Privacy & data

Your home, your choices.

Prepared for Folded Glass 1.0 · 28 September 2026. Folded Glass is in development and is not yet published on Google Play.

Who is responsible

Folded Glass Launcher is developed by Erwin Esener. For privacy, support or purchase questions, contact support@erwinesener.com. This policy covers the public launcher, package dev.esener.foldedglass. The launcher uses no server operated by the developer: weather comes from MET Norway directly, and city search and the widget templates are inside the app.

Google search is optional. Submitting a query opens Google in your browser. Google and your browser process it under their own policies. Folded Glass does not save your search history.

Data on your phone

Home layout, chosen apps, notes, widget settings and preferences are stored on your device. Folded Glass queries installed launchable apps to display the app drawer. This app inventory is not uploaded by the launcher.

Calendar access is optional. Calendar events are read locally to display your calendar widgets and are not uploaded. What’s new reads upcoming event instances, including recurring events, and combines them on the phone with optional active mail and app notifications. It does not use AI or a paid API, sign into mailboxes, or save an event or notification history. You can disable individual sources. Phone information such as battery, storage and memory is processed locally.

Notification access is optional. Folded Glass holds active notifications in memory to show app dots, notification lists and mail counts. Message previews are off by default and are shown only when enabled and the device is unlocked. You can exclude apps from the notification list, open notifications and dismiss clearable items. Notification contents are not written to disk, included in backups or uploaded. Mail notification counts do not represent the total unread messages in your inbox. Active media information and playback controls come from Android media sessions and remain on the device.

Public 1.0 health removal

The public edition has no health widget, Health Connect integration or activity-recognition permission. Updating an earlier public build removes the retired widget, selected health metrics and local step totals while preserving other widgets and settings. The separate personal edition is outside this policy.

Weather and city search

Weather is optional. You can select a city without enabling location permission. When device location is enabled, Folded Glass uses available approximate location and rounds coordinates to two decimal places before requesting a forecast. Only rounded forecast coordinates are sent to the weather service; city-search text stays on the phone. Network services also receive connection information, including the device IP address.

There is no intermediate service. Your phone requests the forecast from MET Norway itself, identifying the app and sending the rounded coordinates. MET Norway therefore receives your device’s IP address along with the request and processes it under their own terms; the developer never sees it, stores it, or runs anything in that path.

City search does not leave your phone at all. The place list — GeoNames places of 5000 people or more — ships inside the app, so what you type into the city field is not transmitted anywhere and no geocoding service is contacted. A forecast is cached on your phone for temporary offline use.

Forecasts are supplied by MET Norway. City data is from GeoNames. Both datasets are used under CC BY 4.0, with data adapted for the launcher. The weather provider processes requests under its own data practices.

Car and light connectors

The Tesla and Hue widgets are optional, part of Pro, and inactive until you set them up. They are not operated by Erwin Esener and there is no affiliation with Tesla, Tessie, Signify or Philips Hue.

The Tesla widget uses your own Tessie account, a separate paid service. The access token you enter is stored on this phone, in the launcher’s own settings, and is sent only to api.tessie.com over HTTPS to read your vehicle’s state and to carry out the controls you tap. Tessie and Tesla process those requests under their own privacy policies. Vehicle data is shown while the widget is on screen; it is not uploaded elsewhere, kept as history, or included in layout exports, which exclude connector credentials.

The Hue widget talks directly to the Hue Bridge on your own network. Pairing needs a press of the bridge’s link button and stores an application key and the bridge’s certificate fingerprint on this phone, so later connections must match the bridge you paired with. Light-control requests go directly to your bridge. Automatic discovery contacts discovery.meethue.com, which receives your connection information, including your public IP address, to find bridges on your network. You can enter the bridge address yourself instead. No light-control data is sent to Erwin Esener.

People, pictures and quick toggles

The people card asks for no contacts permission. Each person is chosen through Android's own contact picker, and only that person's name, number and picture are copied into the launcher; nothing else in your address book is read, and tapping a face opens the dialler with the number rather than placing a call.

The photo card uses the Android photo picker, so the launcher receives only the pictures you select. They are copied into the app's private storage, stay on the phone, and are not part of a layout export.

Quick toggles act only where Android allows an app to: the torch is switched through the camera service, which does not read your images. Do not disturb integration requires Android notification-policy access. On Android 15 and later, Folded Glass controls its own Do not disturb rule; other rules can still keep Do not disturb enabled. Internet, sound, flight mode, battery saver and rotation open the system's own panels. Countdown timers open your Clock app, which owns their alerts and controls. The stopwatch, world clock, and sun and moon cards work locally — the world clock uses the city list bundled in the app, and sunrise, sunset and moon phase are calculated on the phone.

Your own background picture

Choosing your own background is optional and uses the Android photo picker, so Folded Glass receives only the single picture you select and no access to the rest of your gallery. That picture is copied into the app’s private storage, scaled down for display, so it keeps working if you later move or delete the original. It stays on this phone, is never uploaded, and is not part of a layout export.

Android widgets from other apps

Android handles your authorization to bind widgets. A provider app controls its widget content, configuration and any network or account processing it performs. Its own privacy policy applies to those activities. Folded Glass stores the widget binding ID and layout information; a binding is released once no current or saved arrangement references it.

Widget templates and layout files

Pro includes a curated set of widget templates. They ship inside the app as data — no plugin, script or download — so browsing and installing one contacts nothing at all, and new templates arrive with an app update.

Templates contain supported layout settings and local notes. They do not download executable plugins. Existing widgets do not change when the catalog updates. Exporting a layout writes supported appearance settings, pinned and hidden app choices, custom notes and launcher widgets, including the names and phone numbers saved in People cards, to a file you choose. Keep that file private: it may contain personal notes and chosen contacts. Layout files also include separate portrait and landscape arrangements, main-widget heights, saved layout templates, taskbar preferences, search and status-bar preferences, text colors and clock style. Picture files are not included. Photos and contact portraits need to be selected again on a new phone. Purchase receipts, connector credentials such as a Tessie token or Hue key, your background picture, notification contents and Android widget configuration are excluded. A document or cloud storage provider you choose handles the exported file under its own policy. Android widgets require fresh binding on a new phone.

Pro purchases

Google Play processes the optional one-time Pro purchase. Folded Glass does not receive your payment-card details. A Play-signed receipt and signature are stored on the phone to verify the product and provide offline access. The app queries Google Play for owned purchases and acknowledges completed purchases when connected. A pending acknowledgement token is kept locally, and a persistent background job retries acknowledgement after the launcher closes or the phone restarts. Purchase receipts and tokens are excluded from layout exports. Clearing app storage does not refund or cancel a purchase; restoration uses the Google Play account that owns it. See Google’s privacy policy.

Support and analytics

If you email support, Erwin receives your email address and the information you choose to include, and uses them to respond to your request. Do not send passwords, API keys or payment-card details. The launcher contains no advertising or product-analytics SDKs. The Folded Glass pages use no analytics scripts, forms, third-party fonts or advertising cookies. The website is hosted on Netlify and delivered through Cloudflare. These services process connection data such as IP addresses, requested URLs and browser information to serve and protect the site, under their infrastructure and security retention policies. See Netlify’s privacy policy and Cloudflare’s privacy policy. Following a link to another page or service is subject to its own data practices.

Your controls

Revoke optional permissions in Android Settings. Remove individual widgets or clear Folded Glass storage to remove local data. Uninstalling removes the app’s local data; Android backup and device transfer of launcher data are disabled. Third-party widget accounts and Google Play transaction records are controlled by their respective services. Contact support to request access, correction or deletion of information provided by email, or to raise a privacy concern.

Updates

This page is updated whenever the data processing changes. The in-app Privacy & support screen also explains the launcher’s data use.