Privacy Policy

Effective date: 21 August 2026
Last updated: 21 August 2026

ControlBlue is published by TrimTab Risk Management LLC.

ControlBlue turns an Android phone into a Bluetooth keyboard, mouse and trackpad for a computer you have already paired with. This policy explains what the app does with data. It is short because the app does very little.

• The short version
• What the app transmits, and to whom
• Keystrokes
• What the app stores on your device
• Permissions
• Android backup
• Deleting your data
• Security, honestly stated
• Children’s privacy
• Changes to this policy
• Contact

The short version

• ControlBlue has no user accounts, no servers, and no network access at all. It does not hold Android’s INTERNET permission, so it cannot reach a network even if it tried.
• It contains no analytics, no crash reporting, no advertising, and no third-party tracking of any kind.
• Nothing is sold, rented, or shared. There is no one to share it with.
• What you type and how you move the pointer go over Bluetooth to the computer you have connected to, and nowhere else.
• Keystrokes are not logged, not stored, and never shown on the phone’s screen.

What the app transmits, and to whom

The purpose of ControlBlue is to send keyboard and pointer input to a computer. When you connect to a host, the app sends that host standard Bluetooth HID reports: key presses and releases, pointer movement, button clicks and scrolling.

This traffic goes only to the single computer you have chosen, over the direct Bluetooth link between the two devices, and only while you have a connection open. It does not pass through TrimTab Risk Management LLC, and it does not pass through any server, ours or anyone else’s, because the app cannot contact one.

Keystrokes

Because sending keystrokes is the entire function of the app, it is worth being exact about what happens to them.

• Keys you press are converted to HID usage codes and transmitted to the connected computer immediately.
• They are not written to storage, not kept in any history or buffer, and not included in any log.
• They are not echoed anywhere in the app’s own interface. There is no text field showing what you have typed. On the full keyboard view a key moves under your finger, as a key on a real keyboard does, and is back up before you look away; nothing keeps a record of which keys those were.

That last point is a design rule in this app rather than an oversight. A remote control has no reason to keep a copy of what you type, and a character that is never drawn on screen cannot end up in a screenshot, a recent-apps preview or a log.

What the app stores on your device

ControlBlue stores a small amount of data in Android SharedPreferences, in the app’s own private storage on the phone. Nothing in it leaves the device by any route the app controls. Specifically:

• The Bluetooth address and connection history of hosts you have connected to: whether a host has ever connected successfully, how many times in a row it has recently failed, and when it last connected. This is used to order the device list and to give useful advice when a connection fails.
• The address of the host you connected to most recently, so the app can offer to reconnect to it.
• Per-host preferences: pointer sensitivity, and which screen orientation and which tab you last used with that host.
• App settings: whether to reconnect on start, whether the scroll wheel gives haptic feedback, and whether the landscape scroll control is the ball or the wheel.

The app also reads the list of Bluetooth devices your phone is already paired with, so it can show you which one to connect to. It reads each device’s name, Bluetooth address and device class (for example, “computer” or “headphones”). It does not collect anything else about the connected computer: not its operating system, not its contents, not what you do with it.

Permissions

ControlBlue declares only Bluetooth permissions:

• BLUETOOTH_CONNECT (Android 12 and later) — used to list the devices your phone is already paired with and to open the HID connection to the one you choose.
• BLUETOOTH and BLUETOOTH_ADMIN (Android 11 and earlier only) — the older equivalents of the above on those versions.

The app does not request permission to scan for or advertise to nearby Bluetooth devices, because it only ever connects to hosts you have already paired in Android’s own settings. It does not request location, contacts, microphone, camera, storage, or internet permissions.

Android backup

The app allows Android’s standard backup, which means the preferences described above — host addresses and names of hosts you have connected to, per-host settings, and app settings — may be included in your own device backup or in a device-to-device transfer, and restored when you set up a new phone. That backup belongs to you and is handled by Android and your backup provider under their terms, not by us. We never receive it. If you do not want this data backed up, you can turn off backup for ControlBlue in Android’s backup settings.

Deleting your data

There are two ways, and both are entirely under your control:

• To delete everything the app has stored, clear the app’s data in Android Settings, or uninstall the app.
• To remove a host from the app’s reach, unpair it in Android’s Bluetooth settings. The app can only connect to devices your phone is paired with, so a device you have unpaired can no longer be reached.

Since none of this data ever leaves your phone, there is nothing for us to delete on your behalf and no request you need to send us.

Security, honestly stated

ControlBlue sends what you type to another computer over Bluetooth. Two things follow from that, and you should know both:

• The confidentiality of that link depends on Bluetooth pairing between your phone and that computer. Pair only with computers you control or trust, and unpair ones you no longer use.
• Once your keystrokes arrive, they are in the hands of the receiving computer. Anything typed into a machine that is compromised, shared, or monitored is exposed there, whatever the phone that sent it did. ControlBlue can protect what happens on the phone; it cannot protect what happens at the other end.

Connect only to computers you trust, and disconnect when you are done.

Children’s privacy

ControlBlue is not directed at children and collects no personal information from anyone, children included. It has no accounts, no profiles, and no way to send data to us.

Changes to this policy

If the app ever changes in a way that affects this policy, we will update this page and change both dates at the top: the effective date is when the current version took effect, and the last updated date is when the wording last changed. The app itself has no way to reach you and no way to notify you, so this page is the record.

Contact

Questions about this policy can go to:

TrimTab Risk Management LLC
controlblue@t2rm.io