Prism for Android
// what we collect
Nothing. lone-cloud operates no server that receives data from the app, and the app contains no analytics, telemetry, advertising, or crash-reporting SDKs.
// what the app stores on your device
- Your push service URL, and if you use a Prism server, its URL and your API key. The API key is encrypted with AES-256-GCM using a key held in the Android Keystore.
- Per-channel WebPush encryption keys, encrypted the same way.
- The UnifiedPush registrations you create — which app owns which channel.
- Notification content needed to display and act on a message.
All of it lives in the app's private storage. Android backup is disabled, so it is not copied to Google's cloud backup. Uninstalling Prism deletes all of it.
// what leaves your device
- Your push service — Mozilla's by default, or whichever you configure. The app holds an encrypted connection to it. The push service sees the connection, the subscription endpoint it issued you, and when messages arrive. It cannot read notification contents.
- Your Prism server, only if you configure one: the channels you register, and the data needed to route your notifications.
- Notification payloads are end-to-end encrypted (RFC 8291 / aes128gcm) before reaching the push service, which relays ciphertext.
If you point Prism at a server over plain HTTP — a machine on your LAN, say — that traffic is not encrypted. Use HTTPS for anything reachable from outside your network.
// permissions
Prism asks Android for the list of installed apps so it can offer the manual-channel picker: a way to deliver notifications for apps that do not implement UnifiedPush. That list is used on the device only and is never transmitted anywhere.
// third parties
The default push service is operated by Mozilla, not by us, and their handling of your connection is governed by their privacy policy. We receive nothing from it. We do not sell or share data, because we hold none.
// children
Prism is a self-hosting tool and is not directed at children. We do not knowingly collect data from anyone, children included.
// your control
Unregister a channel in the app, or uninstall it, to remove everything. Since we hold no data about you, there is nothing to delete on our end.
// changes
When this policy changes, the effective date above changes with it.
// contact
This policy covers the Prism Android app only. The lonecloud.dev website has its own handling.