Bluetooth Shortcut Keyboard — Privacy Policy

What we collect

We run no backend that receives your decks, buttons, macros, typed text or computer details. Optional Drive Sync sends its listed data to your own Google Drive, and enabled Webhook steps send their saved request to the address you configured; neither is sent to us.

Google Play Billing is contacted on launch for the Pro price and subscription state. Drive Sync and Webhook requests remain off until you enable or run them.

No usage analytics; no crash reporting

Version 2.43 contains no Firebase Analytics SDK, no usage analytics and no crash-reporting SDK. There is no usage-sharing prompt or switch. The app sends no feature events, analytics installation identifier, approximate location or purchase analytics to Firebase or an analytics service.

A crash does not send us any data. Google Play may separately provide aggregate Android vitals under Google's policy and your device settings; these diagnostics are not crash reports created or sent by this app and are not Firebase Crashlytics data.

If something goes wrong, Settings → Privacy & support → Bug report opens your mail app addressed to support@yaka310.com. You write the message and decide what it contains; nothing is attached or sent automatically.

Opt-in Drive Sync

Settings → Backup & sync → Google Drive lets you sign in with your Google account so the app keeps a copy of your deck in your own Google Drive. It is off until you connect an account. Once connected, the app queues the latest changes after you stop editing for 8 seconds. It starts no more than one Drive backup attempt per minute. After a temporary failure it retries after 1 minute, then after 2 minutes; after the third temporary failure, automatic backup stops until you tap Back up to Drive to start a new retry series. The one-backup-attempt-per-minute limit still applies. You can also back up and restore on demand.

There is one deliberate exception. If you restore a deck that was made with a newer version of the app than the one on this phone, some of it cannot be read here — and uploading that partial copy would overwrite the complete one. So the app tells you, and pauses backing up from this phone (automatic and manual alike) until you update the app and restore again.

The app does not use Android's own backup. allowBackup is off in the manifest and the data-extraction rules exclude everything, so neither Android cloud backup nor device-to-device transfer copies anything out of this app. Drive is the only route, and it is the one you turn on.

When you connect Drive Sync:

• The app signs you in with Google and requests two scopes: your email address (to show which account is connected and to recognise the dedicated Google Play review account on-device) and Drive app-data (a private, app-specific folder in your own Drive).
• One file in that folder contains your current deck — button layout and macros, including any text in a "Type text" step — every saved profile, appearance preferences, and selected app settings. Automatic uploads follow the timing and retry limits above. You can also start one manually by tapping Back up to Drive. Backing up stays paused if this app cannot read the complete deck. The file is read back when you restore.
• Your settings travel in that same file. Two are worth naming, because they are not what "settings" suggests: the private speaker notes you typed for Presenter mode, and the Bluetooth addresses of the computers you have connected to (used to remember which of them is a Mac and which profile each one switches to).
• Not included: your Pro subscription (that comes from Google Play), and the settings that describe one handset rather than you — keep-screen-on, performance mode and screen rotation. Those stay on each phone.
• The data lives in your Google Drive. We have no backend server and never receive a copy. The email is stored only on your device, labels the connected account and addresses your own Drive. For the dedicated Play review account, the app also compares that email on-device with a SHA-256 hash built into the app to enable review access. The raw review email is not included in the app source and is never sent to us.
• Disconnecting Drive Sync immediately clears the connected account, saved email and reviewer Pro access on this device. The app then makes a best-effort attempt to revoke its Google authorisation; if that remote attempt fails, the app remains disconnected and reviewer access stays locked locally. You can also remove the app's access in your Google Account and delete the backup file from your Google Drive. Do not put passwords or secrets in "Type text" macro steps, since they would be included in the uploaded deck.

If you never connect Drive Sync, no account or deck data is sent to Google through this feature.

Webhook macro steps

A macro can include a Webhook step that you configure with a URL, an HTTP method, and an optional body. When that step runs, the app makes an HTTPS request to the third-party address you entered, sending the body you typed. This is entirely user-directed:

• The destination is a server you choose; we do not receive, proxy, or log the request.
• Only HTTPS URLs are allowed, and each request is subject to a short timeout.
• Whatever you place in the URL or body leaves your device to that third party, so do not put secrets there unless you trust the endpoint.

Only an enabled Webhook can make that request. Before a manual deck-file import, the app shows how many Webhooks the file contains and defaults to importing all of them disabled. You can choose to keep the Webhooks that the file already marks as enabled. Restoring your own Drive backup instead preserves each Webhook's saved enabled or disabled state. When an enabled Webhook runs, the full saved URL (including its path or query) and any saved POST body leave the device for the saved third-party address.

If you never add a Webhook step, the app makes no such request.

What is stored on your device

All data stays in the app's private storage on your phone:

• Your button layout and macros — the labels, colours, key combinations and text you configure. Note: if you put text (including sensitive text) into a "Type text" macro step, it is stored on the device. Do not store passwords or secrets in macros.
• App settings — appearance, spacing, typing speed, etc.
• The address of the last computer you connected to, so the app can reconnect automatically. This is a Bluetooth hardware address. It stays on the device unless you connect Drive Sync, which uploads the per-computer bindings as part of your settings.

This data is removed when you uninstall the app.

Permissions

• Bluetooth (connect / advertise) — required to act as a Bluetooth keyboard, to appear to your computer for pairing, and to connect to it. The app only sends the keystrokes you trigger; it does not read data from the computer.
• Internet — used by Google Play Billing on launch; by Drive Sync after you connect it; and by enabled Webhook steps when they run.

Third-party services

The app uses the following third-party services. Billing is contacted on launch; Drive Sync and Webhook endpoints are contacted only when you enable or run those features:

• Google Play Billing — on launch, the app asks Google Play for the current Pro price and whether Play reports a valid subscription. If you choose to subscribe, the purchase is handled entirely by Google Play; we never see or store your card, bank or billing details. Governed by Google's privacy policy.
• Google Drive / Google Sign-In — only if you connect Drive Sync. Your email, deck and settings (including Presenter speaker notes and the Bluetooth addresses of computers you have connected to) are handled under Google's privacy policy; they are stored in your own Drive.
• A webhook endpoint you configure — only if you add a Webhook macro step. The request goes to the URL you entered; that third party's own policy governs what they do with it.

With Drive Sync and Webhook steps off, the app still contacts Google Play Billing.

Children

The app is not directed at children. It contains no usage analytics or advertising SDK.

Data controller (GDPR / UK-GDPR)

The data controller for any personal data processed by the app is the developer:

• Name: YAKA310 STUDIO
• Contact: support@yaka310.com

There is no separate Data Protection Officer; please direct all data-protection requests to the contact email above.

Legal basis for processing

• Core Bluetooth use: your buttons, macros, typed text and computer details are processed on the phone to provide the feature and are not sent to our server or to Analytics.
• Drive Sync: processed on the basis of your consent (GDPR Art. 6(1)(a)), given by turning the feature on. You may withdraw consent at any time by turning it off; withdrawal does not affect the lawfulness of processing carried out beforehand.
• Bug reports you email us: processed on the basis of your consent, given by sending the mail.
• Pro subscription: handled by Google Play under its own terms; we receive no payment data.

Your rights

If you are in the EU, UK, or another jurisdiction with comparable data-protection law, you have the right to:

• Access any personal data we hold about you,
• Rectify inaccurate data,
• Erase your data ("right to be forgotten"),
• Restrict or object to processing,
• Data portability (receive your data in a structured, machine-readable format),
• Withdraw consent at any time by disconnecting Drive Sync,
• Lodge a complaint with your local supervisory authority (e.g. the ICO in the UK or the CNIL in France).

We do not operate a backend containing your decks, macros, typed text or computer details. Drive data remains in your own Google Drive until you delete it there; emailed bug reports remain in the support mailbox for the period below. To exercise any applicable data-protection right, contact support@yaka310.com. We respond within the deadlines required by applicable law.

International data transfers

If you enable Drive Sync or subscribe to Pro, Google processes the relevant data on infrastructure that may be outside Hong Kong, the EEA or the UK. Google's applicable data-transfer safeguards govern that processing. We do not operate an intermediate server.

Retention

• On-device data (layouts, settings, last-host address): kept until you clear app data or uninstall the app. If you connected Drive Sync, a copy also lives in your own Google Drive until you delete it there.
• Bug reports you email us: kept only as long as needed to handle your report and meet applicable legal obligations, then deleted. You choose what to put in them.

Changes

If this policy changes, the updated version is published at https://yaka310.com/privacy/bt-shortcut-keyboard/ with the "Last updated" date at the top revised. That address is the authoritative version.

Contact

For questions or to exercise any data-protection right above, contact: support@yaka310.com