Privacy Kit banner

Privacy Kit

Privacy Kit is an LSPosed module for per-app Android identifier spoofing.

It is designed for users who want more control over the identifiers that apps can read from their device. Instead of changing identifiers globally, Privacy Kit lets you manage spoofed values on an app-by-app basis so each selected app can receive its own controlled identity.

What Privacy Kit Does

Privacy Kit hooks supported Android identifier access paths through LSPosed and returns configured spoofed values to selected apps. This can help separate app profiles, reduce cross-app tracking based on stable identifiers, and test how apps behave when device identity values are changed.

This module does not make a device anonymous by itself. Apps can still use many other signals, including account login, IP address, network metadata, browser state, app-specific storage, sensors, permissions, and server-side behavior.

Key Features

  • Per-app identifier spoofing for selected target apps.
  • LSPosed/Xposed module integration.
  • One-tap AI Auto Profile and Maximum Privacy profile flows.
  • Isolated browser account sessions using Android System WebView on supported Android versions.
  • Hotfix WebView compatibility for commerce, checkout, login, and payment flows in release 7-1.6.
  • Live in-process updates (as of release 10-1.8) so location, Build fields, and identifier changes apply to an already-running target app without a relaunch.
  • Region Preset, per-app walk/jog and drive Activity Simulation scheduling, saved Favorite Locations, and a map-based coordinate picker for location spoofing (as of release 10-1.8).
  • Hook Diagnostics, an in-app hook log viewer, and history views for troubleshooting LSPosed scope, profile, and hook activity.
  • Package name: com.sal.privacykit.
  • Release-only public repository for LSPosed distribution.
  • Official APK releases published through GitHub Releases.
  • Public checksum information for release verification.

Requirements

  • Android device with root access.
  • Magisk or another supported root environment.
  • LSPosed installed and working.
  • A compatible Android version for your LSPosed setup.
  • Basic understanding of Xposed module behavior and app compatibility risks.

Installation

Install Privacy Kit from one of the official public release locations:

After downloading, install the APK on the device where LSPosed is already set up. Do not install APKs from unknown mirrors unless you can verify the checksum against the official release information below.

Enabling the Module in LSPosed

  1. Open the LSPosed manager app.
  2. Go to the Modules section.
  3. Select Privacy Kit.
  4. Enable the module.
  5. Select the apps you want Privacy Kit to affect.
  6. Reboot the device if LSPosed asks you to, or force stop and restart selected target apps when appropriate.

Only enable the module for apps you intend to manage. Keeping the scope narrow usually makes troubleshooting easier and reduces unexpected behavior.

Basic Usage Flow

  1. Install Privacy Kit from the official LSPosed/GitHub release.
  2. Enable Privacy Kit in LSPosed.
  3. Select the target apps that should receive spoofed identifiers.
  4. Open Privacy Kit and configure the identifier values or profiles you want to use.
  5. Restart the target apps so they read the updated values.
  6. Test each app carefully and adjust settings if an app behaves unexpectedly.

For best results, change one app or profile at a time and confirm that the app still works before applying broader changes.

Privacy and Security Notes

  • Identifier spoofing is only one privacy layer and should not be treated as a complete anonymity solution.
  • Apps may combine identifiers with account data, cookies, local storage, IP addresses, device signals, and server-side records.
  • Some apps may block access, fail integrity checks, reset sessions, or behave unpredictably when identifiers change.
  • Use separate accounts, network protections, browser hygiene, and permission controls when your privacy model requires stronger separation.
  • Keep LSPosed, Magisk, Android security patches, and installed modules up to date whenever possible.

Troubleshooting

The module does not appear in LSPosed

  • Confirm that the APK installed successfully.
  • Confirm that LSPosed is active.
  • Reboot the device and check the LSPosed manager again.

A target app is not affected

  • Make sure Privacy Kit is enabled for that specific app in LSPosed.
  • Force stop the target app and open it again.
  • Reboot if the app was running before the module was enabled.
  • Check whether the app reads identifiers through a path not currently handled by the module.

An app crashes or blocks access

  • Disable Privacy Kit for that app and restart it.
  • Try a fresh profile or less aggressive identifier changes.
  • Clear the app's data only if you understand the consequences, including loss of local sessions or settings.
  • Some apps may not be compatible with identifier spoofing.

The APK cannot be installed

  • Make sure you downloaded the APK from the official release page.
  • Remove conflicting old builds if Android reports a signature or downgrade issue.
  • Verify that your Android and LSPosed setup are supported and functional.

Release and APK Verification

Official release:

https://github.com/Xposed-Modules-Repo/com.sal.privacykit/releases/tag/10-1.8

Official APK:

https://github.com/Xposed-Modules-Repo/com.sal.privacykit/releases/download/10-1.8/app-release.apk

Expected SHA-256 for app-release.apk:

827286F703BEEEF333AA82F7215CED15732B203F6A9ABAFEAF39EC0DBA51D578

On a desktop system, compare the downloaded file's SHA-256 hash with the value above before installing. If the hash does not match, do not install the APK.

Support and Donations

Privacy Kit takes time to build, test, maintain, and support. If the module is useful to you and you are able to help, a donation would mean a lot. Your support helps the developer continue this work and helps support their family with everyday needs, including food and living expenses.

Donation link: TODO: add donation link

Thank you for using Privacy Kit, sharing feedback, and supporting independent Android module development.

Source Availability

This public repository is intentionally release-only. It hosts public documentation, release metadata, and links to official APK releases for LSPosed distribution.

The Android application source code, build project, signing material, private tooling, and generated build outputs are not published in this repository. The source code is maintained privately by the developer.

Disclaimer

Use Privacy Kit only on devices and apps where you understand and accept the privacy, compatibility, legal, and policy implications. You are responsible for how you use this module. Some apps and services may restrict access, enforce integrity checks, terminate sessions, or behave unexpectedly when device identifiers are changed.

Releases

7/25/2026, 3:23:01 PM

New anti-fingerprint coverage

  • SystemProperties hook — spoofs ~60 ro.* properties (brand, fingerprint, per-partition product props, marketname, SoC/board, hardware, radio, locale) read via SystemProperties.get.
  • getprop exec hook — rewrites getprop <key> and bare getprop dumps run via Runtime.exec/ProcessBuilder, closing the native-shell cross-check.
  • Derived build propsro.build.version.incremental, ro.build.description, ro.build.flavor derived from the spoofed fingerprint; Build.HOST/USER/VERSION.INCREMENTAL no longer leak.
  • NetworkInterface MACNetworkInterface.getHardwareAddress() returns the spoofed Wi-Fi MAC for wlan/p2p/eth (closes a MAC bypass).

New "Privacy Restrictions" (opt-in, per profile)

Set an item's rule to Empty / Restricted to return an empty result: Device Accounts, Bluetooth bonded devices, Wi-Fi scan results, Wi-Fi configured networks, Cell info; Contacts, Call log, SMS/MMS, Calendar.

Fixes

  • AI profile generation updated to current provider models (DeepSeek deepseek-v4-flash, Gemini gemini-2.5-flash); AI Providers settings show every provider's saved key.

Assets

1

7/12/2026, 6:17:40 PM

Privacy Kit 1.10 (versionCode 12)

Random per launch is now consistent — a spoofed identifier keeps one value for the whole launch (so the getter, GMS-reflection and IPC-binder App Set ID paths all match) and changes on the next launch. Previously each read could differ.

Substitute hooks are a first-class type — new "Substitute value" template and editor (real value to match / replace with); they appear in each profile's Identifiers list and count like other custom hooks. The "Replace with" field accepts a $profile:<key> token to map the spoof to a profile identifier. App Set ID substitution remains automatic per device (the module learns your real value).

Assets

1

7/11/2026, 3:20:14 PM

Privacy Kit 1.9 (versionCode 11)

App Set ID / GMS spoofing — SDK-agnostic value-substitution defeats the async App Set ID binder path (IPC Binder / GMS Result Reflection); added AppSetIdInfo.getId and AOSP android.adservices AppSetId.getId hooks; class-load watcher now also hooks BaseDexClassLoader.findClass so deferred SDK hooks install reliably.

Custom hooks are now per-profile identifiers — they appear in each profile's Identifiers list, configured there (Real / Static / Custom / Random per launch / Random per day); new Apply-to-all action; simplified Custom Hooks screen.

Community configs — new Community section: browse, pick a target app, apply spoof configs shared in a public GitHub repo, and submit your own.

Backup — fixed isolated-session data silently dropped on some devices (portable gzip archiving); live progress dialog, background-safe, completion notification.

License — Expiry now shows the real license duration (0 days = lifetime); added Reset license key.

Logs — simplified diagnostic log; module logs hooked <key> = <value>.

Assets

1

7/4/2026, 12:50:51 PM

Privacy Kit 1.8 adds live in-process configuration updates and new location tooling for the LSPosed app.

Highlights:

  • Live config polling: location policy, Build fields, and identifier hooks (android_id, IMEI, SIM/carrier, Firebase/GMS ids, etc.) now apply to an already-running hooked app within seconds via libxposed API 102's HookHandle.replaceHook (identifiers) and a live-read reference (location/Build fields) -- no more force-stop required for most config changes.
  • Region Preset: sets GPS, timezone, locale, and carrier identifiers together from a set of predefined regions.
  • Activity Simulation: schedules a daily walk/jog (round trip) or one-way drive to a saved Favorite Location, at a random time within a configured morning window.
  • Favorite Locations: save and reuse named coordinates across Region Preset, Location Policy, and Activity Simulation.
  • Map-based location picker (MapLibre, no Google API key required).
  • In-app hook log viewer and a generalized, keyword-driven GMS/Firebase binder discovery tool.
  • Fixed a History screen bug where "not configured" hooks were silently dropped instead of shown.
  • Fixed a live-update loop that could repeatedly reapply a "Random Per Launch" identifier's hook every poll cycle instead of leaving it fixed for the process's lifetime.
  • Kept the LSPosed distribution repository release-only: this release contains the compiled APK and release metadata only, not the private Android source tree.

Verification:

  • Package: com.sal.privacykit
  • Version: versionCode 10, versionName 1.8
  • APK asset: app-release.apk
  • APK SHA-256: 827286F703BEEEF333AA82F7215CED15732B203F6A9ABAFEAF39EC0DBA51D578
  • APK size: 65,478,583 bytes
  • APK Signature Scheme v2: verified
  • Signing certificate SHA-256: 95e9144aa166767181a67b968842c3227bbcdf6e36649100d799d5d7260429a9
  • Manifest debuggable flag: absent / non-debuggable release
  • Release assembly: passed
  • Unit tests: :app:testDebugUnitTest passed

Assets

1

6/29/2026, 9:58:27 PM

Privacy Kit 1.7 is a cleanup and hardening release for the LSPosed app.

Highlights:

  • Refreshed cleanup and license-hardening work from private source commit d261ccd.
  • Fixed license refresh/expiry handling so cached and refreshed license state stays reliable.
  • Improved hook/history reporting stability for spoofed identifier events.
  • Improved Advertising ID hook stability.
  • Improved browser/profile stability around isolated browsing flows.
  • Kept the LSPosed distribution repository release-only: this release contains the compiled APK and release metadata only, not the private Android source tree.

Verification:

  • Package: com.sal.privacykit
  • Version: versionCode 9, versionName 1.7
  • APK asset: app-release.apk
  • APK SHA-256: 6E0952B2C39A06BA5BC938986145E0EB3570FD25C4D2289A19683A63D3AD035B
  • APK size: 17,042,706 bytes
  • APK Signature Scheme v2: verified
  • Signing certificate SHA-256: 95e9144aa166767181a67b968842c3227bbcdf6e36649100d799d5d7260429a9
  • Manifest debuggable flag: absent / non-debuggable release
  • Release assembly: passed
  • Unit tests: :app:testDebugUnitTest passed
  • git diff --check: passed

Assets

1