Privacy policy, Palma Launcher
Last updated: 25 October 2026. Applies to the Android app "Palma Launcher" (package com.palmalauncher), and to what Palma, Palma Cam, Palma Arcade, Palma Calculator, Palma Music (with the radio) and Palma Clock send to palmalauncher.com.
In short
Palma collects nothing about you for itself. There is no account, no ads and no tracking. What Palma knows stays on your phone. Something only leaves it when you turn on or use a feature that needs the internet (weather, Smart, news, Wikipedia answers) or share something yourself; the details are below. A small server of ours runs on palmalauncher.com for updates, feedback, the leaderboard, the Palma Wall and Palma Pro; what arrives there is described under "What goes to palmalauncher.com". If you buy Palma Pro, we keep your email address with your licence (see "Buying Palma Pro").
What Palma uses on your phone
Palma asks for a permission only when you turn the matching feature on, and explains why.
| Feature | What Palma reads | Where it stays |
|---|---|---|
| Showing apps | The list of installed apps and their icons | On your phone (a cache of the list and icons, so Palma starts fast). Sent nowhere. |
| Notifications next to your apps | Title and text of notifications, through Android notification access | Memory only; nothing is stored. Only with Smart via the internet and "summarise notifications" on do lines go to the AI provider (see below). |
| Contacts | Names, numbers and photos from your contacts, only while you search | Not stored. If you pick a contact as a favourite or an important person, only the name and a reference to that contact are kept in your settings. |
| Calendar | Your upcoming events | Not stored |
| Weather | Your phone's last known location, coarse (roughly a district). If you also gave Palma precise location for "workspace on Wi-Fi", it can be more exact. | Only the coordinates go to Open-Meteo (open-meteo.com) to fetch the weather, encrypted. No account, no identifier, no cookies. Open-Meteo may have them in its server logs and deletes those after 90 days. If you tap Rain radar, your browser opens windy.com with the same coordinates. |
| News | The addresses of the news sources you choose (up to three; none by default) | Only when you type "news" or open the news pane does Palma fetch the headlines, straight from those sources. Nothing about you goes along beyond the request itself (your IP address and Palma's version). Headlines stay in memory for ten minutes and are not stored. Tap a headline and your browser opens the article. |
| Quick answers (Wikipedia) | The subject of a who-is or what-is question you type in search | Only that subject goes to Wikipedia (Wikimedia Foundation), encrypted, in the app's language, with Palma's version. No account, no identifier. The answer stays in memory only. Turn it off under Settings › Features. |
| Workspace on Wi-Fi | The name of your Wi-Fi network (Android requires location access for it) | On your phone only |
| Screen time, daily limits, rest moment | How long you used apps today and this week, through Android usage access | Not stored. Palma also counts how often you open an app, for the order of your favourites and "Pick up where you were"; that count stays on your phone. |
| Lock screen with a gesture | Nothing. Palma's accessibility service reads no screens and receives no events; it can only lock the screen. | n/a |
| Widgets | The widgets you choose, through the Android widget host | Only the widget ids and your options are kept in settings |
| Notes and search history | What you type | On your phone. Notes are part of your backup. Private search keeps nothing. |
| Voice input | Your voice, through your phone's speech recognition | Palma only gets the text back |
| Smart (AI), "On your phone" | Your question, note text or notification lines, on the device only (Gemini Nano through Google's ML Kit) | The text does not leave your phone. The ML Kit software does send Google diagnostic and usage data (such as a per-installation id and the configured languages). |
| Smart (AI), "Via the internet" | Your question (after a tap), the text of a note you ask AI help for, and with "summarise notifications" the app name with the title and first line of your notifications | Straight to the provider you choose (Gemini, OpenAI or Anthropic), with your own key and under their terms; Palma has no server. The key stays on your phone and is not in backups. |
| Buying Palma Pro | Your payment details, only at Paddle | You pay at Paddle (paddle.com), which handles the sale for us (merchant of record) and processes your payment details under its own privacy policy. Paddle gives us your email address, the transaction number and your country; we keep only the email address and the transaction number (see "Buying Palma Pro" below). The app checks your licence on your phone and asks for a fresh confirmation at most once a year. |
| Updates | Nothing from you. At most twice a day Palma fetches a small file from palmalauncher.com with the latest version number, and on Update the new version. | Only your app's version number is sent. We count per day how many checks and downloads there were, per app and version, without IP addresses (see below). As with any website, our host (Cloudflare) sees your IP address; we do not keep it. |
| Crash log | Technical details of a crash (error, Palma and Android version, device model) | In a file on your phone. It only leaves when you tap Share and pick an app yourself. |
What goes to palmalauncher.com
Our server runs at Cloudflare (a Worker with a database and storage for photos, in their data centres). We never store your IP address, a device id or an installation id (only for Palma Pro, a random id the app makes just for your licence; see "Buying Palma Pro"). To curb abuse (for example at most five feedback messages an hour) the server turns your IP address into a one-way code in memory, using a random key that is replaced every day; that code stays in our database for at most a day and is then gone.
Update check: Palma, Palma Cam, Palma Arcade, Palma Calculator, Palma Music and Palma Clock ask for the latest version number at most every twelve hours and send their own version number along. We count per day the number of checks per app and per version, and the number of downloads per file. These are just numbers; nothing about you or your phone is attached.
Feedback form: only when you send it. What goes: your stars and text, your email address if you fill it in (only to reply to you), and, visible in the form, the app, the version, your device model and the language. We keep it until we have dealt with it; 30 days after that it is deleted, together with your email address and any attachments. Without internet you can simply email us.
Statistics, "Help make Palma better": off by default. If you turn it on, the app sends at most once a day only the two stability numbers below (with app, version, language, kind of device and Android version), and at most once a week the settings too: the app and version, the language, the kind of device (phone, foldable or tablet), the Android version, and a fixed list of settings: your style, your mode, which features are on or off, the number of favourites, the camera style in Palma Cam and the chosen style in Palma Arcade. Plus, every day, two numbers about stability: how often you opened the app since the last time (sessions) and how often it crashed during those, with the app's version number. We add those two numbers per day, app and version to everyone else's; we do not keep them per phone. That shows us whether a new version is stable, and an update stops by itself if it crashes often. The switch shows exactly what is sent. Never your apps, notifications, texts, contacts, photos or location. Nothing is attached that could link the pings to you or to each other. We keep them for at most 13 months.
Feedback attachments: you can choose up to three images (screenshots or photos). The app shrinks them and makes a new JPEG without exif data such as location. Only we can see them in the admin, they are never published and they are deleted with the feedback, at the latest after 90 days. The crash log is only sent if you tick "Send crash log"; it holds technical lines from the last crash, no texts, photos or contacts.
Backups of our server: every night the server makes a copy of its database (feedback with email address, Palma Pro licences with email address, counts, statistics, leaderboard, wall, styles and our own planning) in the storage of our own Cloudflare account, so a failure costs us nothing. Attachments and photos are not part of that copy. Each copy is deleted after 30 days. So whatever we delete (for example handled feedback) is gone from the backups at the latest 30 days later.
One choice for all Palma apps: Palma asks "Help make Palma better" once. The launcher shares only that answer (yes or no) with Palma apps that have the same signature; an app follows it unless you choose otherwise there. Without the launcher, an app asks once on first start.
Installing Palma apps: at your request the launcher can download other Palma apps from palmalauncher.com and offer them for installation; Android asks for confirmation per app. Only the version number goes along, as with the update check.
Leaderboard (Palma Arcade): only if you turn on "Join the leaderboard" (off by default). What goes: the nickname you choose, your score, the game, the style and, for the daily challenge, the day. Nickname and score are visible to everyone on the leaderboard. Want a score removed? Email us.
Palma Wall (Palma Cam): only when you share a photo and give your consent. What goes: the photo, your caption, a name if you fill one in, and the language. Palma Cam first makes a new JPG of at most 2048 pixels without EXIF data (so also without location), and the server strips any remaining metadata once more. We look at every photo; only after approval does it appear on palmalauncher.com/muur, where anyone can see it. A rejected photo is deleted within 7 days (so we can still undo a mistake); in the meantime it is not shown anywhere. You get a removal code (we only keep a one-way code of it): with it you remove the photo in Palma Cam, or you email us. Only share photos you took yourself, and no recognisable people without their consent. The Palma Wall is for people aged 14 or older; if you are younger, ask a parent for permission first (as Spanish data protection law requires).
Buying Palma Pro
You buy Palma Pro once. Payment runs through Paddle (Paddle.com Market Ltd), which acts as the seller (merchant of record) and handles the payment, VAT, the invoice and any refund. Your card or bank details go straight to Paddle; we never see them. Paddle processes them under its own privacy policy (paddle.com/legal/privacy). Paddle sends us your email address, the transaction number and your country.
What we keep, on our server at Cloudflare:
- your email address: to email you your code, to send it again if you lose it, and for a refund;
- Paddle's transaction and customer number, to link the payment to your licence;
- your licence code as a one-way code and encrypted, so we can email it again;
- for each device where you turn on Pro (at most five): a random id the app makes just for this, the device name (for example the model), which Palma app, and when we last heard from that device. That id is linked to nothing else, not to the statistics either. We do not keep your IP address here either.
We do not keep your country. Code and emails: after the purchase your code is on the thank-you page for an hour, and we email it through Resend (resend.com), a service that sends email and sees your address and the email to do so. You can request your code again at palmalauncher.com/en/pro/recover. No newsletter, no advertising.
How long: as long as your licence is valid. After a refund or revocation we keep the record of the sale for 7 more years, as bookkeeping law requires; then we delete it. The nightly backup (30 days) contains it too.
Deleting: email hello@palmalauncher.com. We then delete your email address, your devices and the stored code; your licence keeps working if you have the code, and only the transaction number and date remain for the bookkeeping. You can also release a device in the app.
Palma Music (with radio and podcasts)
Your own music files, playlists and where you were stay on your phone. Only what you start goes online: a station you play, searching the open Radio Browser directory (radio-browser.info, without an id and without their listening counter) and the logo of a station you save; a podcast search (only the search text, to Apple's podcast directory, iTunes); the feeds of your subscriptions when you open Podcasts (at most every half hour); and the episodes you play or download. Whoever provides that station, directory or podcast sees your IP address, as with any radio or podcast app. Some stations send their audio without encryption (http); that is up to the station and applies to any app that plays it. Subscriptions, your place and downloads stay inside the app; no account, no recommendations, no covers from the internet. Palma counts nothing about what you listen to, not in the statistics either. Beyond that, only the update check, feedback if you send it and statistics if you turn them on go online.
The radio is now part of Palma Music. The old separate radio app (version 0.6, the last one) only goes online for the update check and, when you tap it, to download Palma Music from palmalauncher.com.
Palma Clock
Your alarms, timers, cities and the night clock stay on your phone. Palma Clock does not track your sleep and uses no microphone or sensors. The only things that go online are the update check, feedback if you send it and statistics if you turn them on. Palma Clock can wake you with a station or a song from Palma Music. For this, Clock only reads the station list or the songs you pick, directly from those apps on your phone. Clock streams the station itself from the station's own address.
Palma Notes and "Also in the browser"
Your notes, lists and tasks stay on your phone. Only if you turn on "Also in the browser" in Palma Notes do they go to palmalauncher.com, and then encrypted on your device first (AES-256 with a key from your 20-character sync code). They are kept in a separate database, apart from everything else of Palma. Palma only sees encrypted blocks, a random vault id and times; we cannot read the content and we do not know the code. We do see roughly how long each encrypted block is. We do not store IP addresses. On notes.palmalauncher.com your browser decrypts everything itself; the code stays on that computer only if you tick "Remember on this computer". That web app relies on the code that palmalauncher.com sends it; the app on your phone does not. A vault that was not used for 400 days is cleaned up, deleted notes 90 days after they reached us. You can always erase it yourself in the app: your notes are then gone from the server at once, and only a sign that the vault was erased remains (at most 400 days), so your other devices find out.
Website
palmalauncher.com sets one cookie, palma_lang, only when you pick a language in the language menu. It holds just that language code, for a year, so you land in your own language next time. Without it, the site follows your browser language. No other cookies, no analytics, no tracking.
Settings and backup
Your settings (favourites, style, workspaces, gestures, notes) live in Palma's app storage on your phone. A backup is a text file you save wherever you like, by hand or weekly if you turn that on. Palma sends it nowhere. If backup is on in Android, Android includes Palma's settings in your Google account backup (from Android 9 encrypted with your phone's screen lock); the AI key and the crash log are left out.
One backup for the whole family: when you make a backup, Palma asks your other Palma apps for their settings and data (no photos, keys or statistics). This only happens between Palma apps with the same signature, on your phone, and it goes only into your own backup file; nothing goes online. You choose per app what to restore.
Children
Palma is not aimed at children and collects data from no one for itself. Sharing a photo on the Palma Wall is for ages 14 and up; younger only with a parent's permission.
Changes
If this changes, the new version is at palmalauncher.com/privacy and in the app under Settings.
Contact
Questions: hello@palmalauncher.com
Palma Launcher is made by Nicky Mitnick, in Spain.