Legal
Privacy Policy
Last updated: 16 July 2026
This policy covers the Lethe Android app and the Lethe web catalog at catalog.cyborg-netics.com, both operated by CyborgNetics.
What Lethe does
Lethe reads the installed applications on your Android device and inspects their compiled code for the signatures of known tracker SDKs — advertising, analytics, attribution, and profiling libraries. It then compares the declared permissions for each app against that finding to produce a risk score. The purpose is to show you what is embedded in apps on your phone, not to collect data about you.
What stays on your device
The following never leave your device:
- The list of apps installed on your device.
- The raw APK content or class names parsed during analysis.
- Any files associated with your installed apps.
What is sent to our servers
After on-device analysis, the Lethe app sends only:
- The names of matched tracker SDKs — for example “Google AdMob”, “AppsFlyer” — not the apps that contained them.
- The declared permissions of each app — for example ACCESS_FINE_LOCATION — without identifying which app declared them.
Data we do not collect
We do not collect, store, or sell:
- Your name, email address, or any account information.
- Your device identifier, advertising ID, or IP address.
- Your location.
- Your list of installed applications.
- Any usage analytics or crash reports from the app.
The QUERY_ALL_PACKAGES permission
The Lethe app requests the QUERY_ALL_PACKAGES Android permission. This permission is required to enumerate the apps installed on your device so that each one can be analysed. It is used solely for on-device analysis and is never used to transmit your app list to any server.
Web catalog
The web catalog at catalog.cyborg-netics.com allows anyone to look up a published Android app by its package name. The analysis is performed server-side using publicly available APK data. We do not associate lookups with individual users and do not set tracking cookies.
Third-party services
The Lethe app and website do not embed any third-party advertising, analytics, or tracking SDKs. Server infrastructure is provided by Fly.io (fly.io), subject to their own privacy policy.
Data retention
No personal data is retained. Risk scoring requests are processed in memory and not written to disk.
Children
Lethe is not directed at children under 13. We do not knowingly collect any information from children.
Contact
Questions about this policy: privacy@cyborg-netics.com