https://secure-system.gitlab.io/Insular/
“Insular” is a sandbox environment to clone selected apps and isolate them from accessing your personal data outside the sandbox (including call logs, contacts, photos and etc) even if related permissions are granted. Device-bound data (SMS, IMEI and etc) is still accessible.
Isolated app can be frozen on demand, with launcher icon vanish and its background behaviors completely blocked.
Insular takes advantage of the “managed profile” feature on Android 5.0+, which is also the base of “Android for Work”, to create an isolated sandbox for apps with their data.