Back to home
Human Launcher — Android

Privacy Policy

Human Launcher does not collect, transmit, or share any of your data — a deliberate design decision, backed by an app that is technically incapable of doing so.

Last updated: July 21, 2026

The short version: the app does not collect, transmit, or share any of your data with anyone, including us. That is a deliberate design decision — and, on top of it, the app is technically incapable of doing so.

Effective for version 1.0.0 and later.

1. The strongest guarantee: no network access

The app does not request the Android INTERNET permission. This is a system-enforced restriction:

  • The Android operating system physically prevents the app from opening any network connection.
  • This is not a “we promise not to use the network” claim — the OS refuses network access to apps without the INTERNET permission.
  • You can verify this yourself, without trusting our word:
    1. Play Store listing: open the app's page → “About this app” → “App permissions” → there is no “INTERNET / full network access” entry.
    2. Independent audit: Exodus Privacy is an independent non-profit that analyzes Android apps and publishes each app's permission list and any embedded trackers. Anyone can submit the app for analysis and inspect the result.

If you have ever wondered whether to trust an app that says it doesn't send data — here, you don't have to trust us. The guarantee is enforced by Android itself.

2. Who we are

Human Launcher is published by El Parque Software Factory (elparquefactory.com), an Argentina-based software studio.

For privacy-related matters: privacy@elparquefactory.com.

3. Why this app is free — our mission

Human Launcher is El Parque Software Factory's service to the community. Its purpose is to support people's well-being: to offer a calm phone, and to act as a small counterweight to an industry that invests enormous resources in keeping people on their screens for as long as possible.

Because of that purpose:

  • The app is free, with no ads and no in-app purchases, so that as many people as possible can use it.
  • It is funded exclusively by voluntary contributions from the community that uses it.
  • Being free does not lower the bar: our commitment is a product of excellence, built and tested to the same standard as commercial software.

This funding model is also the structural reason this privacy policy can be so strict. We have no advertisers, no engagement metrics to sell, and no data-driven revenue of any kind — so the app was simply built without the ability to take your data.

If you use Human Launcher and it improves your relationship with your phone, you can support the project through the links in the app's About screen (Cafecito in Argentina, Ko-fi internationally). Contributions are voluntary, never required, and never unlock features — everyone gets the same app.

4. What data the app handles (locally)

The app's purpose requires it to access certain data on your device. Here is exactly what, why, and what happens to it. None of it ever leaves your device(see “no network access” above), and El Parque Software Factory never receives, holds, or has access to any of it.

App installation list

  • Why: to let you choose which apps appear on your home screen.
  • What is stored: the list of package names you enabled (e.g., com.whatsapp), in the app's private storage.
  • What is NOT stored: no icons kept permanently, no usage statistics, no install dates.

Notifications

  • Why: to filter out notifications from apps you didn't enable, and (optionally) to keep silent copies that reappear when you switch to your factory launcher.
  • What is accessed: the same notification metadata that any Android NotificationListenerService sees — title, text, package name, posting time.
  • What is stored: for filtered notifications only, the title and text are saved to a local encrypted database (SQLCipher, AES-256). The encryption key is stored in the Android Keystore (hardware-backed on supported devices) and never leaves your device.
  • Auto-deletion: saved notifications older than 30 days are deleted automatically.
  • What is NOT stored: notifications marked by their source app as visibility=SECRET (typically banking and 2FA codes) are filtered without ever being saved.
  • Per-app opt-out: in Settings → Notifications you can disable persistence for specific apps.

Your progress (awareness features)

  • Why: to show you your own progress — streaks and simple counts — so the calm is visible, without turning the launcher into a surveillance tool.
  • What is stored: aggregate counters and streaks (numbers only), plus a local log of launcher events: which app was opened through a friction screen, the outcome (opened / cancelled), mode sessions, and timestamps.
  • What is NOT stored: the text you type on the intention screen is never saved — the code path that records the outcome never receives the text, so there is no way for it to be persisted. The app does not measure screen time and keeps no per-app usage statistics beyond the events listed above.
  • Retention: the event log auto-deletes after a period you control (7, 30, or 90 days; default 30). Streaks and counters are aggregate numbers only.

Permissions requested

  • BIND_NOTIFICATION_LISTENER_SERVICE (special access) — to filter notifications from apps you didn't enable. Granted manually by you in system Settings.
  • POST_NOTIFICATIONS — to re-post silent copies of saved notifications when you switch to the factory launcher.
  • EXPAND_STATUS_BAR — lets the swipe-down-on-home gesture open the system notification shade.
  • Home screen role — to act as the launcher you see when you press Home.

The app requests no other permissions — in particular, no INTERNET, no Accessibility Service, no usage-stats access, and no location.

5. What the app does NOT do

  • It does not request the INTERNET permission. The app physically cannot connect to any server, ours or anyone else's.
  • It does not include analytics, crash-reporting, or telemetry SDKs of any kind (no Firebase, no Google Analytics, no Crashlytics — nothing).
  • It does not include advertising SDKs, and shows no ads.
  • It does not use any third-party service. There are no third parties involved in the operation of the app.
  • It does not sync data to the cloud (cloud backup is explicitly disabled via allowBackup="false" plus data-extraction rules).
  • It does not sync data to other devices (device-to-device transfer is disabled).
  • It does not sell, share, or rent any data — there is no data to share.

6. Children

The app does not knowingly collect data from anyone, including children under 13 (or the equivalent minimum age in your jurisdiction). There is no data collection mechanism at all.

7. Your rights and applicable law

Under regulations such as the GDPR (EU), CCPA (California), and LGPD (Brazil), you have rights over personal data that an organization processes about you. Human Launcher's design makes most of them moot: El Parque Software Factory processes no personal data about you — everything the app handles stays on your device, under your exclusive control.

In practice, you exercise your rights directly on the device:

  • Access: all stored information is visible in the app (your app list, saved notifications, your progress).
  • Deletion: saved data can be cleared from the app's settings, and uninstalling the app removes all of its local data (Android deletes the app's private storage, including the encrypted database).
  • Portability / correction: there is nothing held by us to port or correct.

If you believe any of this is inaccurate, or have any privacy question, contact privacy@elparquefactory.com .

8. Changes to this policy

If the app's data handling were ever to change, this document would be updated, and the release introducing the change would note it in the in-app About screen. Such a change would be a significant departure from the app's principles and would never happen silently — in particular, any networking would require adding the INTERNET permission, which the Play Store surfaces to users.

9. Contact