RWR

about

description

RWR watches through the **front camera** for people looking at your screen from behind (shoulder surfers). When it sees one, it: - pops up a card **over whatever app you are using** with a snapshot of the onlooker (boxed in red, with "laser eyes" showing where they look), - posts a notification, - saves a **photo or a short video clip** (for example 10 s before to 10 s after) to your gallery, and optionally to your own Immich server. It runs in the background and can be switched on and off from the **Quick Settings** panel. **Detection** - **Head tracking**: a face turned toward the screen counts as looking. Lightest on battery. - **Eye tracking**: follows the irises and combines them with head pose, so it alerts only when the eyes point at the screen. - Your own face is recognised and ignored, and faces too far away to read the screen don't count. - A **debug view** shows live what the detector sees and why each face counts or not. **Private by design** - Detection runs **on the phone**, offline, with bundled open-source models (YuNet and MediaPipe Face Landmarker). No analytics, no ads, no accounts. - Nothing leaves the phone unless you pair it with **your own RWR server** (Docker, open source, in the same repository). Then frames go only to your server, over TLS: detection runs there at full frame rate without draining your battery, and snapshots can be uploaded to Immich. - The camera is always off while the screen is off. Android shows its camera indicator while RWR is watching. Requires Android 10 or newer and a front camera. The pop-up needs the "Display over other apps" permission.

publisher

78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d

first seen

2026-10-20T01:13:47.250046+00:00

last event

2026-10-13 13:42 UTC

install

zapstore.dev or any Zapstore-compatible client

topics

#security

source & build

repository

https://github.com/revocx35/rwr

arch flags

android-arm64-v8a

manifest

missing

releases (kind 30063)

2 releases indexed; latest 1.6.0.

version	channel	released	event
1.6.0	main	2026-10-20 11:25 UTC	b70a690e…
1.5.0	main	2026-10-13 13:42 UTC	e01920cc…

assets & verification

Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.

1.6.0 — RWR-1.6.0-arm64-v8a.apk

sha256

87e8559ebc6d983399bb1062553ca0f4b54ea8ce33f69ae9de187b2a0650f91e

size

14.8 MB

archs

android-arm64-v8a

version code

9

apk cert sha256

0cc47cbec28c72addf57966d8aecf04e1636bc18d6dd75dfc90f2c47ee5d6675

download

RWR-1.6.0-arm64-v8a.apk

1.5.0 — RWR-1.5.0-arm64-v8a.apk

sha256

56d3d39e858f5826271a6c4ed7cf795cf38b79b3b361fd414ea6af592c90cdff

size

14.8 MB

archs

android-arm64-v8a

version code

8

apk cert sha256

0cc47cbec28c72addf57966d8aecf04e1636bc18d6dd75dfc90f2c47ee5d6675

download

RWR-1.5.0-arm64-v8a.apk

Showing the newest 2 asset descriptors; the full set is in /api/apps/78ce6faa…