This is every permission each app holds, and why.
We read these lists from the built packages on November 12, 2026, with the tool Android's own build system uses.
None of these ten apps can use the network.
None of the ten packages holds the internet permission. None holds the permission to see the state of the network, and none holds the advertising ID permission. No app asks for your contacts, your calendar, your call log or your messages.
Each table below lists every permission in that app's package.
K Photos holds these permissions.
K Photos 0.26.0 for Google Play, version code 66.
| What Android calls it | What K Photos uses it for |
|---|---|
Photos and videos (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO) |
To show, organize and edit your photos and videos. |
Selected photos (READ_MEDIA_VISUAL_USER_SELECTED) |
On Android 14 and later, you can give K Photos only the photos you pick. |
Storage, on Android 12 and earlier (READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE) |
The same access, under the name older versions of Android use. |
Media management (MANAGE_MEDIA) |
Optional. If you allow it, K Photos renames, moves and deletes photos without Android asking each time. |
Camera (CAMERA) |
The built-in camera. |
Microphone (RECORD_AUDIO) |
The sound of a video, and the camera's sound trigger. |
Location (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION) |
Optional. If you turn it on, K Photos writes the place into a photo's details, on the phone. |
Fingerprint or face (USE_BIOMETRIC, USE_FINGERPRINT) |
Opens private mode. Android does the check and tells the app only whether it matched. |
Notifications (POST_NOTIFICATIONS) |
Shows the progress of a task or a capture, with a Cancel button. |
Foreground service and keep awake (FOREGROUND_SERVICE and its camera, microphone, location, data sync and media processing types, WAKE_LOCK) |
Keeps a capture or a long task you started running while the screen is off. |
Start after a restart (RECEIVE_BOOT_COMPLETED) |
Lets Google Play finish delivering an AI pack you asked for. |
Billing (com.android.vending.BILLING) |
Purchases, which go through the Play Store app. |
| Pennylamp's own permissions | Let the K apps on the phone share one identity for .kept files and one copy of the writing model. Only apps signed by Pennylamp can hold them. |
K Docs holds these permissions.
K Docs 0.6.0 for Google Play, version code 19.
| What Android calls it | What K Docs uses it for |
|---|---|
Storage, on Android 12 and earlier (READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE) |
To open and save documents on older versions of Android. On Android 13 and later K Docs holds no storage permission, and it opens only the files and folders you choose. |
Foreground service, keep awake and start after a restart (FOREGROUND_SERVICE, WAKE_LOCK, RECEIVE_BOOT_COMPLETED) |
These come with Google Play's delivery library. They let Google Play finish delivering the Writing pack you asked for. |
Billing (com.android.vending.BILLING) |
Purchases, which go through the Play Store app. |
| Pennylamp's own permissions | Let the K apps on the phone share one identity for .kept files and one copy of the writing model. |
K Scan holds these permissions.
K Scan 0.6.0 for Google Play, version code 13.
| What Android calls it | What K Scan uses it for |
|---|---|
Camera (CAMERA) |
To scan pages. |
Vibration (VIBRATE) |
The tick you feel when a page is captured. |
Storage, on Android 9 and earlier (WRITE_EXTERNAL_STORAGE) |
To save a finished file to your Documents folder on Android 8 and 9. |
Notifications (POST_NOTIFICATIONS) |
Shows the progress of a long task, with a Cancel button. |
Foreground service (FOREGROUND_SERVICE and its data sync and media processing types) |
Keeps a long task you started running when you leave the screen. |
Billing (com.android.vending.BILLING) |
Purchases, which go through the Play Store app. |
| Pennylamp's own permissions | Let the K apps on the phone share one identity for .kept files and one copy of the writing model. |
K Audio holds these permissions.
K Audio 0.7.3 for Google Play, version code 17.
| What Android calls it | What K Audio uses it for |
|---|---|
Microphone (RECORD_AUDIO) |
To record, only while you record. |
Music and audio (READ_MEDIA_AUDIO) |
To open audio files. |
Storage, on Android 12 and earlier (READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE) |
The same access, under the name older versions of Android use. |
Notifications (POST_NOTIFICATIONS) |
Shows that a recording or a long task is running. |
Foreground service and keep awake (FOREGROUND_SERVICE and its microphone, data sync and media processing types, WAKE_LOCK) |
Keeps a recording going while the screen is off. |
Change system settings (WRITE_SETTINGS) |
Only for Set as ringtone. Android asks you at that moment. |
Billing (com.android.vending.BILLING) |
Purchases, which go through the Play Store app. |
| Pennylamp's own permissions | Let the K apps on the phone share one identity for .kept files and one copy of the writing model. |
On Windows, each package declares these capabilities.
Read from the Windows packages of November 11, 2026.
| App and version | What the package declares |
|---|---|
| K Photos 0.26.0.4 | Full trust |
| K Docs 0.6.0.4 | Full trust |
| K Scan 0.6.0.4 | Full trust, webcam |
| K Audio 0.7.3.4 | Full trust, microphone |
No package declares an internet capability. That fact alone proves little. A full-trust desktop app is one that Windows does not confine, so Windows would not stop it from connecting. On Windows the promise rests on the code: no K app's own code opens a connection, each app turns Java's network sockets off when it starts, and we scan every package for the other ways a Java program can connect.
On the Mac, the system itself refuses connections.
The signed Mac packages of November 11, 2026 run in Apple's App Sandbox and hold no network entitlement, so macOS refuses any connection they try to make. K Scan may use the camera, K Audio the microphone and the Music folder, and K Photos the Pictures folder. Each app otherwise opens only the files you select.
We have read no iPhone package, so this page makes no statement about the iPhone.
The other six apps hold these permissions.
Read from their packages on November 12, 2026. None holds the internet permission.
| App | What its package holds |
|---|---|
| K Files | All files access, because a file manager has to reach the folders you open. Notifications and a foreground service for long tasks. |
| K Sheets | Nothing. It opens only the file you hand it. |
| K QR | The camera, and a permission that hides other apps' overlays while you scan. |
| K Notes | The microphone for voice notes, notifications, exact alarms and start after a restart for reminders, and vibration. |
| K Video | Videos, the location stored inside a video so that an edit can keep it, notifications, and a foreground service for playback and long tasks. |
| K Keys | Fingerprint or face, to open the vault, and the permission that hides other apps' overlays. |