Privacy Policy

The Short Version

• Neither app has an account or advertising, we added no analytics or crash-reporting software of our own, and we run no servers for them. Two Google parts of the Android app, for purchases and code scanning, send Google diagnostics, which Google uses for analytics and to keep those parts working.
• Your deck, settings and keys stay on your phone and PC. The one exception is a weather tile's place, which is sent, rounded to about 10 km, to MET Norway for its forecast. We never receive any of it.
• The apps connect to your PC, to a Home Assistant server if you add one, to MET Norway if you add a weather tile, and to Google services on your phone for purchases, for scanning the pairing code and for finding the weather place you type. Nothing else.
• This website sets no cookies and runs no scripts.

What Stays on Your Phone

Keyperch keeps the following in its private storage on the phone. Other apps cannot read it, and none of it is sent to us.

• Your deck: pages, tiles, macros, the theme and the keyboard layout of your PC. That includes any text your macros type.
• Copies of the deck from your last 10 saves.
• Your settings, and the approvals you gave to tiles and macros.
• The PCs you paired with the Windows app, and the keys that secure that link. These are locked with keys held in Android's secure key storage (the Android Keystore) and are never backed up.
• A diagnostics log of app events, such as connections and errors, for troubleshooting. It does not record the keys you send or the text your macros type, and it is never backed up.
• A note of whether your Google account owns Pro, so Pro keeps working offline.
• If you add a weather tile, the place you chose and its last forecast. They are never backed up, and only the place's rounded coordinates leave the phone, as described under Weather Tiles.

Clearing Keyperch's storage in Android's settings, or uninstalling it, deletes all of it.

The Bluetooth Keyboard

The phone pairs with your PC through Android's and Windows' own Bluetooth pairing, and keys go straight from the phone to the PC. A Bluetooth keyboard can send keys but cannot read anything from the PC, so Keyperch never sees what you type there. Keyperch reads Android's list of paired devices to show your PCs and remembers which one to reconnect to.

Now Playing

To show what is playing, Keyperch asks for Android's notification access. Android grants that access in general terms, but Keyperch uses it only to find the media session that is playing. It reads the title, artist, album art and play state, shows them on the deck and passes your play, pause and skip taps back to that app. It does not read, keep or send your other notifications. Notification access is optional; media key tiles work without it.

Home Assistant

If you add a Home Assistant server, the phone talks to it directly at the address you enter. Nothing passes through us.

• A long-lived access token you paste is kept encrypted with a key from the Android Keystore. Removing it deletes it from the phone; to cancel it for good, delete it in your Home Assistant profile.
• Home Assistant keys never go into your deck, an export, a saved copy or an Android backup.
• A plain http address connects only on the Wi-Fi network where you set it up, so your key cannot reach a device on another network that happens to use the same address.
• Find Server looks for Home Assistant servers that announce themselves on your Wi-Fi. A server it finds only fills in the address box.

The Windows App and the Local Link

Keyperch for Windows is optional. When you pair it with the phone:

• The PC shows a code, the phone scans it (or you type the 8 digits shown under it), and both screens show the same 6 digits. Nothing is trusted until you confirm on the PC that they match, and, for a typed code, on the phone too.
• The link is encrypted, stays on your local network and never passes through the internet or our servers. Each side accepts only the device it paired with.
• The phone accepts the link only while Keyperch's deck or Settings is on screen. On the network it announces a random name, never your phone's name.
• The PC sends the phone its name, its keyboard layout and whether it is locked. It sends the live stats your tiles show only while those tiles are on screen, read from Windows' own counters.
• The phone sends the PC its screen size, text size and theme, whether it has Pro, which stats to show, and your deck when you choose to read it on the PC. A deck sent back from the PC arrives locked until you approve its changes on the phone.
• Remote actions start off for every phone. If you turn them on for a phone in the Windows app, the PC sends that phone the names of the apps, files and folders you added to its list, and the phone asks it to open one of those, or a web address, when you tap a launch tile. The phone never sends a file path, a program or a command, and the PC opens nothing while it is locked or while you have paused remote actions. The list stays on the PC, in Keyperch's folder described next.
• On the PC, the link's keys and your paired phones are kept in Keyperch's folder in your Windows user profile, encrypted by Windows for your account. The app also remembers its window position there. The Microsoft Store version keeps that folder in its own app storage, under %LOCALAPPDATA%\Packages in Keyperch's package folder, and uninstalling the app deletes it. Test versions installed without the Store keep it in %LOCALAPPDATA%\Keyperch. Deck files are saved only where you choose.
• The Windows app needs no admin rights, installs no driver and opens no listening port. Forget, on either device, ends the trust.

Weather Tiles

A weather tile is optional. It shows the forecast for one place you choose in Keyperch's Settings, under Weather.

• You type a city or town, and Keyperch finds it with Android's built-in place search. On phones with Google Play services, that search sends what you typed to Google, under Google's privacy policy. You can type coordinates instead, such as 39.96, -83.00, and then no search happens.
• Keyperch keeps the place's name and its coordinates, rounded to about 10 km, only on your phone. They are not part of your deck, so exports and shared decks never carry them, and Android backup leaves them out.
• While a weather tile is on screen, the phone asks MET Norway, the Norwegian Meteorological Institute, for that place's forecast over an encrypted connection. It sends only the rounded coordinates and the app's name, version and our contact address, which MET Norway asks every app to send. It sends no identifier. It asks no more often than MET Norway allows, usually every 30 to 60 minutes, and never while the deck is off screen.
• MET Norway sees your IP address, as any website does, and says it keeps IP addresses and the coordinates asked for in its logs.
• The phone keeps the last forecast in storage that is never backed up. Nothing about weather reaches us.
• Keyperch has no location permission and never reads where your phone is. The place is always one you type.

Weather data comes from MET Norway under the CC BY 4.0 license, as Settings says. MET Norway and MET Norway's privacy policy

Deck Files, Exports and Backups

• Export writes your deck to a file where you choose. The file holds your layout and macros, including any text your macros type, so treat it like any other document. It never holds Home Assistant keys, pairing keys, your Pro status or your weather place.
• Import reads a file you pick. Changed tiles and macros in it stay off until you approve them.
• If Android backup is on, your phone's backup to your Google account can include your deck and its saved copies. Home Assistant keys, PC pairings, approvals, the diagnostics log, the Pro note, the weather place and its forecast are left out.

Buying Pro

• Purchases go through Google Play. We never see your card or payment details.
• Google Play tells the app whether your Google account owns Pro. The app keeps that answer on the phone, so Pro works offline, and checks again with Google Play when the deck opens.
• Google Play shares order records with us, such as the order number, product, price, date and the buyer's country and region. We use them for refunds, taxes and our accounts.
• On the PC, Pro follows what the paired phone reports. No server checks your purchase.

Google Parts of the Android App

Two parts of the Android app come from Google and send Google diagnostics. We do not receive this data; Google handles it under its own privacy policy and uses it for analytics and to keep these parts working.

• Google Play Billing, for buying and restoring Pro. Each time Keyperch checks Pro with Google Play, which happens when the deck opens and when you buy or restore, the library tells Google how its billing calls went, with the app version and device details: model, Android version, country, mobile network code, language and time zone. Google Play handles payment details directly.
• Google's code scanner, used only when you scan the Windows app's pairing code. It runs inside Google Play services, so Keyperch has no camera permission and receives only the scanned code. Google says the image is processed on the phone and not stored. The scanner sends Google diagnostics and a random identifier for this installation.

Google's privacy policy and ML Kit's data disclosure

What the App Stores Tell Us

Google Play and the Microsoft Store give us totals such as installs, ratings and reviews. If your device shares usage and diagnostic data with Google or Microsoft, they can also show us crash and freeze reports for Keyperch. Those reports are about the app, and we use them only to fix bugs.

Android Permissions

• Nearby devices (Bluetooth connect and advertise): to act as a keyboard and to make the phone visible for pairing. Android 9 to 11 call this the Bluetooth permission.
• Notifications: for the notification, with its Stop button, that shows while Keyperch is your PC's keyboard.
• Foreground service (connected device): to keep the keyboard connected while the deck is not in front.
• Internet and network state: for Home Assistant and the Windows app on your local network, for weather forecasts from MET Norway, and to tie a plain http Home Assistant address to the Wi-Fi it was set up on.
• Notification access (optional): for now playing, as described above.
• Google Play Billing adds Google Play's billing permission.

Keyperch asks for no location, camera, microphone, contacts or storage permission. A weather tile's place is one you type.

This Website

keyperch.app has no cookies, analytics, ads or scripts, and it loads nothing from other sites. It is hosted by Vercel, which processes standard request details, such as your IP address, the page you asked for and your browser type, to deliver the site and protect it from abuse. Vercel's privacy policy.

When You Contact Us

If you email us, we keep your message and address to answer you and, for refunds, to find your order. If you ask to hear when the Windows app is out, we use your address only for that. We never add you to a mailing list you did not ask for.

Children

Keyperch is not directed at children under 13. We collect nothing from anyone, children included.

Your Choices and Rights

Your data stays on your devices, so you control it: export it, change it, or delete it by uninstalling the app. For a privacy question or request, email adam@upandadamco.com and we will reply within 30 days.

EU and UK residents. Where data protection law applies to you, Keyperch processes the information above on your own devices to provide the features you use. We process the little we do receive, your emails and Google Play order records, to answer you and to meet our legal and accounting duties. You can ask us to access, correct or delete it, and you can complain to your data protection authority.

US residents. We do not sell or share personal information, and we do not use it for advertising.

Changes to This Policy

If this policy changes, the new version will appear here with a new date at the top. If a change means more information leaves your device, we will say so clearly before it takes effect.

Contact

Email adam@upandadamco.com, or write to: