What each permission does
Timer’s job is to draw a lock over the entire screen at the right moment. That requires specific Android permissions. Here’s every one and why it’s needed.
Display over other apps required
android.permission.SYSTEM_ALERT_WINDOW
This is the core permission. Lets Timer draw the lock screen on top of any other app when time runs out. Without this, the “Time’s up” screen would just be a regular activity that the child could swipe away.
If you skip it: the lock screen won’t cover other apps — the whole product breaks.
Foreground service + Wake-lock required
android.permission.FOREGROUND_SERVICE, android.permission.FOREGROUND_SERVICE_SPECIAL_USE, android.permission.WAKE_LOCK
Timer must keep counting down even if the child opens another app or locks the screen. The foreground service runs only during an active timer; it shows a persistent notification (“Timer running — X min remaining”) so the system can’t kill it.
Post notifications required
android.permission.POST_NOTIFICATIONS
For the running-timer notification, the 3-minute warning chime, and the 45-second warning. Android 13+ requires explicit grant.
Biometric optional
android.permission.USE_BIOMETRIC
If you enable Biometric Unlock in Settings, Timer can unlock using your fingerprint or face instead of typing the PIN. Disabled by default; PIN always works as fallback.
Receive boot completed optional
android.permission.RECEIVE_BOOT_COMPLETED
If the phone is restarted while a timer is running, this lets Timer resume after boot so the lock still triggers at the originally scheduled time. If skipped, restarting the phone cancels any running timer.
Internet + Network state optional · license check only
android.permission.INTERNET, android.permission.ACCESS_NETWORK_STATE
Used solely to verify your Pro license once a month (a few KB to azfnlic-v2.azurewebsites.net). Free tier doesn’t use the network at all in normal operation.
What we don’t ask for, ever
- Camera, microphone, contacts, location
- SMS, call log, dialer
- Files, photos, accounts, identity
- Accessibility services or device admin (some “parental control” apps abuse these)
- Anything that could profile your child or surveil them