spekterm for Android — Privacy policy
Effective 2026-10-20.
spekterm for Android (“the app”) is the companion app of spekterm, the desktop workbench. It is open source: github.com/spekhq/spekterm-android. It is available on Google Play.
The app sends nothing to its developer or to any third party. It has no account, no server of its own, no analytics, no advertising and no crash reporting.
Connections
Section titled “Connections”The app connects only to the computer running spekterm that you paired it with, or, while you pair, to the addresses in the pairing link or QR code you chose. It connects over your local network, Tailscale, or a port you forward. The connection is encrypted with TLS, and the app accepts only the certificate of the desktop you paired (its fingerprint comes from the pairing code), so no one in between can read it, including the app’s developer.
What goes to your desktop
Section titled “What goes to your desktop”The replies you type, your answers to an agent’s questions or permission requests, and the photos, PDFs and text files you attach go only to that desktop. What happens to them there is decided by your spekterm and the agent tools you run on it: an AI coding agent may send them to its AI provider, under that provider’s terms. Before sending, the app copies an attachment into its own cache (converting HEIC photos to JPEG); the copy is deleted when the app’s process ends. The desktop sends the app your sessions, conversations, inbox items and OpenSpec files to show you. The app keeps them in memory while it shows them and does not store them.
Camera
Section titled “Camera”The camera is used only to read the desktop’s pairing QR code. Frames are decoded on the phone and are neither stored nor sent.
On the phone
Section titled “On the phone”The pairing (the desktop’s addresses, its certificate fingerprint and a credential protected by the phone’s Android Keystore), a few preferences, and a connection log for troubleshooting stay on the phone. They are excluded from Android backup and device transfer. The connection log holds connection events, the desktop’s addresses and the outcomes of requests, not the text of messages, names or titles; it leaves the phone only if you share it yourself from Settings. Unpairing deletes the credential; uninstalling the app deletes everything it stored.
A link in the content the app shows opens in your browser or another app only when you tap it. The app itself loads no images or other content from the internet.
Permissions
Section titled “Permissions”| Permission | Why |
|---|---|
| Internet, network state | To connect to your desktop, and to retry when the network changes |
| Foreground service (special use) | To keep the connection to your desktop open, so its notifications reach you; you can pause it from its notification |
| Notifications | To tell you when an agent needs you, a handoff finishes or an inbox item arrives |
| Camera | To scan the pairing QR code |
| Run at startup | To reconnect after the phone restarts |
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION |
Added by the AndroidX library; keeps the app’s internal broadcasts private to the app |
Children
Section titled “Children”The app is meant for adults who develop software, and is not directed at children.
Changes
Section titled “Changes”A change to this policy is published on this page with a new date.
Contact
Section titled “Contact”Open an issue at github.com/spekhq/spekterm-android/issues, or write to the email address shown on the app’s Google Play listing.