A few questions

Will there be a way to sync apps or update them locally, how Shelter allows with the work profile?

Will private space apps be possible to be placed on the home screen?

If there will be a permissions to lock syncing the clipboard, what is the difference to a work profile here? Would this work here too?

Couldnt the work profile be used just like the private space, without needing to fully trust a 3rd party, possibly outdated app?.

In some 15 alpha versions there was a context menu for adding apps to the private space. This is now gone. Was this a bug, will it be added back?

    DeletedUser59

    DeletedUser59 what about apps who ask for phone permission?

    most likely they also will not work. Without phone permissions and SMS permissions, banking apps are rendered useless in Private Space. Also, those applications which required offline database are also problem on Private Space as I cannot use cable for data transfer from my PC. Syncing over the network is alternative. But, transfer of 50-60 GBs files on the wifi seems too slow, plus deleting private space will delete offline data and will have to repeat it from scratch.
    I liked the feature and idea of accessing the apps which i had to store on another profile from Owner profile itself, but ig i will have to continue to install separate user profiles for my needs.

        Can apps in Private Space know what apps I have in the owner profile, or vice versa?

          fxnn is there another way to install apps into private space from personal space?

          matchboxbananasynergy Simply install the app stores you want in the private space and install the apps as you would normally.

          TrustExecutor What is the process of installing the same app in both owner and private space, to avoid signature/versioning conflict? I dont see an "Install available apps"-feature like in theuser profile management menu.

          missing-root Will there be a way to sync apps or update them locally, how Shelter allows with the work profile?

          As of now, it doesn't seem possible to set up a Private Space in a manner that doesn't put any trust in the local network - you cannot move your VPN app there in the same way as you can do it for separate profiles from Owner. You would need to use Vanadium inside Private Space to download an APK.

          Note for high threat models: Vanadium (and other apps in Private Space) might ping GOS' servers directly as PS has its own VPN slot. Bear that in mind if your threat model includes ISP not knowing that you use GOS.

          I think I tried every possible method to see if it's technically possible. Files app inside PS is not capable of viewing a usb stick.

          The closest I got to installing an app from Owner to Private Space: have .APK downloaded in Owner > go to Files > long press the file > tap on three dots > open with > Private > Installer (inside PS). Selecting it doesn't do anything. Might be a bug. It would be a decent workaround.

                    @GrapheneOS Maybe dumb question: apps inside the Private Space can’t see what other apps are installed in the main profile right? Like it is in user profiles?

                      IcyScroll Private space can still access localhost so you could share the vpn apk file with a http server app in the Owner profile and then open it in the private space with vanadium (with wifi/internet disabled).

                        Hmm
                        Also can app in the owner profile see what apps I have in Provate Space?

                            @GrapheneOS Could you please give an option to hide that +Install button in the private space. It doesn't need to always be there. Its not there in the main profile or work profiles either. You just open the app store of choice to install apps. Also, if i use aurora store for example and press the + sign i can't select it.

                            I have installed Google related apps, banking apps, and WireGuard in my private space.
                            I am very happy to have all of my invasive apps together in a tightly isolated space.
                            I have nothing but gratitude for the GrapheneOS developers.
                            I will be donating money to the cause.

                            I hope that someday there will be the ability to impose restrictions on clipboard sharing.
                            Thank you.

                              Renewably3997

                              I can't tell whether apps (including Sandboxed Google Play) in the Owner Profile can see those in the Private Space and vice versa.

                              But apparently you can not only work with two different Google accounts ( if your setup requires Google Play in Owner Profile and Private Space) Google also seems to encourage this:

                              Since private space is a completely separate space and profile on your device, it doesn’t automatically read the accounts in your main space. You need to sign-in to any accounts you want to use in private space, even if they’re already signed-in on the device. If you sign in to your private space with a Google Account that you use on your main space or any other device, some data will be available outside your private space. This includes data such as: Synced photos, files, emails, contacts, calendar events, and other data.
                              App download history and recommendations.
                              Browsing history, bookmarks, and saved passwords.
                              Suggested content related to your activity in private space apps.
                              To help prevent these kinds of unexpected leaks to your main space, it’s recommended you use a dedicated Google Account for your private space that hasn’t been signed in elsewhere.

                              source: https://support.google.com/android/answer/15341885#different_google_account

                                  Hawk_Tuah You safed my day dude, I really forgot about the fact that I have 2 more profiles with protonvpn on my phone. Makes sense and now it works everything as intended. Thank you so much!

                                  Best regards

                                      The setup page for PS says, at least in Google stock OS: "Anyone that connects your device to a computer or installs harmful apps on your device may be able to access your private space". This doesn't occurs with separate profiles, that are not accessible from apps. Seems that PS is less secure than to have separate profiles, no?

                                        Private Space is for sure the coolest feature in Android 15. I love it!
                                        It would be so cool to have the ability of having multiple Private Spaces in owner, I hope we will get that one day.

                                        And I just noticed that I can't install PWAs in PS, that sucks :(

                                        cdflasdkesalkjfkdfkjsdajfd If you keep it locked, it's as safe as a separate user profile. But you won't be getting notifications. It's another tool, not a replacement.
                                        And in case something goes spectacularly wrong, like someone starting a screen record on Owner, they could see what you're doing in private space, but at this point, you have other problems.

                                        As I see it, currently user profiles have the following security related advantages:

                                        • separate view (I think GrapheneOS mentioned they still investigate this area: accessibility apps, autofill apps, etc.)
                                        • separate clipboard (for now, but GrapheneOS is working on disable option)
                                        • ability to lock and still send notifications (with Graphene's forwarding)
                                        • you can have many of them

                                        I'll move gov-id app and phone carrier app there, as they don't need notifications, and keep it locked. Maybe separate passwords manager and notes apps, with less used, but extra valuable stuff.

                                        From time to time GrapheneOS mentions they work on fast user profile switching, I'm still counting on this.

                                          @GrapheneOS Installing apps in Private Space using Google Playstore grants "Network" permission by default. Is this a bug?