Your Mink experience stays personal.

This policy applies to Mink Launcher and MinkPad Pro. Both products are designed to process their information locally. Katoa Apps does not receive your launcher content, Bluetooth input, remembered hosts, or controller settings. Neither app has an account system, advertising SDK, analytics SDK, or Katoa Apps application server.

Information stored on your device

Mink Launcher stores launcher preferences, App Grid folders and choices, Quick Drawer choices, to-dos, the last five successful plain-text queries, approved document-folder references, widget configuration, messaging and app-bubble preferences, MinkSpace and launcher-keyboard preferences, and onboarding state locally. MinkSpace Calculator keeps a clearable local history. Memories stores references, display names, MIME types, order, and Android read grants only for media you explicitly select; it does not copy or upload the original files.

The Music mini-app reads Android's active media-session metadata, artwork, playback state, provider identity, and supported controls while in use. It does not record audio, request microphone permission, or retain listening history.

Mink Launcher disables Android cloud backup. The Google Play build may participate in Android backup and device-to-device transfer when enabled by your Android and account settings; Katoa Apps does not receive that backup.

MinkPad Pro

MinkPad Pro has no internet permission. It stores controller preferences, remembered Bluetooth host addresses and last-used times, selected host-system hints, onboarding state, and the phone's original Bluetooth name in app-private storage. This information remains on the controller device. MinkPad Pro does not retain the text, keys, pointer movements, or remote-control reports you send.

While a session is active, Android sends user-initiated keyboard, pointer, and remote reports directly to the currently connected host through Bluetooth HID. The receiving host can see the input you send, including passwords or other sensitive text. Software keyboard input is also processed by the keyboard app you choose under that provider's privacy terms. Katoa Apps does not receive the input or the host's response.

MinkPad Pro uses Android's Nearby devices and Bluetooth permissions to discover, advertise to, pair with, and connect to compatible hosts. Its connected-device foreground service and ongoing notification keep a user-started input session visible and available until you stop it. MinkPad may temporarily apply a compatibility Bluetooth name while it runs and restores the saved original name when it stops. Android owns the underlying Bluetooth bonds and pairing records.

Virtual Contact Card

The optional Virtual Contact Card stores its details, selected links, order, and optional processed photo in encrypted app-private files backed by Android Keystore. It is a contact card—not an app account or tracking profile—and is not sent to Mink servers or used for account management. QR codes are generated entirely on-device and omit the photo and fallback Mink icon.

Favorites

Favorites can show Android Contacts that you have starred and Mink-created integrated contacts. Android Contact names, phone numbers, photos, and contact records remain in Android's Contacts provider and are not copied into Mink Launcher storage or portable backups. Per-person route choices use an Android-generated contact lookup reference.

A Mink-created integrated Favorite stores the display name and the messaging or calling endpoints you select, such as an app shortcut, provider address, username, or phone number. These records and their ordering are kept in encrypted app-private storage backed by Android Keystore. They are not uploaded or used to create an account.

Portable backup

A backup you explicitly export is readable JSON. It can include portable settings, App Grid folders, Quick Drawer choices, launcher-keyboard preferences, MinkSpace order and enablement and full-screen shortcut, to-dos, Virtual Contact Card details and links, Mink-created integrated Favorites and their ordering, and widget restore recipes. Readable Favorite data can include display names, phone numbers, usernames, provider routes, and app shortcut identifiers.

Widget recipes contain provider package and component names, labels, layout position, and requested size. They do not contain Android widget IDs, live widget contents, or provider-specific configuration, and importing them does not clear widgets already set up on the receiving device. Backups also exclude permissions and roles, accessibility and notification access, Android Contacts and photos, document-folder grants, wallpapers, recent queries, calculator history, selected Memories media and URI grants, active media sessions, Work and Privacy Space state, device-specific private-area gateways, active bubble notifications, and the card photo.

Optional permissions and special access

Contacts: searches names and phone-number types when you use Text or Call. Results are not sent to Katoa Apps.
Phone: places a call only after you select a contact and confirm it.
SMS: sends carrier SMS only after you choose a contact and message action. Direct SMS is available only while Mink Launcher is the selected Android assistant. Carrier charges may apply.
Photos, video, and audio: searches MediaStore filenames and loads thumbnails locally when file search is enabled. Memories separately uses Android's picker for specific images, GIFs, and videos.
Selected folders: searches filenames only inside folders you explicitly approve through Android’s folder picker. Mink Launcher does not request broad All files access.
Notification access — Conversations: identifies active message and email notifications and supports provider-owned inline replies. Conversation content is transient and is not kept as a separate history.
Notification access — Music: authorizes Mink Launcher to query Android's active media sessions and send only controls advertised by the current provider. It does not inspect unrelated notification contents for music control.
App-bubble notifications: publishes a local notification only after you request an app bubble or choose an automatic app. The notification names the app but contains no Magic Box text or message content.
Usage access: calculates Mink’s Day screen-time observations locally. Katoa Apps does not receive this activity.
Accessibility: performs Android’s Lock screen action only after you double-tap the launcher. It does not read window content, observe typing, or perform gestures.
Assistant role: lets you open the Magic Box over another app. Mink Launcher does not request microphone input or screen context.
Android 15 hidden profiles: lets the active Home app show Private Space in a separate container. Mink Launcher reads only labels, icons, launch targets, and lock state exposed by Android; Android owns authentication.

Apps, Work profiles, and Privacy Space

As a launcher, Mink Launcher reads launchable app labels, icons, package identities, and developer-published shortcuts that Android makes available. Work Apps are displayed in a separate badged drawer. Android and the managing organization control that profile and its contents. Android Private Space apps remain outside regular search, shortcuts, and See All. A manufacturer-specific private-area gateway stores and opens only the device-owned target; Mink Launcher cannot inspect the apps inside it.

Network access and update checks

When optional GitHub update checks are enabled, Mink Launcher reads the latest public release tag from GitHub at most twice a day. GitHub receives ordinary connection metadata, but no launcher content is included. Mink Launcher does not download or install an APK and the check can be disabled in Settings. Opening a website or handing a query to Web, AI, weather, messaging, or another provider is a user-requested handoff governed by that provider's privacy terms.

Handoffs to other apps

When you choose Web, AI, a messaging provider, a calling provider, a note app, calendar, weather, selected media, or another installed app, Android hands the information you selected to that provider. Sharing or displaying a vCard QR also gives its selected details to anyone who scans or receives it. The recipient's privacy terms apply after the handoff. Mink Launcher does not receive the provider's response.

Contact

Questions can be sent to contact@katoaapps.com.

Effective November 6, 2026