diff --git a/metadata/eu.faircode.xlua.yml b/metadata/eu.faircode.xlua.yml
new file mode 100644
index 0000000000..fac567d031
--- /dev/null
+++ b/metadata/eu.faircode.xlua.yml
@@ -0,0 +1,92 @@
+Categories:
+  - System
+  - Security
+License: GPL-3.0
+SourceCode: https://github.com/M66B/XPrivacyLua
+IssueTracker: https://github.com/M66B/XPrivacyLua/issues
+Donate: https://lua.xprivacy.eu/
+Bitcoin: 1GePXhRPgLhwQmBwRHhX1nSCgvfnCY97Gg
+
+AutoName: XPrivacyLua
+Summary: Really simple to use privacy manager for Marshmallow (6.0) and later
+Description: |-
+    '''XPosed Module''', get [[de.robv.android.xposed.installer]].
+
+    Really simple to use privacy manager for Android 6.0 Marshmallow and later
+    (successor of XPrivacy).
+
+    Revoking Android permissions from apps often let apps crash or malfunction.
+    XPrivacyLua solves this by feeding apps fake data instead of real data.
+
+    '''Features:'''
+
+    * Simple to use
+    * Manage any user or system app
+    * Extensible
+    * Multi-user support
+    * Free and open source
+
+    '''Restrictions:'''
+
+    * Determine activity (fake unknown activity)
+    * Get applications (hide installed apps and widgets)
+    * Get calendars (hide calendars)
+    * Get call log (hide call log)
+    * Get contacts (hide contacts with the pro option to allow (non) starred contacts, hide blocked numbers)
+    * Get location (fake location, hide NMEA messages)
+    * Get messages (hide MMS, SMS, SIM, voicemail)
+    * Get sensors (hide all available sensors)
+    * Read account name (fake name, mostly e-mail address)
+    * Read clipboard (fake paste)
+    * Read identifiers (fake build serial number, Android ID, advertising ID, GSF ID)
+    * Read notifications (fake status bar notifications)
+    * Read network data (hide cell info, Wi-Fi networks, fake Wi-Fi network name)
+    * Read sync data (hide sync data)
+    * Read telephony data (fake IMEI, MEI, SIM serial number, voicemail number, etc)
+    * Record audio (prevent recording)
+    * Record video (prevent recording)
+    * Send messages (prevent sending MMS, SMS, data)
+    * Use analytics (Fabric/Crashlytics, Facebook app events, Firebase Analytics, Google Analytic, Mixpanel, Segment)
+    * Use camera (fake camera not available and/or hide cameras)
+    * Use tracking (fake user agent for WebView only, Build properties, network/SIM country/operator)
+
+    The tracking restrictions will work only if the code of the target app was not
+    obfuscated. The other restrictions will work always.
+
+    Hide or fake?
+
+    * Hide: return empty list
+    * Fake: return empty or fake value
+
+    It is possible to add custom restriction definitions, see this
+    [https://github.com/M66B/XPrivacyLua/blob/master/FAQ.md#FAQ8 FAQ] for details.
+
+    '''Notes:'''
+
+    * Some apps will start the camera app to take pictures. This cannot be restricted and there is no need for this, because only you can take pictures in this scenario, not the app.
+    * Some apps will use OpenSL ES for Android to record audio, an example is WhatsApp. Xposed cannot hook into native code, so this cannot be prevented.
+    * The get applications restriction will not restrict getting information about individual apps for stability and performance reasons.
+    * The telephony data restriction will result in apps seeing a fake IMEI. However, this doesn't change the IMEI address of your device.
+
+    '''Compatibility:'''
+
+    XPrivacyLua is supported on Android 6.0 Marshmallow and later. For Android 4.0.3
+    KitKat to Android 5.1.1 Lollipop you can use XPrivacy.
+
+RequiresRoot: 'yes'
+
+RepoType: git
+Repo: https://github.com/M66B/XPrivacyLua
+
+Builds:
+  - versionName: 1.23.11
+    versionCode: 112
+    commit: 1.23.11
+    subdir: app
+    gradle:
+      - yes
+
+AutoUpdateMode: Version %v
+UpdateCheckMode: Tags
+CurrentVersion: 1.23.11
+CurrentVersionCode: 112