✓LUMENBY NIRMALA Get Lumen ↗

Android privacy client

Your private route.
Android protected.

Lumen provisions a full-device IKEv2/IPsec profile through Android's own platform VPN implementation—without keeping your gateway credentials in the app.

Download latest APK ↗ View source
11–17 Android support IKEv2 Platform tunnel 0 Credentials stored
Lumen by Nirmala Android dashboard
SESSION TYPEPlatform managedIKEv2 / IPsec
PROFILE PRIVACYHanded to AndroidNot retained by Lumen
Android 11–17PSK or EAP-MSCHAPv2Private CA supportJSON or key=value import

01 / Experience

Clear by design

Privacy controls that
explain themselves.

01
TRUSTED GATEWAY

One focused setup path.

Add a trusted IKEv2 server, choose the authentication method supplied by your administrator, and let Android own the encrypted profile.

✓
Gateway required
02
SAFE IMPORT

Bring a prepared profile.

Import a small UTF-8 JSON or key=value profile, review it, then hand it to Android. Lumen does not keep the selected file.

{ } PSK · EAP · CA
03
HONEST PRIVACY

No impossible promises.

Lumen clearly separates what the carrier can observe from what remains inside the tunnel—and reminds you that the gateway must be trusted.

CarrierTunnelGateway

02 / Architecture

Platform first

Built on the security stack
already inside Android.

Encrypted routeProfile status · ready
ADEVICEAndroid appsFull-device traffic
Protected handoff
✓PLATFORMAndroid VPNSystem-owned profile
IKEv2 / IPsec
GENDPOINTTrusted gatewayDestination egress
AUTH PSK or EAP-MSCHAPv2TRUST Public or private CAOWNER Android platform

03 / Privacy boundary

Encrypted.
Not mysterious.

Privacy depends on both the encrypted transport and the gateway you choose. Lumen tells you where that boundary sits.

MOBILE CARRIER

What remains visible

  • VPN gateway address
  • Connection timing
  • Traffic volume
INSIDE THE TUNNEL

What is protected

  • Payloads in transit
  • Destinations from direct carrier inspection
  • DNS carried through the trusted route
YOUR GATEWAY

What you must trust

  • Gateway operator
  • Server configuration
  • Exit-side handling

04 / Compatibility

One client.
Modern Android.

Compatibility paths cover Android 11 and 12 as well as Android 13–17's newer VPN session APIs.

11121314151617

Open source · MIT licensed

Bring a gateway
you trust.

Lumen provides the private route. You stay in control of where it leads.

Download Lumen ↗ Report an issue