RecScreen recording
Plate 01Slot
PhoneCanDo Field Manual · Alpha v0.1.2
AI that can use your phone.
PhoneCanDo puts a real agent on your Android. It reads the screen, uses the apps, and works in a full terminal. No PC. No cloud relay. Your keys, your data, on the device.
No accountNo PCSideload alpha
FIG. 01 — The body
Model A-01 / 1080 × 2340 / arm64
Slot 01Hero loop · 0:08
- Runs on
- On-device · arm64
- Android
- 8.0 and up
- Build
- Alpha v0.1.2
- License
- Source-available
Sec. 01 / Phone control demo
FIG. 02 — Plates 01–08
Just Ask, phonecando
Every clip is a real screen recording: the agent sees the UI, taps, types, shares and reads the clipboard. Anything with a screen is fair game —once you unlock phone control.
RecScreen recording
Plate 02Slot
Order your usual
RecScreen recording
Plate 03Slot
Copy the 2FA code
RecScreen recording
Plate 04Slot
Summarise what’s on screen
RecScreen recording
Plate 05Slot
Battery low? Turn on saver
RecScreen recording
Plate 06Slot
Book the cheapest ride
RecScreen recording
Plate 07Slot
Post this screenshot to Slack
RecScreen recording
Plate 08Slot
Silence it until 9
Sec. 02 / Local intelligence
FIG. 03 — Model manifest
The model is in the room.
Bring your own model, or download one from our registry inside the app and run it with ease. The model sits in app-private storage, the runtime does the work on the phone, and no request has to leave the device.
In development
Two routes / one room
Route 01
Carry it in.
Point PhoneCanDo at weights you already have. They move into app storage and stay there.
~/models → app storage
Route 02
Have it delivered.
Pick a model in the registry and download it inside the app. No computer, no side-loading.
registry → app storage
Destination / app-private storage
✓ no upload · ✓ no account · ✓ no PC
Support depends on RAM, quantization and the runtime.
FIG. 04 — Subsystem
And underneath it, a full Linux.
The agent doesn't just run on your phone. It runs inside a full Linux of its own — its own root, its own packages, its own files. apt, git, ssh, tmux, python: if it runs on Linux, it runs in there.
Start another sandbox and the next agent gets a root of its own. Separate files, separate packages, nothing shared unless you share it.
On-device · arm64 · one sandbox per agent
Passport / root
SBX-01
- Holder
- agent-01
- Image
- a-01
- Root
- /sbx/01
Entries own packages
aptgitsshtmuxpython3
ffmpeg41 mb · admitted
dpkg 412413 pkgs+1
Passport / root
SBX-02
- Holder
- agent-02
- Image
- a-01
- Root
- /sbx/02
Entries own packages
aptgitsshtmuxpython3
dpkg 388 pkgs
Sec. 03 / The gate
FIG. 05 — Consent, three ways
It ships locked.
Phone control starts locked. It stays locked until you arm it with your fingerprint, face or PIN, it locks again when PhoneCanDo closes, and the agent can never arm itself.
01 / Locked
Nothing moves.
Every phone action is refused at the bridge with 403 automation_off. The agent can still think, and use its own terminal.
- Read the screen
- Tap · type · scroll
- Notifications · share
- Clipboard · links · apps
Slot 03Biometric prompt · recording
The agent asks · you press
02 / Armed
You unlocked it.
Face or device PIN, nothing else. The agent never sees the credential, and it cannot press this button for you.
Stays armed until you lock it again from Settings → Phone control, or until the app restarts.
How often it asks
01 / Per action
Every read, tap and send waits for you.
02 / Per task
One prompt when the agent starts a job, then it runs.
03 / Per session
One prompt, then it acts until you lock it or the app restarts.
Works while locked: reopening PhoneCanDo · this prompt · Android's accessibility screen
Play build: no driver, nothing to gate.
Sec. 04 / Install
FIG. 06 — Procedure
Get it on the phone.
Two installs and a switch, all on the phone. No store, no account. Bring 2 GB free and one coffee for the first launch.
Data plate / A-01
Sideload- Version
- v0.1.2 · alpha
- Released
- 2026-11-03
- Architecture
- arm64 only
- Requires
- Android 8.0 · 2 GB free
- Download
- 106 MB · starter build
- SHA-256
- bd297f20a84aaa8da492268402db6eab05b3d5c5637778be12ea0c9e05abf927
- License
- Source-available
Scan with the phoneGets the starter: step 01
FM-01 · A-01 · v0.1.2 · arm64
Full APK for adb · v0.1.2Starter APK for the phone · v0.1.2
- Grab the starter. Open it, tap Install. No superpowers yet, so Play Protect lets it in. First launch unpacks the brain: one coffee.
- Give it hands. Tap Install full build in the app and let PhoneCanDo install it. It moves in over the starter and keeps your stuff.
- Flip the switch. Settings → Phone control walks you through Android's safety lock in three taps. Your fingerprint stays the final key.
Why two installs? Play Protect blocks any browser download that can drive the screen. The starter can't, so it gets in, then fetches the full build itself, which Android allows. Silly. Tested. Works.
On a computer? Skip the dance:
curl -LO https://github.com/krishna-kush/PhoneCanDo/releases/download/v0.1.2/phonecando-0.1.2-full-arm64.apkecho "5288b5f5e00edd2d5da5ac2ed4d20cb041764315103f756263cf975903a0e8b2 phonecando-0.1.2-full-arm64.apk" | sha256sum -cadb install -r phonecando-0.1.2-full-arm64.apk
curl -LO https://github.com/krishna-kush/PhoneCanDo/releases/download/v0.1.2/phonecando-0.1.2-full-arm64.apkecho "5288b5f5e00edd2d5da5ac2ed4d20cb041764315103f756263cf975903a0e8b2 phonecando-0.1.2-full-arm64.apk" | shasum -a 256 -cadb install -r phonecando-0.1.2-full-arm64.apk
curl.exe -LO https://github.com/krishna-kush/PhoneCanDo/releases/download/v0.1.2/phonecando-0.1.2-full-arm64.apk(Get-FileHash phonecando-0.1.2-full-arm64.apk -Algorithm SHA256).Hash -eq "5288b5f5e00edd2d5da5ac2ed4d20cb041764315103f756263cf975903a0e8b2"adb install -r phonecando-0.1.2-full-arm64.apk
Slot 04Install walkthrough · recording
Starter → full → switch · 0:40
Sec. 05 / Troubleshooting
FIG. 07 — Q & A
The fine print.
The store, the hardware, the permissions, the network — the answers we give most often, in full, license terms included.
Is it on the Play Store?
Not yet. The alpha ships as a signed APK you install yourself. The full build can drive other apps through Android accessibility, which Play restricts — a reduced build is planned for stores, while the full one stays sideloaded.
Why a starter build and then a full build?
Play Protect blocks any app downloaded through a browser, messaging app or file manager that declares an accessibility service (“App blocked to protect your device”, no install anyway). The full build declares one; the starter build does not, so it installs. The starter build then downloads the full build and hands it to Android's installer, which Play Protect allows. Both are signed with the same key, so your data is kept.
“App blocked to protect your device” on the starter build, or “App not installed”? Uninstall any older or debug PhoneCanDo build first (different signing key), and check the APK is106 MB, arm64 and matches the SHA-256 above. With a computer, adb install of the full APK skips the block entirely.
The accessibility toggle says “denied access”.
Android 13+ locks that toggle for apps installed outside a store. PhoneCanDo walks you through it in Settings → Phone control: Android shows its “Restricted setting” note (tap OK), then App info → ⋮ (top right) → Allow restricted settings, then the toggle. The ⋮ item only appears after that note, so do the steps in order.
Do I need a computer?
No. Setup, the agent, the terminal and the model keys all live on the phone.
Which phones does it run on?
Arm64 devices on Android 8.0 or newer, with 2 GB free. It will not run on x86 emulators or 32-bit phones.
What can it actually control?
Any app with a visible UI: tapping, typing, scrolling, reading the screen, plus notifications, clipboard, sharing and intents. Actions that change the phone need a biometric unlock first.
Does it need a constant connection?
The agent and your files run locally. Model calls go to the provider you configure, so it needs network for those — unless you point it at a local endpoint. The update check and the usage stats use the network too, but nothing waits for them.
Does it send anything about me?
Anonymous usage stats, on by default: phone model, Android and app version, which features get used, crashes and engine errors. Never your prompts, sessions, files, keys or screen. One switch in Settings → Privacy turns it off, and Delete my data erases what the server holds for your phone. Every field is listed in the privacy note.
Can I use the source?
The source is on GitHub under a source-available license. You can read it and contribute; you cannot copy, use, or redistribute it. The official app is the only distributed build.