Privacy Policy

Installed app & permission data

Privacy Lens reads the list of apps installed on your device and their declared permissions in order to generate your privacy health score and risk assessment. This analysis is performed locally on your device. We do not transmit your full app list to our servers.

Email addresses (Breach Checker)

When you use the Breach Checker feature, the email address you provide is submitted to a breach-detection API to identify whether it appears in known data breach databases. We do not store your email address on our servers after the lookup is complete. Free users are limited to 3 checks per day.

Scanned URL & link data

URLs you submit to the Link Scanner are analyzed for privacy threats and phishing risk. Submitted URLs may be temporarily processed server-side for analysis. We do not associate URLs with your personal identity or store them beyond the immediate scan session.

App preferences & settings

Your in-app settings (theme preference, notification toggles, auto-scan interval, and scan history) are stored locally on your device using Android DataStore. This data does not leave your device.

Anonymized analytics

We collect anonymized, aggregated usage analytics (feature interactions, session duration, crash reports) to improve app stability and experience. This data cannot be used to identify you personally.

Subscription data

We use Google Play Billing to manage Premium subscriptions. We do not collect or store your payment details. All billing transactions are handled entirely by Google Play.

Privacy Lens requests the following Android permissions to deliver its core functionality:

We request only the permissions necessary to provide the app's stated functionality. We do not request access to your camera, microphone, contacts, location, or storage.

We use your data solely to provide and improve the Privacy Lens experience:

• Privacy health score: Your device's app and permission data is used to calculate your real-time privacy score and identify at-risk applications.
• Breach detection: Email addresses you submit are forwarded to a breach-detection API for lookup and the results are returned to you. Addresses are not retained after the request completes.
• Link analysis: URLs you scan are assessed for phishing and tracker risks. Results are displayed immediately and not retained.
• Background scanning: Pro users who enable auto-scan have periodic permission analysis run on-device by WorkManager, with notifications sent only when threats are found.
• App improvement: Anonymized analytics help us improve scan accuracy, fix bugs, and prioritize new features.

We implement industry-standard security measures to protect any data that passes through our systems:

• All API communications are encrypted in transit using HTTPS/TLS
• App and permission analysis is performed on-device; your full app list is never uploaded to our servers
• Email addresses submitted to the Breach Checker are transmitted securely and not stored after lookup
• Scan history and preferences are stored locally using Android DataStore with no cloud sync
• Anonymized analytics data cannot be reverse-mapped to individual users

Clear scan history

Delete your local scan history and results at any time from the app settings. This is immediate and irreversible.

Disable analytics

Opt out of anonymized usage analytics at any time in Settings without affecting any Privacy Lens features.

Revoke permissions

You can revoke any Android permissions granted to Privacy Lens via your device Settings at any time. Note that revoking core permissions will disable related features.

Data deletion request

Contact us to request deletion of any data we hold about you. We will confirm and complete deletion within 30 days.

Privacy Lens integrates with the following third-party services to deliver its features:

• Breach detection API: Email addresses submitted to the Breach Checker are securely forwarded to a breach-detection API. Only a hashed or k-anonymity-protected form of the email may be transmitted, consistent with the API's privacy model.
• Google Play Billing: Handles all subscription transactions for Privacy Lens Pro. Governed by Google's Privacy Policy and Terms of Service.
• WorkManager (Android): An Android system component used to schedule background scans locally on your device. No data leaves your device via WorkManager.

Privacy Lens is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted personal information through the app, please contact us immediately and we will take steps to delete such information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via an in-app notice or by updating the effective date above. Your continued use of Privacy Lens after changes take effect constitutes your acceptance of the revised policy.

Your use of the app is also governed by our Terms & Conditions.