Privacy Policy
1. Your data stays on your phone
Sidekey only changes system settings when you ask it to: it raises or lowers the system volume when you tap or swipe the side rail or slider, changes screen brightness when you use the brightness slider, draws a dark layer over the screen when the Dimmer is on, and turns the screen off or on when you press the power key or use Pocket wake. It does not read the content of your screen, does not use any Accessibility service, and does not collect personal data.
Pocket wake reads the proximity sensor only while the feature is on and the screen is off; the values are processed in real time on your device and never stored or sent. Sidekey does not use the camera, microphone, location, contacts, files or app-usage data. Your settings (rail position, size, style, slider and dimmer levels) are kept in the app's private storage on the device; cloud backup of that storage is disabled.
2. Permissions
- Display over other apps (SYSTEM_ALERT_WINDOW) — asked when you turn on the side rail; needed to draw the rail, the pinned slider and the Dimmer layer. The overlay window is only as big as the rail, so the rest of the screen keeps working.
- Foreground service (FOREGROUND_SERVICE, special use) — keeps the rail and Dimmer available while you use other apps, with an ongoing notification you can use to hide it.
- Notifications (POST_NOTIFICATIONS) — optional: the rail control notification and, for free users only, at most one short tip a day. You can turn them off.
- Modify system settings (WRITE_SETTINGS) — asked only when you open the brightness slider, to set screen brightness.
- Do Not Disturb access (ACCESS_NOTIFICATION_POLICY) — asked only if you choose the Silent ringer mode.
- Device administrator, “lock the screen” policy only — asked only when you turn on the power key, so it can turn the screen off. Sidekey uses no other admin policy. Some phones then ask for your PIN on the next unlock. You can remove it any time in Sidekey Settings (or Android Settings → Security → Device admin apps); remove it before uninstalling.
- Run at startup (RECEIVE_BOOT_COMPLETED) — restores the rail after a restart if you keep that option on.
- Vibration and wake lock — haptic ticks on the rail, and waking the screen for Pocket wake.
- Internet — ads, analytics, purchases and consent. No personal content is ever sent.
Sidekey does not request Accessibility, usage access, location, camera, microphone, contacts or storage permissions.
3. Analytics and crash reports (Google Firebase)
With your consent where required, we use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to fix crashes. We log anonymous events such as “paywall viewed” or “purchase completed”, plus device model, OS and app version, approximate region and an app-instance identifier. We never log your content; the app enforces this with an allow-list of event parameters. Crash reports contain the error type and stack trace only. Firebase Remote Config is used to tune paywall and ad settings.
4. Advertising (Google AdMob and Unity Ads)
The free version shows ads: one slim banner on the app's main screen, an occasional full-screen ad when you return to the app after saving a rail design or switching mode, and optional rewarded ads you choose to watch to unlock a Pro tool for a while. Ads never appear on the side rail, the pinned slider or the Dimmer, nor on permission screens, onboarding or the paywall, and never appear in the first two minutes of first use. Sidekey Pro removes all ads.
Ads are served by Google AdMob, with Unity Ads competing through AdMob mediation (bidding). These partners may collect the advertising ID, device and usage information and approximate location derived from your IP address to serve and measure ads. See Google's and Unity's privacy policies.
5. Your choices (GDPR, UK GDPR, Swiss FADP, US state laws)
In the EEA, the UK and Switzerland, Sidekey asks for your consent through Google's consent message (IAB TCF) before personalised ads or analytics are used. If you decline, ads are non-personalised and analytics stays off. In US states with privacy laws (such as California, Virginia, Colorado), you can opt out of the “sale” or “sharing” of personal information and targeted advertising. You can change your choice at any time in Settings → Privacy choices.
Legal bases (GDPR): consent for analytics and personalised ads; performance of a contract for the features you use and for purchases; legitimate interest for crash diagnostics where consent is not required. You may request access, deletion, correction or portability of data we control, object to processing, or lodge a complaint with your supervisory authority. California residents (CCPA/CPRA): we do not sell personal information for money; ad partners may receive identifiers as described above, which you can opt out of in Privacy choices. We do not discriminate against users who exercise their rights.
6. Purchases
Subscriptions and the lifetime purchase are processed by Google Play. We never receive your payment details; Google tells the app whether Pro is active.
7. Retention and deletion
Your settings remain on your device until you clear them or uninstall the app. Analytics data is retained by Google for up to 14 months. See how to delete your data.
8. Children
Sidekey is not directed to children under 13 (under 16 in the EEA) and we do not knowingly collect their data.
9. Changes
We will update this page if our practices change and revise the date above.