Privacy Policy

For Castora (Android, package com.exo.castora) · Published by EXO Technologies Global Limited · Effective date: October 2, 2026 · Last updated: October 2, 2026

1. Who We Are

Castora (“the app”, “we”, “us”) is developed and published by EXO Technologies Global Limited, Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong. This Privacy Policy explains what information the app and its service providers collect, how it is used, and the choices you have. It applies to the Android version of the app (package com.exo.castora) distributed through Google Play.

2. Information We Collect

We do not ask you to create an account, and we do not collect your name, email address, phone number, contacts or precise (GPS) location. The following information is collected automatically by the SDKs built into the app:

The app does not send the photos or videos you cast, the contents of your screen, or the names of the TVs on your network to us or to these SDKs.

3. Casting, Your Media and the Local Network

Finding your TV. To show the TVs and receivers you can cast to, the app searches your local Wi-Fi network using standard discovery protocols (SSDP/UPnP for DLNA devices, and Google Cast discovery for Chromecast and Android TV). This discovery stays on your local network; we do not collect or upload the list of devices found.

Choosing media. You pick photos and videos through the Android system photo picker. The app can only access the items you select; it does not request broad access to your photo library or storage.

Streaming to your TV. When you cast a photo or video, the app makes that item available to your TV over your local network and the TV plays it directly from your phone. Your media is never uploaded to our servers or to the SDK providers listed in this policy. For Chromecast and Android TV, playback is handled by Google Cast under Google’s own terms and privacy policy.

4. Screen Mirroring

If you choose to mirror your screen, the app uses Android’s screen capture feature (MediaProjection). Screen capture starts only after you start it and confirm Android’s system prompt, Android shows that your screen is being shared while it is active, and you can stop it at any time. The captured screen is sent only to the TV you selected over your local network. It is not recorded or stored by the app, and it is not uploaded to us or to any third party.

5. How We Use Information and Legal Bases

• Showing ads: to request, serve, cap and measure ads, including personalized ads where you have allowed them (legal basis in the EEA/UK: your consent; for non-personalized ads, our legitimate interest in funding a free app).
• Analytics: to understand which features and screens are used so we can improve the app (consent where required, otherwise legitimate interest).
• Attribution and ad measurement: to learn which marketing campaigns lead to installs and to report ad revenue (consent where required).
• Stability: to detect, diagnose and fix crashes and performance problems (legitimate interest).
• Remote configuration: to turn features and ad placements on or off without shipping an update (legitimate interest).
• Security and fraud prevention: to detect invalid ad traffic and abuse (legitimate interest).

6. Advertising and Your Consent

The app shows ads served by Google AdMob, which may include banner, native, interstitial, app-open and optional rewarded ads. AdMob may fill ad requests through mediation partners, including AppLovin, Meta Audience Network, Pangle, Mintegral, Unity Ads, ironSource (Unity LevelPlay), Liftoff Monetize (Vungle), InMobi and Chartboost. These networks may use your advertising ID, IP address and device information to deliver and measure ads and, if permitted, to personalize them.

Consent (EEA, UK and Switzerland): before any ad is requested, the app shows Google’s consent message (User Messaging Platform) so you can accept or refuse personalized ads and related processing. You can change your choice later from the privacy options in the app’s settings.

Everywhere: you can reset or delete your advertising ID, or opt out of ads personalization, in your Android device settings (Settings → Google → Ads, or Settings → Privacy → Ads). Opting out does not remove ads, but they will be less relevant.

7. Service Providers and SDKs

Each provider processes data under its own privacy policy and, where applicable, as an independent controller.

8. Sharing and Sale of Information

We do not sell your personal information for money, and we do not share your photos, videos or screen content with anyone. Device identifiers, approximate location, app interactions and ad events are disclosed to the advertising and measurement providers listed above so that ads can be shown, measured and (with your consent where required) personalized. Under some US state laws this may be considered “sharing” for cross-context behavioral advertising; you can opt out as described in Advertising and Your Consent and Your Privacy Rights. We may also disclose information if required by law.

9. Data Retention and Deletion

Castora does not store copies of the media you cast or of your screen. App settings stay on your device until you clear the app’s data or uninstall the app. Data collected by the SDKs is retained by each provider under its own retention settings (for example, Firebase Analytics keeps event data for a limited period configured in our project). Because the app has no accounts, we cannot link SDK data to your name; to ask for deletion of data associated with your device, contact us with the details in Contact Us and reset your advertising ID.

10. Security

Data sent by the SDKs is encrypted in transit (HTTPS/TLS). Media and screen content you cast travel only over your local network to the TV you chose, so use a trusted Wi-Fi network when casting. On-device data is kept in the app’s private storage, which other apps cannot read. No method of transmission or storage is completely secure, but we use reasonable measures appropriate to the data involved.

11. Device Permissions

The app does not request access to your camera, microphone, contacts or precise location. Photos and videos are opened only through the Android system photo picker, and only the items you select.

12. Children’s Privacy

Castora is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from children. If you believe a child has provided information through the app, contact us and we will help remove it.

13. Your Privacy Rights

Depending on where you live (for example under the GDPR in the EEA/UK or under US state privacy laws such as the CCPA/CPRA), you may have the right to access, correct, delete or port personal information, to object to or restrict processing, to withdraw consent at any time, and to opt out of the sale or sharing of personal information or of targeted advertising. You can exercise these rights by using the privacy options in the app’s settings, your device’s ad settings, or by emailing us. We will not discriminate against you for exercising your rights. You may also complain to your local data protection authority.

14. International Data Transfers

Our service providers may process information in countries other than yours, including the United States and other countries where they operate. Where required, they rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

15. Changes to This Policy

We may update this Privacy Policy when the app or the law changes. We will post the new version on this page and update the effective date. Significant changes will be highlighted in the app or on its store listing.

16. Contact Us

EXO Technologies Global Limited
Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong
Email: admin@exo.ltd