Overkey
Privacy policy
Overkey puts modifier and navigation keys in a bar over the keyboard you already use. This page says what the app stores, what it sends, and what it does not. The short version is that nothing leaves the phone.
In effect from 12 September 2026
There are no accounts. The app never asks for your name, your email address, your phone number or your location, and there is nothing to sign in to.
What leaves your phone
Nothing. The app has no server and makes no connection to the internet. It has the
network permission for one reason: to open a connection to its own helper process on the
same phone, at the loopback address 127.0.0.1, which by definition cannot
reach another device. That connection carries the key presses you make on the bar to the
helper, which delivers them to the app in front, and the state of the volume keys back.
| What | Where | Kept |
|---|---|---|
| Key presses on the bar | The helper on the same phone | No |
| Whether a volume key is held | The app, from the helper | No |
What stays on the phone
Your settings: the theme, the opacity, the row height, where you dragged the bar, the grid calibration and the volume key bindings. A random token the app and the helper use to recognise each other, made up on first run and never shown. Whether root has been used once, so the app knows it may use it again to restore its own overlay permission. All of it lives in the app's preferences, and deleting the app deletes all of it.
The app does not read what you type. It does not see the text in the app in front of it, the contents of the keyboard, or what any key it sends does when it arrives. It has no accessibility service and cannot read the screen.
Permissions
- Display over other apps draws the bar, the chord grid and the aim mode tint.
- Run a foreground service keeps the process that watches for the keyboard alive, with one notification that can be used to pin or hide the bar.
- Notifications for that one notification.
- Run at startup brings the bar back after a reboot.
- Network for the loopback connection above, and nothing else.
The helper
Keys reach other apps through a small helper process that runs with more rights than
the app: started by Shizuku, by an adb command from a PC, or with root. It is
part of this app, it listens only on the phone's own loopback address, it answers only to
this app's token, and it does one thing, which is deliver key presses and mouse clicks.
It keeps nothing.
Who else is involved
Nobody. There are no ads, no analytics, no crash reporting and no tracking in this app. The only third-party code in it is the Shizuku client library, which talks to the Shizuku app on the same phone if you chose that way of starting the helper. Google Play handles the download and nothing else.
Deleting your data
Uninstall the app. There is nothing anywhere else.
Children
The app collects no data from anyone, of any age.
Changes
If this policy changes, the date at the top changes with it.