Loading page
About this tool
Review camera, microphone, screen capture and proctoring permissions in student learning apps.
The Education App Permission Audit scores a student learning, tuition or exam app across seventeen permissions, separating teaching from surveillance. Camera, microphone and MediaProjection screen capture are legitimate for a live class or an invigilated exam but should be scoped to the session, so they score as optional; accessibility control and overlay permissions have no teaching use and score as full exposure. It matters most when the user is a child: India's DPDP Act 2023 requires verifiable parental consent under 18 and bars behavioural advertising directed at children, and COPPA covers under-13s in the US.
Open Education App Permission Audit on AltFTool — it loads instantly in your browser.
Type the App name (for the report), then choose Checklist or Paste list — Paste list takes one permission per line copied from the Play Store listing or Settings > Apps > Permissions.
In Checklist mode start from Typical class app, Everything granted or Clear all, then tick what the app actually holds under "Permissions and settings this app currently holds"; each of the 17 items is marked Required for core features, Optional feature only or Not needed by a learning app.
A Privacy score out of 100 appears with a verdict band and rows for Permissions granted, Revoke now, Worth reviewing, Justified by a core feature, Restricted / special access granted and Exposure points, followed by the Revoke these first list and a table of every item with its Android / iOS manifest name; Copy result copies the report.
Camera, microphone and screen capture are judged on whether the grant ends when the class does.
Reading the full installed-app list and accessibility control are surfaced separately from ordinary class features.
An advertising ID inside a students' app is presented as a compliance problem, not just a privacy preference.
With MediaProjection it captures everything on your screen for the session, including notifications from other apps that arrive mid-exam, and with QUERY_ALL_PACKAGES it can read your full list of installed apps. Grant screen capture per session only and turn on Do Not Disturb before starting.
No. India's DPDP Act 2023 prohibits behavioural advertising directed at children, and COPPA restricts data collection from under-13s in the US. An AD_ID permission in an app aimed at students is worth raising with the school as well as revoking.
Not as a standing grant. Geofenced attendance, where it is used at all, should be a per-session check-in you approve, so set the permission to 'Ask every time' or deny it and ask what location data the school retains.
An accessibility service can read everything on screen and tap on your behalf, which is far beyond anything teaching requires. It is the most abused permission on Android, so turn it off under Settings > Accessibility > Downloaded apps unless a student genuinely relies on it as an assistive tool.