Effective date: 2 November 2026 · Applies worldwide · Version 1.8
The short version. Android Orbit runs entirely on your device. It has no account, no analytics, no advertising, and no server that stores information about you. Your app list, your launch counters, your folders and your layout never leave the phone. The only network traffic is the update check against this website.
Android Orbit ("the app", "we") is a free, open launcher utility distributed as a signed APK from this website and its mirror. This policy describes how the app handles information, in line with the EU General Data Protection Regulation (GDPR), Google Play's user data principles, and common international requirements. It is written to be readable, not to hide anything.
| List of installed apps | Read through the public LauncherApps API so the
orbit can show apps you can launch. Kept in memory only. |
| App icons | Loaded through LauncherApps and cached in memory for the
duration of the overlay. |
| Usage statistics | Only if you grant "Usage access". Read with
UsageStatsManager to sort the inner rings by how often you open apps. The result is
a ranking computed locally; the raw data is never copied off the device. |
| Launch counters | The app also counts launches performed from the orbit itself and stores those counters in its private preferences. |
| Your settings | Icon size, ring spacing, ring rotation, folders, pinned apps, calibration and the fan position are stored in the app's private storage. |
All of the above stays in the app's private data directory. Android protects it from other apps; uninstalling Android Orbit deletes it.
When the app starts, and when you press "Check for updates", it performs HTTPS requests to
https://orbitmenu.lusina.net/version.json. If a newer build exists, the app downloads
the APK from the same host and verifies its SHA-256 before handing it to the Android installer.
Those requests contain nothing but the usual HTTP information (IP address, user agent, time). Like any web server, the host may keep short-lived access logs for security and abuse prevention. The app does not send your device identifiers, app list, or any usage information with the request.
If you do not want any network traffic, simply do not use the in-app updater — the app works fully offline otherwise.
| Draw over other apps | Needed to display the corner handle and the orbit on top of the current app. This is a display permission; the app cannot read the screen through it. |
| Usage access | Optional. Only used to rank apps for the inner rings. |
| Foreground service | Keeps the handle alive; Android requires a visible notification for it. |
| Notifications | Shows that required notification (Android 13+). |
| Accessibility service | Optional alternative trigger that avoids the overlay permission. It observes only touches on its own handle. |
| Internet | Update check and APK download. |
| Install unknown apps | Hands a downloaded update to the Android installer. The app cannot install anything silently. |
Where the GDPR applies: reading your app list and drawing the overlay is necessary to perform the service you asked for (Art. 6(1)(b)). Usage access is processed on the basis of your consent (Art. 6(1)(a)), which you give by granting the permission and can withdraw at any time in the system settings. The update check relies on our legitimate interest in delivering security fixes (Art. 6(1)(f)) and can be avoided by not using the updater.
Because the app does not collect personal data on a server, there is no profile to export or delete remotely. You remain in full control locally: clear the app's storage or uninstall it to remove everything at once. If you believe the app processes personal data anyway, you have the right to ask for access, rectification, erasure, restriction, portability and objection, and to lodge a complaint with your local data protection authority.
Android Orbit is a general-purpose utility that is not directed to children and does not knowingly collect information from anyone, including children under 13 (COPPA) or 16 (GDPR).
All release APKs are signed; updates are downloaded over HTTPS and verified against the SHA-256
published in version.json. Android only installs an update signed with the same key as
the installed app, so a third party cannot replace it with a modified build.
This policy is intended to satisfy users worldwide. No personal data is transferred across borders because no personal data is collected by us. Where local law grants stronger rights than described above, those rights prevail.
Material changes will appear in the changelog together with a new app version, and the effective date above will be updated. Every app version is listed on that page, so you can always see what changed and when.
Questions about privacy: open an issue at github.com/ussdeveloper/android-orbit. Please do not include personal data in public issues.