos and Google Drive
Complete photographs and videos selected for remote transfer are uploaded to the Google Drive account authorized by the user. They are not uploaded to a full-size media server owned or operated by Shai Tiri or HayotzerAI.
Royal Frame requests the Google Drive drive.file permission, which permits access to files the application creates and files the user explicitly selects. It does not provide general access to unrelated Drive files.
To let a paired screen using a different Google account download selected media, Royal Frame may grant a selected Drive file “anyone with the link” read access. Anyone who obtains that unlisted, difficult-to-guess link may technically access the file while the permission remains active. Royal Frame stores the link in Firestore behind household access controls and supplies it only to authorized household members and paired screens.
Small compressed thumbnails and live screen-preview images are stored in Google Cloud Firestore so authorized household members can recognize playlist items and see what a connected screen is displaying.
Depending on the selected option, Royal Frame may delete its Drive copy after delivery or leave it in the uploader's Drive. The Drive owner may remove the file or revoke its permission. Deleting a Royal Frame account does not necessarily delete files remaining in the user's Drive or copies already downloaded to devices.
5. Service providers
- Google Firebase Authentication authenticates users and devices.
- Google Cloud Firestore stores and synchronizes household, device, message, media-transfer, preview, playlist and settings data.
- Google Firebase Hosting hosts legal, deletion and pairing pages.
- Google Drive transfers user-selected photographs and videos.
- Open-Meteo receives rounded coordinates only when optional weather is enabled.
- Google Play and Microsoft Store distribute the applications and operate store services.
These providers process information under their own terms and privacy policies. Information may be processed outside Israel or the user's country, including in the United States, subject to the provider's applicable transfer safeguards.
6. What we do not do
We do not sell personal information, share it with data brokers, display third-party advertising, use it for targeted advertising, track users across unrelated apps or websites, or use photographs, videos or messages to train artificial-intelligence models. We do not intentionally collect health, financial or biometric information.
7. Retention and deletion
Account, household and membership records are generally retained while the account or household remains active. Messages and acknowledgements remain until removed by an authorized user or household manager, the household is deleted, or account deletion removes or anonymizes them. Media-transfer records and thumbnails may remain while media is part of the household library. A live preview is replaced by a newer preview and may be deleted by a household manager. Pairing codes expire by design.
A verified deletion request starts an access-controlled process intended to remove the sign-in account, memberships and controller-device links promptly and no later than 30 days after verification, except where information must be retained for legal, security or dispute-resolution purposes. Shared households may remain available to their other users, with retained authorship information anonymized where appropriate.
Local media and files remaining in a personal Google Drive are not necessarily removed automatically. Users can delete those copies directly.
8. Security
Royal Frame uses HTTPS in transit. Access to household information is restricted through authentication and server-side Firestore rules. Pairing codes are temporary, and Google Drive authorization uses OAuth with limited scopes. No electronic service can guarantee absolute security.
9. User choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability, and may withdraw consent for optional processing. You may also revoke permissions, disable weather or location, disconnect a screen, sign out, stop the Android overlay, remove local media, revoke Drive sharing or request account deletion.
Requests may be sent to shai7net@gmail.com. We may request reasonable information to verify identity. EEA and UK users may complain to their local supervisory authority; Israeli users may contact the Israeli Privacy Protection Authority.
10. Application permissions
- Photos and videos: display selected media and prepare selected media for sharing.
- Display over other apps: optionally display the frame, widgets and household messages on Android.
- Notifications: show pairing, foreground-operation, message or screen-status information.
- Approximate location: optional weather only.
- Start at boot: let supported wall displays resume after restart.
- Internet and network: authentication, synchronization, media transfer, weather and requested online features.
11. Children
Royal Frame accounts and online services are intended for adults aged 18 or older. We do not knowingly collect personal information from children. Contact us if you believe a child created an account or information about a child was collected improperly.
12. Changes and contact
We may update this policy when features, providers, laws or data practices change. We will update the effective date and, for material changes, may also provide notice in the application or another appropriate channel.
Data controller:
Shai Tiri
37 Zamir Street
Arad, Israel
shai7net@gmail.com