From 43a21da80d594233dbd1e2a354b8a53fbd9bbb06 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Erik=20Bj=C3=A4reholt?= <erik@bjareho.lt>
Date: Thu, 6 Aug 2026 22:41:37 +0200
Subject: [PATCH] fix: add prominent disclosure before accessibility settings
 redirect

Google Play's Accessibility API policy requires an in-app prominent
disclosure, affirmatively accepted, before directing users to enable an
accessibility service (standing Play rejection since Oct 2023). Shows
what is collected (browser URL + page title), why (web browsing
tracking), and that data stays on-device.
---
 .../activitywatch/android/OnboardingActivity.kt    | 14 ++++++++++++--
 mobile/src/main/res/values/strings.xml             |  8 ++++++++
 2 files changed, 20 insertions(+), 2 deletions(-)

diff --git a/mobile/src/main/java/net/activitywatch/android/OnboardingActivity.kt b/mobile/src/main/java/net/activitywatch/android/OnboardingActivity.kt
index 6a8834db..2e5c3c40 100644
--- a/mobile/src/main/java/net/activitywatch/android/OnboardingActivity.kt
+++ b/mobile/src/main/java/net/activitywatch/android/OnboardingActivity.kt
@@ -9,6 +9,7 @@ import android.view.ViewGroup
 import android.widget.Button
 import android.widget.ImageView
 import androidx.activity.OnBackPressedCallback
+import androidx.appcompat.app.AlertDialog
 import androidx.appcompat.app.AppCompatActivity
 import androidx.fragment.app.Fragment
 import androidx.fragment.app.FragmentActivity
@@ -144,9 +145,18 @@ class PermissionsFragment : Fragment() {
         view.findViewById<Button>(R.id.btnGrantUsagePermission).setOnClickListener {
             startActivity(Intent(Settings.ACTION_USAGE_ACCESS_SETTINGS))
         }
-        // Handle grant accessibility permissions
+        // Handle grant accessibility permissions.
+        // Google Play's Accessibility API policy requires a prominent disclosure
+        // that the user affirmatively accepts before being sent to enable the service.
         view.findViewById<Button>(R.id.btnGrantAccessibilityPermission).setOnClickListener {
-            startActivity(Intent(Settings.ACTION_ACCESSIBILITY_SETTINGS))
+            AlertDialog.Builder(requireContext())
+                .setTitle(R.string.accessibility_disclosure_title)
+                .setMessage(R.string.accessibility_disclosure_message)
+                .setPositiveButton(R.string.accessibility_disclosure_agree) { _, _ ->
+                    startActivity(Intent(Settings.ACTION_ACCESSIBILITY_SETTINGS))
+                }
+                .setNegativeButton(R.string.accessibility_disclosure_decline, null)
+                .show()
         }
         // Handle grant exact alarm permissions (for widgets)
         view.findViewById<Button>(R.id.btnGrantExactAlarmPermission).setOnClickListener {
diff --git a/mobile/src/main/res/values/strings.xml b/mobile/src/main/res/values/strings.xml
index f7430015..3f7fb466 100644
--- a/mobile/src/main/res/values/strings.xml
+++ b/mobile/src/main/res/values/strings.xml
@@ -24,6 +24,14 @@
     <string name="button_log_text">Click me to log data!</string>
     <string name="accessibility_service_description">Allows ActivityWatch to read the URL and title from your browser.</string>
 
+    <!-- Prominent disclosure required by the Google Play Accessibility API policy:
+         must be shown and affirmatively accepted BEFORE directing the user to
+         enable the accessibility service. -->
+    <string name="accessibility_disclosure_title">Web browsing tracking</string>
+    <string name="accessibility_disclosure_message">To track your web browsing activity, ActivityWatch uses Android\'s Accessibility API to read the URL and page title from your browser while you browse.\n\nThis data is processed and stored only on your device. It is never sent to the ActivityWatch developers or any third party.\n\nIf you agree, enable ActivityWatch under Accessibility settings on the next screen. This is optional — the rest of the app works without it.</string>
+    <string name="accessibility_disclosure_agree">Agree</string>
+    <string name="accessibility_disclosure_decline">No thanks</string>
+
     <!-- This is overridden by gradle config
     <string name="versionName">unknown version</string>-->