Privacy Statement

Last updated: May 10, 2025

Introduction

AnduinOS is a free and open-source Linux distribution based on Ubuntu.
We are committed to protecting your privacy.
This document explains how AnduinOS handles user data, clarifies its technical design regarding privacy, and outlines considerations related to upstream components.


1. Data Collection by AnduinOS

AnduinOS itself does not collect, transmit, or store any user data.

  • All system operations, configurations, and user activities take place locally on your own device ("local execution").
  • AnduinOS does not include any telemetry, analytics, advertising, tracking, or behavior profiling mechanisms.
  • There are no hidden background processes or network communications initiated by the system for the purpose of gathering user information.

Thus, AnduinOS is fundamentally privacy-preserving by design.


2. Why Local Execution Matters

Local execution means that most features and services of AnduinOS are performedentirely on your computer, with the exception of specific, user-initiated features or essential services detailed below.
This ensures:

  • Control:You retain complete control over your personal data.
  • Transparency:No data leaves your machine without your explicit action or for essential functionality.
  • Security:Reducing external communications limits exposure to interception or exploitation risks.

In a world where remote telemetry has become ubiquitous, AnduinOS deliberately minimizes external dependencies to protect users.


3. Essential Network Connections & Third-Party Services

While AnduinOS is designed for local-first operation, certain features require network access to function. These connections are not used for telemetry, but they do involve communication with external servers, which is an unavoidable requirement for these services to operate and will expose your IP address.

AnduinOS Update Service

To check for and download system updates, AnduinOS connects to our update endpoint at https://www.anduinos.com/upgrade/. This connection is essential for keeping your system secure and up-to-date. As with any standard HTTPS connection, this process will expose your IP address to our server.

SimpleWeather Extension

AnduinOS includes the 'SimpleWeather' GNOME extension to provide current weather conditions.
Our team has reviewed the source code of this extension (source) and confirmed it contains no telemetry.

However, to function, the extension must retrieve location and weather data from third-party services. This includes connecting to https://ipinfo.io/json to determine your location based on your IP address.
We cannot control the privacy practices of ipinfo.io or any weather data providers it uses. Connecting to these services will necessarily expose your IP address to them.


4. Open Source Guarantees Your Freedom

AnduinOS is distributed under theGNU General Public License v3.0 (GPL-v3).
This license guarantees:

  • Freedom to inspect:You can review the source code to verify there are no hidden tracking mechanisms.
  • Freedom to modify:You can adjust the code to suit your needs, including removing any components you distrust.
  • Freedom to redistribute:You can share AnduinOS, either modified or unmodified, under the same license terms.

The open nature of AnduinOS empowers users to independently verify that the system respects their privacy.
There are no proprietary blobs or closed modules outside of upstream dependencies explicitly inherited from Ubuntu.


5. Upstream Software and Privacy Considerations

While AnduinOS itself does not collect any data, it integrates a wide range of upstream open-source software originating from Ubuntu, Debian, GNOME, Flathub, and other sources.
(Some examples and references can be found here).

This includes the use of Ubuntu's official software repositories and mirrors, which are operated by third-party organizations (such as universities and corporations).
When your system checks for software updates (e.g., using apt), it connects to these external servers. This process is essential for system security but will expose your IP address to the operators of the repository mirror you are connected to.

Additionally, some upstream components may have independent data collection mechanisms.
Notably:

  • Canonical Ltd.(Ubuntu's developer) may collect certain system information for statistics and diagnostics purposes via tools like:
    • ubuntu-report
    • popularity-contest
    • Snap store background services (if Snap is manually installed by users)

We strongly recommend users review Canonical'sPrivacy Policyfor details.

AnduinOS doesnotmodify, enhance, or introduce additional telemetry into these upstream components.
It merely redistributes them in their original, unmodified state.


6. How to Handle Potential Ubuntu Telemetry

AnduinOS does not preinstall any telemetry-related packagessuch as:

  • popularity-contest
  • ubuntu-report
  • apport
  • whoopsie
  • Snap daemon
  • Canonical Livepatch service

Thus, by default,AnduinOS does not participate in any system reporting, usage statistics submission, or automated crash reporting.

However, if you manually install packages from Ubuntu repositories or enable certain Ubuntu-specific features, some of these telemetry mechanisms may be introduced.

To ensure full opt-out, you can review and, if necessary, remove these packages using:

sudo apt remove popularity-contest ubuntu-report apport whoopsie

Explanation:

  • popularity-contest : Periodically submits anonymous package usage statistics.
  • ubuntu-report : Collects basic hardware and software details at installation time.
  • apport & whoopsie : Automated error reporting services.

Note:If these packages are not installed (as is the case with a clean AnduinOS installation), no action is required.

AnduinOS is committed to keeping your installation clean and telemetry-free by default.


7. Responsibility Clarification

  • AnduinOS is a community-driven, non-profit projectmaintained in spare time by volunteers.
  • AnduinOS does not have a data collection infrastructureand does not share any information with governments, corporations, or any third parties.
  • For privacy concerns related to third-party applications,please refer to their respective upstream privacy policies.

8. Contact Information

If you have any questions regarding this Privacy Statement or AnduinOS's privacy practices, please contact: