Privacy Policy — Morph Launcher

Everything below describes what the app reads on your device, and why. None of it leaves your device, apart from what the Morph Premium and Weather sections describe.

What the app accesses on your device

Your installed apps

A launcher's job is to show and start your apps, so it reads the list of apps installed on the device along with their names and icons. This is used to draw your home screen and app list, and to launch what you tap. The list is never recorded off-device.

Your layout and settings

Where you put each icon, your folders, your icon designs, your wallpaper choice and every preference you set are stored in the app's own private storage on the device. Uninstalling the app deletes all of it.

Images you choose

Pictures you use as a wallpaper, or in an icon or widget, are chosen through Android's photo picker, which gives the app only the picture you select. The app has no permission to read your photo library and does not scan, index or upload it.

Capturing your wallpaper

The wallpaper capture feature takes one picture of your screen, with the launcher's own interface hidden, so its effects can match a wallpaper the app cannot otherwise read (such as a live wallpaper). It only starts after you allow it in Android's screen-sharing dialog, it stops as soon as that one picture is taken, and the picture is kept in the app's private storage on the device. It is never saved to your gallery and never leaves the device. Android requires a short-lived foreground service for this (FOREGROUND_SERVICE_MEDIA_PROJECTION).

Your calendar (calendar widgets)

READ_CALENDAR lets a calendar widget show your upcoming events. It is asked for only when you tap a calendar widget to connect it, or tap Allow beside it in the app's Settings, under About and Permissions; until then the widget shows made-up sample events. Your events are read on the device to draw the widget and never leave it.

Notifications and music (notification dots, notification and music widgets)

Showing a dot on the icons of apps that have notifications waiting, counting those notifications, and showing what is playing all need the launcher to be allowed as a notification listener. You switch this on yourself in Android's settings: from the app's Notification dots settings, from Permissions under About, or by tapping a notification or music widget to connect it. The launcher uses this to read which apps have notifications and how many, and the title, artist, album and cover of what is playing. It does not read what your notifications say. Nothing it reads leaves the device.

Your location (weather widgets)

ACCESS_COARSE_LOCATION lets a weather widget show the weather where you are. It is asked for only when you tap a weather widget set to this phone's location to connect it, or tap Allow beside it in the app's Settings, under About and Permissions, and a widget set to a town you choose needs no location at all. The location is approximate and rounded to about a kilometre before it is used; see the Weather section for where it is sent.

Setting your wallpaper

SET_WALLPAPER lets the app apply a wallpaper you have chosen. It is used for nothing else.

Uninstalling apps

REQUEST_DELETE_PACKAGES lets the app ask Android to uninstall an app when you choose to remove one from your home screen. Android shows its own confirmation, and the app cannot remove anything without it.

Morph Premium and Google Play

Morph Premium is an optional subscription, sold and managed entirely by Google Play. To show its prices and to check whether you are subscribed, the app asks the Google Play app on your device.

• Your payment. Google processes it. The app never sees your payment details, name or email address.
• What we receive. Whether you hold the subscription, and the order details Google Play provides to every developer, such as an order number, the plan, the price, the date and the country. We use them only to handle purchases, refunds and tax records.
• Google's billing library. The app includes Google Play Billing Library, which sends diagnostic information about purchases to Google. This is why the app declares the INTERNET permission; the launcher's own code sends nothing. Google's use of it is governed by Google's privacy policy.
• Canceling. You can cancel at any time in Google Play's subscription settings.

Weather forecasts from MET Norway

Weather widgets get their forecasts from MET Norway, the Norwegian Meteorological Institute, straight from your device. We never receive the request or the answer.

• What is sent. The place's latitude and longitude, rounded to about a kilometre, and the app's name and version, which MET Norway's terms require. As with any internet request, your device's IP address reaches their servers. No account, identifier or anything else about you is sent.
• How often. Only while a weather widget is on screen, and no more often than the forecast changes, usually about once every half hour. Each answer is kept on the device until it expires.
• Finding a place by name. Searching for a town, and naming the town where you are, uses your phone's own geocoding service (on most phones Google's, under Google's privacy policy), which receives what you type, or the rounded location.
• Their terms. MET Norway's own privacy terms govern what their servers keep. The forecasts are theirs, used under the Creative Commons Attribution 4.0 licence.

Sharing a design

You can share an icon look, a wallpaper or a widget you made. The share is made on your device and holds only the design's recipe: its settings, shapes, colors and any text you typed into it. Pictures you added are removed first, and so are a widget's taps that open a shortcut, which can carry a contact's name. Before anything is sent, the app shows you exactly what the share holds.

• How it travels. As a link, sent by the app you choose from Android's share menu, or copied for you to paste where you like. It never passes through us.
• The link's page. A share link points to a page on inkspire-studio.net, hosted by GitHub. The design is in the part of the link after the "#", which a browser never sends to a server, so GitHub receives a request for the page, with your IP address as any web request has, and nothing of the design. The page only offers to open the link in the app.
• Opening a share. A design you receive is drawn on your device, and nothing of it is kept until you choose to keep it. The app reads your clipboard only when you tap Paste a shared link.

Two more things handled by others, not by us

• Widgets. The launcher can host widgets belonging to other apps. Those widgets are the other app's code, running under that app's own privacy policy — not this one.
• Android's own backup. If device backup is enabled in your Android settings, the app's settings and layout may be included in your device's backup to your own Google account. That backup is performed and controlled by Android and Google, not by this app, and is governed by Google's privacy policy. You can exclude it by turning device backup off in your Android settings.

Data we collect

None, beyond the order details Google Play provides if you subscribe (see Morph Premium above). There is no server, no account, no identifier and no telemetry of our own. The weather request goes from your device to MET Norway and never through us. Nothing is shared or sold.

Children

The app is not directed at children and collects no personal information from anyone, of any age.

Changes to this policy

If the app ever gains a feature that changes any of the above, this policy will be updated and its effective date changed before that version is released.

Contact

Questions about this policy: inkspirestudio.support@gmail.com