LETHE / catalog

Legal

Privacy Policy

Last updated: 16 July 2026

This policy covers the Lethe Android app and the Lethe web catalog at catalog.cyborg-netics.com, both operated by CyborgNetics.

What Lethe does

Lethe reads the installed applications on your Android device and inspects their compiled code for the signatures of known tracker SDKs — advertising, analytics, attribution, and profiling libraries. It then compares the declared permissions for each app against that finding to produce a risk score. The purpose is to show you what is embedded in apps on your phone, not to collect data about you.

What stays on your device

The following never leave your device:
  • The list of apps installed on your device.
  • The raw APK content or class names parsed during analysis.
  • Any files associated with your installed apps.
The on-device analysis is performed locally and the raw results are discarded immediately after matching.

What is sent to our servers

After on-device analysis, the Lethe app sends only:
  • The names of matched tracker SDKs — for example “Google AdMob”, “AppsFlyer” — not the apps that contained them.
  • The declared permissions of each app — for example ACCESS_FINE_LOCATION — without identifying which app declared them.
This information is used to compute a risk score and is not stored after the response is returned to your device.

Data we do not collect

We do not collect, store, or sell:
  • Your name, email address, or any account information.
  • Your device identifier, advertising ID, or IP address.
  • Your location.
  • Your list of installed applications.
  • Any usage analytics or crash reports from the app.

The QUERY_ALL_PACKAGES permission

The Lethe app requests the QUERY_ALL_PACKAGES Android permission. This permission is required to enumerate the apps installed on your device so that each one can be analysed. It is used solely for on-device analysis and is never used to transmit your app list to any server.

Web catalog

The web catalog at catalog.cyborg-netics.com allows anyone to look up a published Android app by its package name. The analysis is performed server-side using publicly available APK data. We do not associate lookups with individual users and do not set tracking cookies.

Third-party services

The Lethe app and website do not embed any third-party advertising, analytics, or tracking SDKs. Server infrastructure is provided by Fly.io (fly.io), subject to their own privacy policy.

Data retention

No personal data is retained. Risk scoring requests are processed in memory and not written to disk.

Children

Lethe is not directed at children under 13. We do not knowingly collect any information from children.

Contact

Questions about this policy: privacy@cyborg-netics.com