Over the past few months we have left Cloudflare and Hetzner, moved our AI workloads onto our own hardware, built a captcha from scratch, taken over our own subscription billing, and prepared major updates to Font Manager and the Androidacy Module Manager. Almost none of that produced a visible feature. All of it changes how the platform runs. This post covers what all changed, why, and what reaches you next.
Why we left Cloudflare and Hetzner
Two providers our stack depended on lost our trust this year. We moved off both.
Cloudflare sat in front of everything, handling our content delivery, DNS, and web firewall. What ended the relationship was not any single charge but how billing worked when something went wrong: we continued to be charged for a service after disabling it, something other customers have reported as well, and cancelling cleanly proved harder than it had any reason to be. Three attempts to resolve it through support went unanswered. A provider you trust with your security has to be trustworthy in the small things too.
Hetzner ran our dedicated servers. It raised dedicated-server prices repeatedly through 2026, citing hardware and memory costs, then quietly walked parts of those increases back. Any one adjustment might have been defensible. The pattern was the problem: four changes in a year, explanations that shifted with them, and no way to plan around what our costs would look like six months out. Infrastructure needs to be boring, and this stopped being boring.
So we moved everything: content delivery, DNS, and servers, onto more capable hardware with new providers, and took the time to tune the stack properly rather than provisioning around the problem. We completed the entire move in under three days, roughly a day per layer of the stack, with minimal disruption. That speed was not luck; it is what our disaster-recovery planning exists for, and the procedures and our amazing team held up under a real move. Average response latency has dropped by up to 30%, and the platform stays steadier under load.
If you run services of your own, one lesson travels well: judge a hosting or security provider by how it handles billing and cancellations, not by its headline pricing. That is the part that matters, and most people discover it too late.
AI on our own hardware
Every AI task in our services now runs on machines we own. Until recently that work went to third-party providers under zero-data-retention agreements. It no longer leaves our infrastructure at all. The models we use are a mix: some we trained ourselves, others are strong open-weight models selected for specific jobs. Each has been specialized or picked for its use case.
Most of this operates in the background, handling automatic translations, personalized recommendations, and the automated layer of content moderation that flags problems without a person reading through your activity. Moving it in-house cut latency and cost at the same time. It also means the data behind those tasks is never handed to an outside vendor, which is a firmer kind of privacy than any retention agreement.
AndroidacyAttest: our privacy-friendly captcha
We built our own captcha. AndroidacyAttest is rolling out across our web surfaces in stages and will ship in the next round of app releases.
Commercial captchas each compromise somewhere. Most judge trust by IP reputation and cookies, which penalizes anyone on a VPN, a shared connection, or a fresh browser, while actual bots cycle through reputations faster than the systems can track them. Cloudflare’s Turnstile deserves credit for a smooth experience on mainstream browsers, but it stumbled on less common ones, and our users run everything. AndroidacyAttest ignores IP and cookie reputation entirely and works the same regardless of what browser you bring. The result is a check that is more private and less irritating to clear.
How often you see it depends on your plan. Free users complete a quick check on each action, since that tier attracts most of the abuse, though the check holds nothing about your network against you. Pro and Ultra subscribers see far fewer within normal usage; unusual or excessive activity may temporarily trigger checks on any plan.
Font Manager and Androidacy Module Manager V3 updates
Substantial updates to Font Manager and the Androidacy Module Manager are close. We expect to begin rolling them out within days, and Module Manager V3 in particular has been a long time in development.
Some notes on how the rollout works. It proceeds in stages, so reaching every user takes time. A portion of the newer features launch in early access and will require an Ultra subscription for the next couple of months while we refine them. And if we find a significant problem partway through, we pause the rollout rather than push a flawed build any wider.
Simpler plans, clearer tiers
The subscription tiers now describe themselves: ad-free, Pro, and Ultra, with Ultra replacing the former Premium. Ad-free removes advertising across the website and apps, and does nothing else. Pro adds unlimited downloads with no wait times, custom themes including an AMOLED option, smarter recommendations, high-quality automatic translations, and fewer captchas. Ultra carries everything in Pro plus early access to new features, ticketed support, and members-only spaces.
Pricing held steady with one exception: ad-free rose to $11.99 per year, still close to a dollar a month, to reflect what it costs to run. Our summer sale runs through July 31 and takes 35% off the first term of any plan, Ultra included.
We now handle subscription management ourselves as well, which lowers our costs and removes the billing errors and support tickets that came with delegating it. Payments still go through Stripe. We manage the subscription, Stripe processes the money, and your card details never reach us.
Fewer dependencies, fewer false positives
Two smaller items. We removed a number of third-party libraries from the apps and the website, leaving less external code to leak data or drag performance.
We also revised our abuse prevention, with two aims: keep bad actors from degrading the experience for everyone else, and catch fewer legitimate users by mistake. If you have been flagged before for doing nothing wrong, this work is meant to correct that.
Only install from official sources
A reminder, given how much is in motion. Get Androidacy software only from our official channels, meaning our Google Play developer account and our website. Anything presented as ours from another source is not maintained by us and may not be what it claims. If it did not come from us, we cannot vouch for it.
Availability
That is the current state of things. The apps are on our Google Play account and the downloads page. Early access to the new features runs through Ultra for the next couple of months, and our summer sale takes 35% off any first term through July 31. If you hit a problem or have a suggestion, we want to hear it. Much of what you just read began as user feedback, and the next round will too.