Privacy Kit 6-1.5 is a focused LSPosed release with smaller packaging, safer profile operations, stronger diagnostics, browser isolation improvements, and additional license hardening. This in-place refresh keeps versionCode 6 / versionName 1.5 and replaces only the release APK asset.
199MB to just 16MB!. Also PLEASE SUPPORT to feed my family and maintain this app.
Highlights
- Reduced APK size by replacing GeckoView with Android System WebView. The refreshed official APK is 16,845,358 bytes, approximately 16.06 MiB.
- Added isolated browser account sessions through a dedicated
:browserprocess and WebViewdataDirectorySuffixsupport on Android 9 and newer. - Added AI Auto Profile as a compact one-tap profile creation flow.
- Added Maximum Privacy as a compact one-tap preset that sets supported identifiers to static spoofed values, without adding default profile notes.
- Improved Hook Diagnostics and history reporting for LSPosed troubleshooting.
New Features
- AI Auto Profile can generate a profile in one guided action.
- Maximum Privacy profile preset applies static spoofed values for supported identifiers.
- Profile screens now show per-profile app data size where available.
- Added a clear app data action for profile-managed app data.
- Improved custom and AI-generated device labels in profile lists and clone flows.
Fixes
- Hardened backup and restore flows against malformed archives and path traversal by validating zip/tar paths before extraction.
- Improved crash handling around backup and restore.
- Fixed fresh profile cleanup and mount reliability issues.
- Fixed scrolling issues on long lists across profile, app, identifier, and diagnostics screens.
- Improved Hook Diagnostics and history state for LSPosed service status, scope checks, active profile display, exported config state, hook tracking, last launch/event reporting, and never-observed identifiers.
Security/License Hardening
- Added tamper-aware license cache handling.
- Added release signing certificate integrity checks.
- Added clock rollback detection.
- Improved server-side license validation, rate limiting, and signed response handling.
Browser Changes
- Removed GeckoView from the distributed APK.
- Browser functionality now uses Android System WebView, with full-screen browser presentation and compatibility improvements for cookies, popups, downloads, media playback, geolocation, and mixed-content handling.
- Browser account sessions are isolated per account/profile on Android 9+ using WebView data directory suffixes.
- Browser work runs in a dedicated
:browserprocess to keep WebView state more clearly separated from the main app process.
Verification
- APK SHA-256:
E217936E2BDE123EC7F1C33BB5864B27F220FAC87B19CEBBD38428331A717CCE - Public release asset verified as
app-release.apk. - Public repository remains release-only and contains only documentation/metadata files.
APK Info
- File:
app-release.apk - Size: 16,845,358 bytes, approximately 16.06 MiB
- Package:
com.sal.privacykit - Distribution: official GitHub/LSPosed release APK
Limitations
- Android System WebView behavior depends on the installed WebView provider and Android version.
- WebView
dataDirectorySuffixisolation requires Android 9 or newer. - Identifier spoofing remains limited to supported identifiers and configured LSPosed scope.
- Apps may still use accounts, IP address, network metadata, cookies, local storage, sensors, permissions, and server-side signals.
- This public repository remains release-only. Source code, signing material, build project files, private tooling, and generated build outputs are not published here.