whatisgithub

What is xprivacylua?

android-hacker/xprivacylua — explained in plain English

Analysis updated 2026-07-20 · repo last pushed 2020-05-25

11JavaAudience · generalComplexity · 4/5DormantLicenseSetup · hard

In one sentence

XPrivacyLua is an Android privacy tool that feeds fake data to apps instead of letting them access your real contacts, location, and other sensitive info, so apps keep working without seeing your real data.

Mindmap

mindmap
  root((repo))
    What it does
      Feeds fake data to apps
      Blocks audio and SMS
      Hides contacts and location
    Requirements
      Needs rooted Android device
      Requires Xposed framework
      Android 6.0 Marshmallow or later
    Use cases
      Protect personal data from apps
      Use social apps safely
      Stop analytics tracking
    License
      Free and open source
      GPL license
    Limitations
      Cannot block all audio recording
      Fails on obfuscated apps
      May break some apps like Google Maps

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

What do people build with it?

USE CASE 1

Use social media apps without sharing your real contacts, location, or messages with them.

USE CASE 2

Prevent apps from recording audio, video, or sending SMS messages without your knowledge.

USE CASE 3

Stop analytics and tracking tools built into apps from collecting data on your behavior.

USE CASE 4

Write custom restriction rules for apps that the built-in protections don't cover.

What is it built with?

JavaAndroidXposed

How does it compare?

android-hacker/xprivacylua100/stock-analysis-markovashishps1/clustering-ssh-attacks
Stars111111
LanguageJavaJavaJava
Last pushed2020-05-252016-12-252016-07-04
MaintenanceDormantDormantDormant
Setup difficultyhardeasymoderate
Complexity4/53/53/5
Audiencegeneralresearcherops devops

Figures from each repo's GitHub metadata at analysis time.

How do you get it running?

Difficulty · hard Time to first run · 1h+

Requires a rooted Android device running 6.0 or later with the Xposed framework installed and configured.

Free to use and modify, but any modified versions must also be open source under the same GPL license.

So what is it?

XPrivacyLua is an Android privacy tool that feeds fake data to apps instead of letting them access your real personal information. The core problem it solves is that when you revoke permissions from an app the normal Android way, the app might crash or refuse to work. This tool takes a different approach: it gives apps dummy data so they keep running normally, but your actual contacts, location, messages, and other sensitive info stay protected. The tool can restrict a wide range of data. It can hide your contacts, call log, calendars, and installed apps. It can fake your location, device identifiers like the IMEI, and Wi-Fi network names. It can block apps from recording audio or video, prevent them from sending SMS messages, and even block analytics tools that apps use to track your behavior. You can also write custom restriction definitions if the built-in ones don't cover a specific app's behavior. This is designed for privacy-conscious Android users running Android 6.0 Marshmallow or later. For example, if you want to use a social media app but don't trust it with your real location or contacts list, this tool lets you grant those permissions while secretly feeding the app empty or fake data. It works with both regular apps and system apps, and supports multiple user profiles on the same device. The project requires the Xposed framework, which is a tool that lets modules intercept and modify how apps behave on a rooted Android device. This means it is not a simple app store download, you need a device where you have installed Xposed. The tool itself is free and open source under the GPL license. There are some limitations worth noting. It cannot prevent audio recording through certain methods some apps use, like WhatsApp's approach. Some tracking restrictions only work on apps whose code has not been obfuscated, meaning developers can technically make their apps harder to protect against. A few specific apps like Google Maps may throw errors when certain restrictions are active.

Copy-paste prompts

Prompt 1
How do I install and configure XPrivacyLua with the Xposed framework on my rooted Android device to feed fake location data to social media apps?
Prompt 2
Write a custom restriction definition for XPrivacyLua that blocks a specific app from reading my Wi-Fi network name and device IMEI.
Prompt 3
Explain how to set up XPrivacyLua to prevent apps from recording audio while still letting the app function normally on Android 6.0 or later.

Frequently asked questions

What is xprivacylua?

XPrivacyLua is an Android privacy tool that feeds fake data to apps instead of letting them access your real contacts, location, and other sensitive info, so apps keep working without seeing your real data.

What language is xprivacylua written in?

Mainly Java. The stack also includes Java, Android, Xposed.

Is xprivacylua actively maintained?

Dormant — no commits in 2+ years (last push 2020-05-25).

What license does xprivacylua use?

Free to use and modify, but any modified versions must also be open source under the same GPL license.

How hard is xprivacylua to set up?

Setup difficulty is rated hard, with roughly 1h+ to a first successful run.

Who is xprivacylua for?

Mainly general.

Open on GitHub → Ask about another repo

This repo across BitVibe Labs

Verify against the repo before relying on details.