Privacy Policy
Last updated: September 12, 2026 · Published by KLKR Studio
The short version
Shiro is a home screen (launcher) for Android. It has no accounts, no ads, no analytics and no tracking, and there is no server of ours that it talks to.
Shiro comes in two builds, and this one policy covers both:
- The Solana dApp Store build can reach the network for one thing only: the optional Premium purchase, and restoring it. That happens only when you press the button for it. Everything else in the app works without the network and sends nothing.
- The Google Play build has no internet permission at all, so it cannot send anything anywhere — not a report, not a statistic, not a single request.
Neither build ever sees your private keys or your seed phrase.
What Shiro sends, and when
The Google Play build
Nothing, ever. The INTERNET permission is not declared in this build, and an app
without it cannot make a network request even if its code tried to — which is a claim you can
check for yourself in the app’s permission list, rather than one you have to take on trust.
The Solana dApp Store build: Premium only
This build declares INTERNET, and uses it for Premium and nothing else. Nothing is
sent when Shiro starts, while you use your home screen, or at any time you are not on the Premium
screen.
Buying Premium. When you press the buy button:
- Shiro opens your own wallet app on the phone through Mobile Wallet Adapter, the standard way Solana apps talk to a wallet. The wallet asks you to connect and tells Shiro your public wallet address. Your private keys and seed phrase stay inside the wallet; Shiro never sees them and has no way to ask for them.
- To prepare the payment, Shiro contacts the public Solana network endpoint
https://api.mainnet-beta.solana.com. It sends there: your SKR token account address (which is derived from your public wallet address) to read its SKR balance, the receiving address to check that it can accept SKR, and a request for a recent block reference. These are the same public lookups any Solana app or block explorer makes. - Shiro builds an unsigned transfer of 500 SKR from your wallet to our receiving address and hands it to your wallet. Your wallet shows it to you, and only if you approve it there does the wallet sign it and send it to the network. If you decline, nothing is paid.
Restoring Premium (after a reinstall or on a new phone). Shiro again connects to your wallet to learn your public wallet address — no payment and no signature are asked for — and asks the same public endpoint for past transactions on the network, to find an earlier Premium payment made from that address.
What this means for your privacy:
- The operator of
api.mainnet-beta.solana.comreceives those requests, and with them your IP address and the addresses involved, as any web server does. Its own privacy policy applies to what it does with them. We do not operate it and receive nothing from it. - A Solana payment is public and permanent. Once made, anyone can see on the blockchain that your wallet address sent 500 SKR to Shiro’s receiving address. That is how the network works, and neither we nor anyone else can remove it.
- We receive the payment itself on the blockchain, like anyone could see it. We do not receive your name, e-mail, phone number or anything else about you, and we keep no list of buyers.
No crash reports
There are no crash reports in either build. Shiro sends nothing about its own failures anywhere.
There is nothing else
Shiro contains no advertising, no analytics SDK, no attribution or install-tracking SDK and no social login. It does not collect usage statistics of any kind.
What stays on your phone
To be a home screen at all, Shiro reads things that never leave the device:
- The list of apps installed on your phone (Android permission
QUERY_ALL_PACKAGES) — needed to draw the app list and the home screen. It is used to draw, and is never transmitted. - Your arrangement — pages, dock, folders, the order of the app list, grids, icon size, and the Shiro Edge panel. Stored in the app’s private storage on the phone.
- Wallpaper colours — Shiro asks Android for the dominant colours of your wallpaper to tint its own surfaces. It has no access to the wallpaper image itself.
- Whether Premium was bought on this phone (dApp Store build) — a single yes/no, kept in the app’s private storage. It is not included in any backup.
- A layout file, only if you choose to save one — written to the place you pick, and read back only when you choose to restore from it.
Backup and moving to a new phone
If you have Android backup or phone-to-phone transfer switched on, your Shiro arrangement and settings are included, so your home screen arrives on your new phone as you left it.
That backup belongs to you and your device maker’s backup service (for example Google). It goes to your account, not to us. We have no access to it and never receive it.
Permissions, and why each one exists
Both builds:
| Permission | Why |
|---|---|
QUERY_ALL_PACKAGES | To see which apps are installed, so they can be shown. A home screen cannot work without it. |
ACCESS_HIDDEN_PROFILES | To show Android’s private space, if you have one, and the apps in it once you unlock it. |
REQUEST_DELETE_PACKAGES | To let you tap Uninstall on an icon. This only asks the system to show its own confirmation; Shiro cannot remove anything itself. |
EXPAND_STATUS_BAR | To pull down the notification shade when you swipe down on the home screen. Shiro reads no notifications. |
SYSTEM_ALERT_WINDOW | For the optional Shiro Edge side panel over other apps. Used only if you switch that on and grant it. |
FOREGROUND_SERVICE, FOREGROUND_SERVICE_SPECIAL_USE | To keep that side panel running over other apps while it is switched on. |
USE_BIOMETRIC, USE_FINGERPRINT | To ask Android’s own fingerprint or screen-lock prompt before opening a locked app or the hidden space. Android checks the fingerprint; Shiro never receives it. |
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | Added by Android’s support library so that Shiro’s internal messages cannot be read by other apps. It grants nothing. |
The Solana dApp Store build only:
| Permission | Why |
|---|---|
INTERNET | For the Premium purchase and restore, as described above. Nothing else. |
ACCESS_NETWORK_STATE | Added by the wallet connection library (Mobile Wallet Adapter). It only tells whether the phone is online. |
Shiro requests no permission for location, contacts, storage, camera or microphone, and cannot read any of them.
Opening other apps
Tapping an icon starts that app; searching the web from the app list opens your browser; searching the store from the app list opens your app store; in the dApp Store build, the SeekScape row in settings opens the Solana dApp Store, and buying Premium opens your wallet. From that moment the other app’s own privacy policy applies. Shiro does not report what you opened or searched for to anyone.
Children
Shiro is not directed at children and collects no data that could identify anyone, of any age.
Your choices and your rights
- Stop all transmission: in the Google Play build there is nothing to stop — it cannot reach the network at all. In the dApp Store build, simply do not buy or restore Premium: nothing else ever reaches the network.
- Delete everything: uninstalling Shiro removes its stored arrangement and settings from the phone. Any backup copy is removed through your backup provider’s own controls. A payment made on the Solana blockchain is public and cannot be deleted by anyone.
- Ask us anything: we hold no data about you, so there is nothing of yours for us to find, export or delete. Write to us anyway if something here is unclear.
Changes
If this policy changes, the new version is published at this address with a new date above.
Contact
Our publisher page, KLKR Studio, lists how to reach us.