Your keyboard sees every password you type. Ours has no way to send them anywhere.
Somewhere on your phone is a torch that wanted your contacts and a notepad that wanted an account. We got tired of it and wrote our own. Twenty-one of them. Each one does its job and holds nothing it does not need for that job.
You do not have to believe that. Install one, open Settings › Apps › Permissions, and read what Android prints — that list is written by Google, not by our marketing department. The same lists are on our permissions page, read straight out of the built files with Android's own tools.
Notes zero permissionsKeyboard vibrate, and that is allGallery no internet permissionWeather no location permissionDictionary zero permissionsPhone no internet permission
Who this is for
Phones with no Google on them.
You wiped it and put GrapheneOS on, or Calyx, or Lineage, or /e/OS. Maybe the handset never had Play Services to begin with. You got the operating system clean and then went looking for a keyboard, and everything on offer wanted an account, a store, or a login. That is the gap this fills.
Nothing here needs Play Services
Not one of the twenty-one links a Google library it needs to run. Nothing signs into a Google account, nothing checks a licence with a store, and no app goes looking for a Play install it cannot find. On a de-Googled phone they behave exactly as they do on a stock one.
Installed and updated without a store
The download is an APK from this site. Updates come the same way, or point Obtainium at our release index and it watches for them itself — the same file, the same signature, no account anywhere in the chain.
Remote alerts go through NextPush
Clock is the only app that can be poked from outside. The file you download here is built without Firebase in it at all, so its alerts ride UnifiedPush — install NextPush, or ntfy, or point it at a distributor you run. The feature is off until you switch it on.
It suits three other people. Somebody whose phone shipped with apps that cannot be removed and still want the contacts. Somebody setting up a first phone for a child or a simple one for a parent, who will be the one asked why it is showing adverts. And somebody who once opened a permission list, did not like it, and kept using the app anyway because there was nowhere to move to.
Who it is not for. If you want your notes on your laptop by the time you sit down, your photos backed up somewhere warm, or a document three people edit at once, we are the wrong shop. Those things need a server holding your files, and we do not run one. Every app here works on the phone in your hand and stops there.
The rule
A calculator has no business holding a network socket.
Ours does not have one. Neither does the music player, the recorder, the gallery or the notepad — not as policy, but because the permission was never asked for, and an app cannot use what it was never granted. Every company on earth writes “we respect your privacy” on a page like this one. Nobody publishes the list.
AppEverything it is allowed to do
NotesNothing. The permission list is empty.
KeyboardVibrate. No internet — nothing you type ever leaves the phone.
CalculatorVibrate.
PlayerShow a playback notification and keep playing in the background. No internet.
RecorderUse the microphone and keep recording in the background. No internet.
FrequencyMicrophone, for the tuner and the level meter. No internet. Nothing is recorded.
GalleryYour photos and videos, and setting the wallpaper. No internet — your pictures cannot leave the phone.
DictionaryNothing. The permission list is empty — the whole dictionary sits inside the app.
ReaderNothing. The permission list is empty — books arrive through Android’s own picker.
TranslateNothing. The permission list is empty — the languages live on the phone.
FirewallSee your apps, see the network, keep running, restart after a reboot. No internet permission of its own.
MPInternet, for streams. Files come in through Android’s picker — no storage permission.
WeatherInternet, check the connection, restart the widget after a reboot. No location.
ClockVibrate, wake the screen for a ringing alarm, restart alarms after a reboot, exact alarms. Internet only if you switch remote alerts on — off by default.
EditorAll-files access, so your notes stay in the folder you already keep them in. No internet — what you write cannot leave the phone.
My FilesAll-files access — managing your storage is the whole job. Internet, for shares on your own wifi. Sees the app list for the storage cleaner, and can hand an APK to Android’s installer. No cloud, nothing talks out.
MessagesSend, receive and read texts, be handed picture-message notices, your contacts for names, phone state for the SIM, notifications and vibrate. No internet — a text can go nowhere but the number you sent it to.
CalendarNotifications, exact alarms, restart after a reboot, vibrate — what a reminder needs. No internet, and no access to any other calendar on the phone.
TaskRexNotifications, exact alarms, restart after a reboot, vibrate. No internet — your tasks stay on the phone.
PhoneYour contacts, your call log, placing and answering calls, and which SIM carries them. No internet permission — none of it can be sent anywhere.
WebInternet, plus camera, microphone and location held on behalf of the sites you visit — the app itself never uses them, and every site still has to ask you.
Where the job genuinely needs the network, it gets the network: a browser fetches pages, a video player pulls a stream, a forecast has to come from somewhere. What we will not do is hand a socket to an app with no use for one and then ask you to trust our intentions about it. Every line above is read off the built files by the same script that writes the permissions page, so it cannot quietly stop being true.
Start here
Nobody lies awake about a calculator.
They lie awake about the thing that reads every message they write. If you only ever take one app off this page, take the keyboard.
Every password you have typed went through a keyboard. Every card number, every message you thought twice about. It is the most privileged app you own, and the one almost nobody checks.
Vibrate only. This app holds no internet permission and no microphone permission. Android will not open a socket for it, so nothing you type has any way off the phone. Check it yourself: Settings › Apps › Keyboard › Permissions.
Sixty languages built in — switch on the ones you use, the spacebar cycles them
Autocorrect and suggestions run offline, from a dictionary in the app
Clipboard keeps everything you copy until you clear it
Undo/redo on the bar, password-manager fill, no ads on your keys
€9.99vibrate only
The rest of the line-up
Twenty more. The whole phone, covered.
Each is worth installing on what it does — gapless playback, request-level ad blocking, VLC’s engine, a widget that never asks for GPS. The boundaries come as standard. Tap one to open its page, or drop it straight into your suite.
Pages arrive with the ads, the trackers and the consent banner already gone. Not hidden after the fact — dropped before the page draws.
No account, no sync, no profile. The shield list is inside the app. The permissions it holds — camera, microphone, location — are held on behalf of the sites you visit, and every site still has to ask you.
For music you actually own. Point it at a folder and it builds the library itself — no scanning service, no account, no matching your collection against somebody's catalogue.
No internet permission. It reads the audio files you point it at and plays them. There is no catalogue to match against and no way to report what you listen to.
Built on VLC's engine and driven with one thumb. If it is a video file it plays, and you will not meet the words “unsupported format”.
No storage sweep. Files come in through folders you grant and Android's picker, so the app never holds a storage permission. Its one permission is the network, for the shares you add.
Your camera roll, on your phone and nowhere else. Albums, stories, favourites and a proper editor — with no internet permission under any of it.
Nothing is uploaded, scanned or matched. No internet permission, so no cloud, no face grouping on a server, no “memories” built from your pictures. The permission list is the photos themselves and the wallpaper.
PDF, EPUB, TXT and CBZ in one library. It remembers where you stopped and never asks you to sign in.
Zero permissions. Books come in through Android's own picker, so the app never holds a storage permission, and it holds no internet permission either. The file stays where it is; the library is a list of where.
Every file on the phone in your hands — browse, move, rename, search, and clear the junk out when storage runs tight.
No cloud, no account. The only network traffic it can ever produce is to the servers you add yourself under Network storage. Nothing about your files is sent anywhere.
Decide which apps get wifi and which get mobile data, one tap each. No root, no filtering, no logs — and no internet permission in the firewall itself.
Block-only, and it cannot phone home. It is a local VPN slot that drops packets for the apps you blocked. It holds no internet permission itself, so it cannot log, upload or fetch anything — check the permission list.
Contacts and dialler in one app. The whole contact on a single page, that person's call history under it, and the SIM you call on chosen with a tap.
No internet permission. It reads the phone's own contacts and call log, places the call on the SIM you picked, and holds no socket that could carry any of it away.
Alarms that ring when you set them to, even on a phone deep in Doze. Plus a world clock, a stopwatch and a timer.
Off means off. An alarm you set on this phone never needs the network. The internet permission exists only for the remote-alert carrier you can switch on, and until you do the app never opens a connection.
Type “rent every month” or “call Sam tomorrow 9am” and it lands with the date, the time and the repeat already set. Steps inside a task, a reminder on the minute, and nothing to sign into.
No internet permission — your tasks stay on this phone. The list is a file in the app's own storage; the only permissions are the notification, the exact alarm that carries it, and the restart hook that sets it again.
Your appointments, on this phone and nowhere else. The month on top, the day beneath, what is coming after that, and a widget on the home screen. Any calendar that exports an .ics file — a booking, a flight, your old Google calendar — comes straight in.
Nothing leaves the phone, and nothing on it is read. The app never touches any other calendar on the device, holds no internet permission, and keeps your events in its own file. The permission list is exactly what a reminder needs — the notification and the exact alarm — and not a byte more.
Text messages, the way the phone network carries them. Every conversation in one list, reply straight from the notification, names from your contacts if you allow it — and no internet permission, so a text can go nowhere but the number you sent it to.
A text goes to the number you sent it to and nowhere else. The app holds no internet permission, so nothing it reads — your texts, your contacts' names — can leave the phone. Picture messages are announced, not fetched: fetching them would need the internet.
Markdown and plain text, edited on the phone and saved without a single byte you did not type.
Your file comes back byte for byte. Line endings, tabs, trailing spaces and the missing final newline all survive a save — no reformatting, no metadata, no sidecar files, no internet permission.
A tone generator and a set of ears. Play a frequency, or measure the one already in the room.
Microphone only, no internet permission. The microphone is used for the tuner and the meter while they are on screen; there is no permission that could carry a recording off the phone.
The week ahead on your home screen, from an app that has never once asked where you are.
No location permission. You type the place; the app never asks the phone where it is. The one thing it fetches is the forecast for the places you saved, and Weather is free.
Freeno location permission
Build yours
Pick a few, or take the lot.
Tap an app above to build your set. The apps come straight from us — no app store in the middle — and every one runs free for fifteen days before the licence is needed.
1 · Buy the licence
Its link is in your inbox the moment the payment clears, and it sits on your account page permanently, so losing the email costs you nothing.
2 · The apps come to you
Your link lists them to download, the moment the payment clears. Open the file and Android asks once whether to allow installs from your browser — after that it installs like anything else.
3 · One tap unlocks them
Open the link on your phone, tap Unlock, and every Suite app on it reads the licence from there. Nothing to type, it never asks again, and the licence covers two devices.
Your phone, as you want it.
Tap an app to drop it in.
Every other answer to this problem bills you monthly. A privacy VPN is €60 to €100 a year, for as long as you keep caring, and it does nothing whatsoever about the keyboard reading your messages. Pay us once and we are done. There is no second payment because we did not build anything that needs one.
Prices in
Fourteen days to change your mind. Say the word inside two weeks and the money goes back. No form to find, no questionnaire about why you are leaving, no offer of a discount to stay.
two devices
€0nothing picked yet — tap the apps you want
The Suite covers all of them, and everything we add later — .
That address was made for this order and nothing else, so nobody has to work out whose payment is whose. Your licence link is emailed on the first confirmation, and you can close this page as soon as it is sent. This quote holds for 40:00.
Not buying today? Audit the phone you already have.
We wrote down the seven questions we ask before an app goes anywhere near one of our phones — what to look for in the permission list, which permissions are worth an argument, and the three that almost nobody thinks to check. It takes about ten minutes on a phone you already own, it costs nothing, and you may not need us at the end of it.
One email with the audit in it, then roughly one a fortnight on the same subject — what an app can reach, what the platform actually enforces, what changed in Android this month. Unsubscribe link on every one, and we never pass your address to anyone.
Straight answers
The questions we actually get.
What does it cost?
Weather is free. The other twenty run from €2.99 to €9.99 each, which comes to €93.84 if you buy them one at a time. The Suite is €30 for all of them plus everything we add later. Either way it is one payment — no subscription, no renewal notice next year, and no screen inside an app asking you to upgrade.
How do I install them?
Android only, and they come from us rather than from an app store. Every app runs in full for fifteen days from its first launch, then the licence you buy here unlocks it for good; Weather is free for good. The permissions page lists every app's size, its SHA-256 and its complete permission list, read off the built file, so you can see exactly what you are installing before it reaches you. There is no iPhone version and we are not going to promise you a date for one.
Will they run on a de-Googled phone?
That is the phone they are built for. No app in the Suite links a Google library it needs to run, none signs into a Google account, and none asks a store to check its licence — the licence is a signed file your phone verifies on its own, offline. Install them on GrapheneOS, CalyxOS, LineageOS, /e/OS or any handset that never carried Play Services and they behave exactly as they do on a stock phone. Updates come from this site, and Obtainium can watch our release index and fetch them for you. The one outward-facing feature, the Clock's remote alerts, goes through UnifiedPush: the file we hand you is compiled without Firebase in it, so an alert reaches you through NextPush, ntfy or a distributor you run. If you ever install the Clock from Google Play instead, that build is a different file and does carry Firebase, because a phone from Play is already running Google's services anyway.
Do the apps phone home?
Fifteen of them cannot. Keyboard, Player, Recorder, Notes, Calculator, Frequency, Gallery, Translate, Dictionary, Reader, Editor, Phone, Messages, Calendar and TaskRex hold no internet permission, so Android refuses on their behalf — whatever you type, record, measure, photograph, translate, look up, read, text, plan or dial has no way off the phone. The Firewall holds none either. Web, MP and Weather use the network because fetching a page, a stream and a forecast is the job you bought them for, and Weather manages it without ever touching your GPS. My Files holds one for shares on your own wifi and talks to nothing else. The Clock holds one for remote alerts you switch on yourself; leave it off, which is how it ships, and it never opens a connection.
What is the key for, and what happens with updates?
The licence is what you are actually buying. Every app runs in full for fifteen days from its first launch; after that it opens on its Unlock screen until the licence is on the device. The apps download from the permissions page or from your link, and one tap on that page unlocks every one of them on that device — nothing to type, and a Suite app you install later reads the licence from the ones already there. It covers two devices, a reinstall on a device you already unlocked does not use the second one, and it lives on your account page for as long as you want it. Updates are the same download over the top of the old one; your licence does not expire and a new version never asks you to pay again.
What if I don’t like one?
Tell us inside fourteen days and the money goes back, on the app or on the whole set. No form to hunt for, no questionnaire, and we will not counter-offer you a discount to stay. If one of them is not for you we would rather know than keep your €3.99.
Why should I trust you rather than them?
Don’t. Trust is the wrong instrument here and asking for it is what everyone else does. What we have instead is a list you can read on your own phone, written by Android and not by us, and an app cannot use a permission it does not hold no matter what its owners intend. That is the whole argument. If the list ever stops matching what is on this page, you will not need us to tell you.
Who’s behind it?
A small crew in Ireland who got tired of watching a calculator ask for an account and an alarm clock report to head office. We are not a big company and there is no round of funding behind this — which cuts both ways, and you should weigh it. Everything we hold on you is on this page: your name, your email, and which apps you chose.
