Permissions

A launcher needs to know which apps are installed so it can display them. This is a standard requirement for any home screen replacement -- without it, your app list would be empty. This list is never uploaded, shared, or transmitted anywhere. There is no internet permission.

Only used if you enable contact search in the app drawer. When you type a name, your local contact list is searched to show matching results. Contacts are never read in the background, never cached, and never leave your device. This can be left disabled -- everything else works without it.

Only used if you enable the calendar events widget on your home screen. Upcoming events from calendars you select are displayed on screen. No calendar data is stored, cached, or transmitted. If you don't use the calendar widget, this permission is never accessed.

No photos are taken and no video is recorded. This permission exists solely to toggle the flashlight on and off from the Simple Tray quick settings panel. Android requires camera access to control the flash LED. If you don't use the flashlight toggle, the camera is never accessed.

No call history, phone number, or personal telephony data is read. This permission is used in Simple Tray to open the Android panel for toggling mobile data, airplane mode, and viewing your operator. Android requires this permission to access any telephony-related panels.

Used for the Recents screen to show your recently used apps and screen time statistics. This data stays entirely on your device -- there is no internet permission, so it cannot be sent anywhere. You grant this manually in Android settings, and can revoke it at any time.

Used for the Bluetooth toggle in Simple Tray and to display connected device status. No scanning for nearby devices or Bluetooth-based tracking occurs. The BLUETOOTH and BLUETOOTH_ADMIN permissions are only requested on Android 11 and below. On Android 12+, only BLUETOOTH_CONNECT is used, with the "neverForLocation" flag set so it cannot be used for location tracking.

Required to embed standard Android widgets (clock, weather, etc.) on your home screen. This is a protected system permission -- Android shows a confirmation dialog each time you add a widget. Widgets cannot be silently added without your approval.

Required for Android 15+ Private Space support. Allows displaying and launching apps in your Private Space when you unlock it. Private Space cannot be accessed without your explicit unlock action.

Used to expand or collapse the Android status bar.

Lets you uninstall apps from the app drawer context menu. Android always shows a confirmation dialog -- apps cannot be silently removed.

Enables PIN or fingerprint lock for individual apps or the settings screen.

Provides haptic feedback when interacting with certain UI elements.

Used for the brightness slider in Simple Tray. You grant this manually in Android settings.

Used for the Wi-Fi status indicator and toggle in Simple Tray.

Used for the volume slider in Simple Tray.

READ_MEDIA_AUDIO is used if you enable music search in the app drawer. READ_EXTERNAL_STORAGE is the equivalent permission for Android 12 and below. Wallpaper selection uses the system picker and needs no media permission. Your files are never browsed or indexed in the background.

Used to set wallpapers via the built-in wallpaper picker.

For home screen notification badges, Letters, Hub, or Simple Tray to work, Android notifications need to be read and forwarded to these screens. This is how the launcher displays your messages, calls, and alerts without you opening each app. Nothing is stored, logged, or transmitted -- notifications are shown and then discarded. You grant this manually in Android settings under "Notification access" and can revoke it at any time.

Allows third-party apps to pin shortcuts into inkOS, the same way they would pin to any other launcher.

Used for the optional accessibility service that enables actions like locking the screen, opening recents, or going back -- things Android only allows through accessibility APIs. No screen content is read, no keystrokes are monitored, and no activity is observed. The service only performs the specific action you trigger. You enable this manually in Android settings and can revoke it at any time.