Privacy Policy

Local-first • No tracking • No ads

1. Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information

IRIS — Insight & Recon Interface System provides analysis and visualization of system-related information on Android devices, including app activity, permissions, and network statistics.

All processing is performed exclusively locally on the user’s device. No personal data is transmitted to external servers.

IRIS does not create user profiles, does not track users, and does not collect personal content, location data, or communication data.

3. Types of data processed

Depending on enabled features, IRIS may process the following data locally on the device:

• List of installed applications
• Application names, package names, and icons
• Granted application permissions
• Application usage statistics (foreground and background activity)
• Aggregated network traffic data (upload and download volumes)
• User-defined rules, alerts, and configuration settings

All data remains stored exclusively on the user’s device.

4. Android permissions

IRIS may request the following Android system permissions to provide its features:

• Usage Access (PACKAGE_USAGE_STATS): used to display app usage duration, foreground/background activity, and activity timelines.
• Network statistics access: used to display app-level traffic and aggregated data usage.
• Installed applications access: used to identify installed apps and analyze permissions and metadata.
• Notifications (optional): used exclusively for event-based notifications triggered by user-defined rules.

5. Purpose of processing

Data is processed solely for the following purposes:

• Analysis and visualization of application activity
• Display of system and usage statistics
• Transparency regarding application permissions
• Event-based notifications according to user configuration

6. Legal basis

Data processing is based on the following legal grounds:

• Article 6(1)(b) GDPR — performance of the app’s functionality
• Article 6(1)(a) GDPR — user consent by granting system permissions

7. Storage and deletion

All data is stored locally on the user’s device. No cloud synchronization or external storage is used. All stored data is deleted when the app is uninstalled.

8. Data sharing

No personal data is shared with third parties.

9. Third-party services

IRIS does not use external analytics, tracking, or advertising services. If in-app purchases are offered, payment processing is handled exclusively by the Google Play Store in accordance with Google’s privacy policies.

10. User rights

Users have the right to:

• Access their data
• Request correction or deletion
• Restrict processing
• Withdraw consent at any time

Since all data is stored locally, these rights can be exercised directly through the app or by uninstalling it.

11. Supervisory authority

Users may lodge a complaint with a competent data protection supervisory authority.

12. Changes to this policy

This privacy policy may be updated to reflect functional or legal changes.

Last updated: January 2026

Related: Imprint • Back to top