GreyTick Privacy Policy

Last updated: 17 July 2026

GreyTick is built around a simple promise: what happens on your device stays on your device.

What GreyTick does NOT collect

What stays on your device

All of the above is stored locally using Android's DataStore API. Uninstalling the app removes everything.

Network activity

The only network traffic GreyTick itself generates is DNS resolution, which is required for the firewall to function. DNS queries from apps you've protected are forwarded to the resolver you choose in settings — your network's default, or an encrypted DNS-over-HTTPS provider such as Cloudflare or NextDNS. GreyTick never logs, stores, or transmits the contents of these queries anywhere else.

What Google handles

If you upgrade to GreyTick Pro, your purchase is processed by Google Play Billing. Google receives the standard purchase information per their own Privacy Policy. GreyTick only sees an entitlement flag ("you have Pro") returned by Play.

Permissions GreyTick uses

PermissionWhy
INTERNETRequired by Android even though GreyTick only sets up a local sink.
BIND_VPN_SERVICERequired to claim the local VPN interface.
FOREGROUND_SERVICE (specialUse)Required by Android 14+ for VPN services.
QUERY_ALL_PACKAGESRequired so the app picker can list installed apps for you to choose from.
POST_NOTIFICATIONSTo show the silent status notification while GreyTick is on.
RECEIVE_BOOT_COMPLETEDTo restart the VPN after device reboot.
SCHEDULE_EXACT_ALARMSo scheduled blocks start and end on time.
REQUEST_IGNORE_BATTERY_OPTIMIZATIONSSo GreyTick survives aggressive OEM battery savers.

Contact

If you discover a security issue, please email the address above before publicly disclosing it.