Gravel
A de-googled, hardened fork of the Pebble companion app for de-googled phones
Новое в версии 0.2.0
Speech recognition is optimized: the engine uses only the cores your phone gives it, and the model picker measures your phone, shows what each model costs, and offers a smaller one if needed for your device. Dictation with Gravel in the background or the screen locked, which failed on some phones, now works. You can connect Gravel to your own self-hosted transcription server over https; nothing is sent unless you set one up.
Gravel is a de-googled and hardened fork of the Pebble mobile app by Core Devices, for managing Pebble and Core Devices smartwatches on GrapheneOS, LineageOS, and other phones without google play services or Firebase.
The watch features of the official app are all here: pairing and reconnection, notifications, calendar, music, health, and weather on the watch, watchface and app gallery browsing, firmware updates, and voice dictation. What is gone is the google plumbing and the reporting built around it: no play services, no Firebase, no telemetry, no analytics, no crash reporting. (The one casualty is the official app's battery analytics page, which was rendered by the telemetry server and so has no data source here. The Pebble Index 01 ring and Index AI features do not function for now, because of how heavily they rely on telemetry and Firebase; work on a way to incorporate them is ongoing.)
On top of the de-Googling, Gravel tightens the app's own security posture:
- Per-app permissions for watchapps' companion code: internet and phone location are denied by default and granted per app, and revoking a permission applies to running watchapps immediately
- The app's exported Android interfaces are authorization-gated or removed
- Plain-HTTP (cleartext) traffic is blocked app-wide
- Core watch firmware updates are fetched from the public PebbleOS releases and integrity-verified before install
- On-device voice dictation with the whisper.cpp speech engine, built from source; the speech model is an optional, integrity-pinned download you start yourself
- Optional dictation through your own transcription server over https: a self-signed certificate is pinned on first use once you have compared its fingerprint, and a certificate from a CA the phone trusts is accepted as elsewhere on the phone; nothing is sent unless you configure one
- Manual latitude/longitude entry replaces the play-services place search for weather
- App store searches leave the phone only when you tap search, never while you type, and are sent with Algolia's query analytics and personalization switched off and no user token
Some watchapps and watchfaces need internet or your location to work, and they will not function fully until you grant them access. That is deliberate: Gravel puts the decision in your hands rather than trusting every watchapp by default.
The app talks to the Core Devices and Rebble web services (app store, weather, timeline, notification icons, language packs), to Algolia, which hosts the app store's search index, whenever you search the store, to the PebbleOS release feed on GitHub for firmware, and to the speech model host when you download a model; there is no google endpoint. Two hosts are yours to choose: an app store source you add yourself is fetched only after you confirm it, with no account token and no search traffic, and a transcription server you configure receives your dictation audio and nothing else.
Permissions Gravel asks for are the ones the watch features need: Bluetooth and location for finding and staying connected to the watch (background location so location-based watchapps and weather keep working while the app is not open), notification access to forward notifications, contacts, call log, and phone state for caller names and call control on the watch, calendar for timeline pins, Health Connect write access to sync the watch's health data, and the list of installed apps for per-app notification settings. Each is requested when the corresponding feature is first set up.
Gravel is not affiliated with or endorsed by Core Devices. "Pebble" and "Core Devices" are trademarks of their respective owners; Gravel is an independent fork of their GPLv3-licensed source code, under its own name and icon to avoid any confusion with the official app.
The watch features of the official app are all here: pairing and reconnection, notifications, calendar, music, health, and weather on the watch, watchface and app gallery browsing, firmware updates, and voice dictation. What is gone is the google plumbing and the reporting built around it: no play services, no Firebase, no telemetry, no analytics, no crash reporting. (The one casualty is the official app's battery analytics page, which was rendered by the telemetry server and so has no data source here. The Pebble Index 01 ring and Index AI features do not function for now, because of how heavily they rely on telemetry and Firebase; work on a way to incorporate them is ongoing.)
On top of the de-Googling, Gravel tightens the app's own security posture:
- Per-app permissions for watchapps' companion code: internet and phone location are denied by default and granted per app, and revoking a permission applies to running watchapps immediately
- The app's exported Android interfaces are authorization-gated or removed
- Plain-HTTP (cleartext) traffic is blocked app-wide
- Core watch firmware updates are fetched from the public PebbleOS releases and integrity-verified before install
- On-device voice dictation with the whisper.cpp speech engine, built from source; the speech model is an optional, integrity-pinned download you start yourself
- Optional dictation through your own transcription server over https: a self-signed certificate is pinned on first use once you have compared its fingerprint, and a certificate from a CA the phone trusts is accepted as elsewhere on the phone; nothing is sent unless you configure one
- Manual latitude/longitude entry replaces the play-services place search for weather
- App store searches leave the phone only when you tap search, never while you type, and are sent with Algolia's query analytics and personalization switched off and no user token
Some watchapps and watchfaces need internet or your location to work, and they will not function fully until you grant them access. That is deliberate: Gravel puts the decision in your hands rather than trusting every watchapp by default.
The app talks to the Core Devices and Rebble web services (app store, weather, timeline, notification icons, language packs), to Algolia, which hosts the app store's search index, whenever you search the store, to the PebbleOS release feed on GitHub for firmware, and to the speech model host when you download a model; there is no google endpoint. Two hosts are yours to choose: an app store source you add yourself is fetched only after you confirm it, with no account token and no search traffic, and a transcription server you configure receives your dictation audio and nothing else.
Permissions Gravel asks for are the ones the watch features need: Bluetooth and location for finding and staying connected to the watch (background location so location-based watchapps and weather keep working while the app is not open), notification access to forward notifications, contacts, call log, and phone state for caller names and call control on the watch, calendar for timeline pins, Health Connect write access to sync the watch's health data, and the list of installed apps for per-app notification settings. Each is requested when the corresponding feature is first set up.
Gravel is not affiliated with or endorsed by Core Devices. "Pebble" and "Core Devices" are trademarks of their respective owners; Gravel is an independent fork of their GPLv3-licensed source code, under its own name and icon to avoid any confusion with the official app.
Анти-функции
У этого приложения есть функции, которые могут вам не понравиться. Узнать больше!
- Автор: david-cant-code
- Лицензия: GNU General Public License v3.0 only
- Отслеживание проблем
- Исходный код
- Список изменений
- Метаданные сборки
- Статус воспроизводимости
Версии
Можно выбрать загрузку приложения в виде APK (доступно по ссылкам ниже), однако следует помнить, что при такой установке вы не сможете получать уведомления об обновлениях, и что это менее безопасный способ скачивания. Советуем установить приложение F-Droid и использовать его.
Скачать-
arm64-v8aarmeabi-v7aДля этой версии требуется Android 8.0 или новее.
Собрано и подписано F-Droid, и гарантированно соответствует исходному коду из архива.
Скачать APK 10 МиБ Подпись PGP | Журнал сборки
-
arm64-v8aarmeabi-v7aДля этой версии требуется Android 8.0 или новее.
Собрано и подписано F-Droid, и гарантированно соответствует исходному коду из архива.
Скачать APK 10 МиБ Подпись PGP | Журнал сборки
-
arm64-v8aarmeabi-v7aДля этой версии требуется Android 8.0 или новее.
Собрано и подписано F-Droid, и гарантированно соответствует исходному коду из архива.
Скачать APK 10 МиБ Подпись PGP | Журнал сборки
Новое в версии 0.1.6
Synced with the upstream Pebble app: notification images and album art go to the watch when it asks, podcasts get seek controls, the weather app shows tomorrow hourly, and firmware from a file asks before installing. You can add your own app store source, fetched only after you confirm it, with no account token or search traffic. Every synced commit was checked in source and in the built app: none adds telemetry, analytics, crash reporting, sign-in or Google code, or undoes Gravel's hardening.
Новое в версии 0.1.5
The store search now runs only when you tap search, so no search request is sent while you type, and each query goes to the store's search provider (Algolia) with its analytics and personalization switched off. The app listing names Algolia.