Side Of Burritos https://www.youtube.com/channel/UCij1VEjDb88RCbqsvZ1gqaw and Privacy Guides: https://www.privacyguides.org/ are good resources

Profiles are under “System” section in settings, biometrics are optional

you may like to know about LocalSend, it’s a file transfer software that uses your network (but not your internet) so it’s very fast, it has encryption, a web version, and it’s cross platform

Here's a good starting point, small list of a few items to do after flashing GOS.

What to Actually Do After Flashing:

https://franklinetech.com/first-24-hours-with-grapheneos/

Also look into private space, this allows you to run a "sub profile" in your main profile where you could install your already sandboxed Google play service as needed.

There are 3 main kinds of profiles:

1. User (including Owner)
2. Private Space
3. Work profile

Each have their own apps, app data, profile data including a home directory, their own disk encryption keys and their own VPN configuration.

Private Spaces and work profiles are similar to a user but nested inside of another user for actually usage them.

I am very against biodata, I never use it. Is it possible to leave only with pin ?

yes, it is.

• CoMaps for navigation when possible
• I've been trying to use XMPP and Matrix as alternatives to messaging
• Markor for notes
• koreader for reading
• ReFra photo gallery
• AnyList for grocery lists (wanted a way to collaborate with partner on iOS still)
• Obtainium for acquiring apps

I am open to recommendations!

GOS is alllocal bio data but yeah you can not use it if you like.

Set up profiles: one for your day-to-day activities and one for your proprietary apps and GMS. I also have one profile for all things Musk and one for WhatsApp.

When it comes to apps on your main profile, you should keep it as Google-free as possible.

Same with your home screen. It's supposed to be as useful and not provide access to every app you have installed (another operating system does this).

Why are you against biometrics to unlock your phone?

GOS supports print+pin unlock that makes the phone 10x more secure

Up

1. Don’t use multiple profiles on your private phone, doing so can mix metadata.
2. If you ignore point 1, always close your other profile manually in Settings after switching.
3. Don’t sign in to Google or Microsoft accounts on your GrapheneOS device.
4. Rely on Obtainium and F-Droid for apps.
5. (Optional) Avoid installing Google Play Services.
6. Keep your phone in airplane mode, and set Wi-Fi to turn off automatically one minute after you leave home.
7. Avoid SIM cards, since carriers can track your location with extreme precision.

Ultimately, GrapheneOS is just a de-Googled OS. Don’t walk around with a false sense of security just because you use it.