android-hacker/xprivacylua — explained in plain English
Analysis updated 2026-07-20 · repo last pushed 2020-05-25
Use social media apps without sharing your real contacts, location, or messages with them.
Prevent apps from recording audio, video, or sending SMS messages without your knowledge.
Stop analytics and tracking tools built into apps from collecting data on your behavior.
Write custom restriction rules for apps that the built-in protections don't cover.
| android-hacker/xprivacylua | 100/stock-analysis-markov | ashishps1/clustering-ssh-attacks | |
|---|---|---|---|
| Stars | 11 | 11 | 11 |
| Language | Java | Java | Java |
| Last pushed | 2020-05-25 | 2016-12-25 | 2016-07-04 |
| Maintenance | Dormant | Dormant | Dormant |
| Setup difficulty | hard | easy | moderate |
| Complexity | 4/5 | 3/5 | 3/5 |
| Audience | general | researcher | ops devops |
Figures from each repo's GitHub metadata at analysis time.
Requires a rooted Android device running 6.0 or later with the Xposed framework installed and configured.
XPrivacyLua is an Android privacy tool that feeds fake data to apps instead of letting them access your real personal information. The core problem it solves is that when you revoke permissions from an app the normal Android way, the app might crash or refuse to work. This tool takes a different approach: it gives apps dummy data so they keep running normally, but your actual contacts, location, messages, and other sensitive info stay protected. The tool can restrict a wide range of data. It can hide your contacts, call log, calendars, and installed apps. It can fake your location, device identifiers like the IMEI, and Wi-Fi network names. It can block apps from recording audio or video, prevent them from sending SMS messages, and even block analytics tools that apps use to track your behavior. You can also write custom restriction definitions if the built-in ones don't cover a specific app's behavior. This is designed for privacy-conscious Android users running Android 6.0 Marshmallow or later. For example, if you want to use a social media app but don't trust it with your real location or contacts list, this tool lets you grant those permissions while secretly feeding the app empty or fake data. It works with both regular apps and system apps, and supports multiple user profiles on the same device. The project requires the Xposed framework, which is a tool that lets modules intercept and modify how apps behave on a rooted Android device. This means it is not a simple app store download, you need a device where you have installed Xposed. The tool itself is free and open source under the GPL license. There are some limitations worth noting. It cannot prevent audio recording through certain methods some apps use, like WhatsApp's approach. Some tracking restrictions only work on apps whose code has not been obfuscated, meaning developers can technically make their apps harder to protect against. A few specific apps like Google Maps may throw errors when certain restrictions are active.
XPrivacyLua is an Android privacy tool that feeds fake data to apps instead of letting them access your real contacts, location, and other sensitive info, so apps keep working without seeing your real data.
Mainly Java. The stack also includes Java, Android, Xposed.
Dormant — no commits in 2+ years (last push 2020-05-25).
Free to use and modify, but any modified versions must also be open source under the same GPL license.
Setup difficulty is rated hard, with roughly 1h+ to a first successful run.
Mainly general.
This repo across BitVibe Labs
Verify against the repo before relying on details.