Overview

The Android Personal Usage Policy lets you control how employees use personal apps and data on Android devices that have a work profile (BYOD or company-owned with work profile).

Use this policy to:

Limit or block personal apps that may impact productivity or security
Control what personal apps can access (camera, screen capture, Bluetooth sharing, etc.)
Define how long a user can keep the work profile turned off
Decide which personal apps are allowed or blocked

Requirements

Supported OS: Android 9+ (some settings require Android 11+)
Supported platforms: Android work profile devices
Ownership types:
- Company-owned
- BYOD (Bring Your Own Device)

When to Use This Policy

Typical use cases:

You allow personal profiles on work devices but want to block high‑risk apps (e.g., social media)
You want to prevent data leakage from work to personal apps (via screenshots, camera, or Bluetooth)
You want to make sure the work profile isn’t turned off for too long on enrolled devices
You need more granular control over personal Play Store access

Policy Fields

1. Disable Fun Features (`funDisabled`)

Display name: Disable Fun Features
Type: Boolean (true/false)
Default: false
Minimum OS: Android 9+

What it does

When set to true, this disables entertainment and recreational functionality on the device. This can include:

Games
Entertainment apps
Other non‑work‑related features

Effect

Helps ensure the device is used primarily for business purposes.
Best for highly controlled environments or frontline/shift devices.

2. Personal Usage Policies (`personalUsagePolicies`)

Display name: Personal Usage Policies
Type: Dictionary (object)
Minimum OS: Android 9+

This is the main configuration block for how the personal profile behaves. It controls:

What personal apps can do
What data they can access
How long the work profile can stay off
Bluetooth and Play Store behavior

2.1 Account Types With Management Disabled

personalUsagePolicies.accountTypesWithManagementDisabled

Display name: Account Types With Management Disabled
Type: Array of strings
Minimum OS: Android 9+

What it does

Defines account types that users are not allowed to manage (e.g., add/remove/modify).

Example

"accountTypesWithManagementDisabled": [ "com.google", "com.company.internal" ]

Use this when you want to prevent users from tampering with specific account types on the device.

2.2 Disable Camera in Personal Profile

personalUsagePolicies.cameraDisabled

Display name: Disable Camera in Personal Profile
Type: Boolean
Default: false
Minimum OS: Android 9+

What it does

When true, the camera cannot be used from the personal profile:

Personal apps cannot access the camera
Camera usage is effectively restricted to the work profile (if allowed there)

Use cases

Environments with strict visual data protection (offices with sensitive information, production floors, etc.)
Organizations concerned about photos or videos being captured via personal apps.

2.3 Personal Play Store Mode

personalUsagePolicies.personalPlayStoreMode

Display name: Personal Play Store Mode
Type: String
Default: PLAY_STORE_MODE_UNSPECIFIED
Options:
- PLAY_STORE_MODE_UNSPECIFIED – No special control applied
- BLACKLIST / BLOCKLIST – Block specific apps
- ALLOWLIST – Only allow specific apps
Minimum OS: Android 9+

What it does

Works together with personalApplications to control how apps in the personal profile can be installed and used.

Typical patterns:

Blocklist / blacklist – allow everything except a defined set of apps
Allowlist – block everything except a defined list of approved apps

2.4 Max Days With Work Off

personalUsagePolicies.maxDaysWithWorkOff

Display name: Max Days With Work Off
Type: Integer
Allowed values:
- 0 → No limit
- Any integer 3–365
Minimum OS: Android 11+

What it does

Defines how many days the work profile can remain turned off before the device is wiped.

If the work profile stays off longer than this threshold, the device may be factory reset/wiped according to the policy integration.

Examples

0 – No enforcement: work profile can stay off indefinitely
7 – If a user disables the work profile for more than 7 days, the device is at risk of being wiped

Important

Values must be 0 or between 3 and 365.
A value like 1 or 2 is invalid and may be automatically corrected or rejected by the backend.

2.5 Personal Applications

personalUsagePolicies.personalApplications

Display name: Personal Applications
Type: Array of dictionaries (objects)
Minimum OS: Android 9+

Each entry defines a policy for a specific personal app.

Sub‑fields:

a. Install Type (installType)

Display name: Install Type
Type: String
Default: INSTALL_TYPE_UNSPECIFIED
Options:
- INSTALL_TYPE_UNSPECIFIED
- BLOCKED – App is blocked and cannot be installed
- AVAILABLE – App is allowed/available to install

b. Package Name (packageName)

Display name: Package Name
Type: String
Required: Yes
Example: com.instagram.android

Example configuration

"personalApplications": [
  {
    "installType": "BLOCKED",
    "packageName": "com.instagram.android"
  },
  {
    "installType": "AVAILABLE",
    "packageName": "com.android.chrome"
  }
]

In this example:

Instagram is blocked in the personal profile
Chrome is explicitly allowed

Use this to:

Block high‑risk or time‑wasting apps
Ensure critical apps remain available for personal use (e.g., browsers, banking)

2.6 Disable Screen Capture in Personal Profile

personalUsagePolicies.screenCaptureDisabled

Display name: Disable Screen Capture in Personal Profile
Type: Boolean
Default: false
Minimum OS: Android 9+

What it does

When true, users cannot take screenshots or record the screen in the personal profile.

Helps prevent work content visible on screen from being captured via personal apps
Useful when users regularly switch between work and personal apps and sensitive info may be visible.

2.7 Bluetooth Sharing

personalUsagePolicies.bluetoothSharing

Display name: Bluetooth Sharing
Type: String
Default: BLUETOOTH_SHARING_UNSPECIFIED
Options:
- BLUETOOTH_SHARING_UNSPECIFIED
- BLUETOOTH_SHARING_ALLOWED
- BLUETOOTH_SHARING_DISALLOWED
Minimum OS: Android 8+
Scope: Company-owned devices with a work profile

What it does

Controls whether Bluetooth sharing is allowed from the personal profile.

BLUETOOTH_SHARING_ALLOWED – Personal profile can share via Bluetooth
BLUETOOTH_SHARING_DISALLOWED – Bluetooth sharing from the personal profile is blocked

Use this to reduce the risk of data being moved off the device via Bluetooth from personal apps.

Example Policy Payload

Below is an example of a stricter personal usage setup:

{
  "funDisabled": true,
  "personalUsagePolicies": {
    "accountTypesWithManagementDisabled": [
      "com.google"
    ],
    "cameraDisabled": true,
    "personalPlayStoreMode": "BLOCKLIST",
    "maxDaysWithWorkOff": 7,
    "personalApplications": [
      {
        "installType": "BLOCKED",
        "packageName": "com.instagram.android"
      },
      {
        "installType": "AVAILABLE",
        "packageName": "com.android.chrome"
      }
    ],
    "screenCaptureDisabled": true,
    "bluetoothSharing": "BLUETOOTH_SHARING_DISALLOWED"
  }
}