Privacy Policy

Breeze is a storage cleaner. It finds duplicate photos, near-identical shots, screenshots, blurry images, large videos and junk files, and helps you delete them. To do that it has to look at your library — so this policy explains exactly what the app reads, what it writes down, what leaves your phone (almost nothing), and why.

The short version: Breeze has no account, no server and no analytics. Everything it does happens on your device. We could not see your photos if we wanted to, because there is nowhere for them to go.

1Everything happens on your device

Breeze does all of its work locally on your phone — scanning your library, comparing photos, measuring app sizes, merging contacts, encrypting the vault, re-encoding videos. It has no account to create, no servers of ours to talk to, and it does not upload your photos, videos, contacts, files or usage data anywhere.

What the app stores on your device is small and boring:

• Your settings — theme, scan thresholds, similarity level, reminder preference;
• The results of your last scan, so the home screen and the widget have something to show;
• How far you got through each month in Clean by Month;
• Anything you put in the Secret Vault, encrypted (section 6);
• On Android, the notification history, if you turned that on (section 5).

Deleting the app deletes all of it. We cannot recover any of it, because we never had it.

2Photos and videos

Photo library access is what makes the app work. It is used for one purpose: finding files worth deleting and showing them to you before anything happens to them.

• File sizes and dates are read from the platform's own media database — Breeze does not open your files to measure them.
• To find duplicates and similar shots, the app decodes a small thumbnail in memory, turns it into a numeric fingerprint, and compares fingerprints. The thumbnails are not kept and the fingerprints are discarded when the app closes.
• Breeze never copies an original photo or video out of your library. Doing so would duplicate your library into the app's storage and, on iPhone, force every photo to download from iCloud.
• Full-screen previews render from a scaled-down thumbnail. Video playback uses the platform's own reference to the file, not a copy.
• Deleting is done by iOS or Android at your confirmation, into the system's Recently Deleted album where one exists.

On iPhone you can grant access to selected photos only. Breeze works with whatever you give it and never nags for more.

3Contacts (optional)

If you use the Contacts tool, the app reads your address book only to find duplicate and incomplete entries and show them to you. When you merge, the changes are written straight into your device address book — fields from the duplicates are folded into the entry you keep, then the others are removed. Your contacts are never uploaded, never stored by Breeze, and never used for anything else.

4Installed apps (optional, Android)

On Android, App Manager reads the names, icons, sizes and last-used dates of your installed apps to show what is taking up space. Size and last-used need the Usage Access permission, which you grant yourself in system settings and can withdraw at any time. The information is shown on screen and then discarded — it never leaves the device. Uninstalling is done by Android's own dialog, not by Breeze.

iOS does not let an app see what else is installed, so this feature does not exist on iPhone.

5Notification access (optional, Android)

This is the most sensitive thing Breeze can be given, so here is all of it. It happens only if you switch on Notification Access in Android's settings yourself, and never otherwise.

When it is on, the app records the notifications your phone receives — which app sent it, the title, the text, a category label and the time — so it can show you which apps notify you most and how much of it is marketing.

• The record is written to Breeze's private storage on your phone. It is never uploaded, and no other app can read it.
• One-time codes are stripped before anything is written. If a notification's text looks like it contains a verification code, the digits are removed at the moment it is captured — not when it is displayed — so the code never reaches the disk at all.
• Group summaries and ongoing notifications are thrown away rather than recorded.
• History older than 30 days is deleted automatically.
• You can erase the whole history, or stop the recording, from the Notifications screen at any time. Turning off Notification Access stops it immediately.
• Breeze does not hide, block, dismiss, silence or change your notifications. It reports and labels them. The two actions it offers — clearing your notification shade and opening an app's own notification settings — are both things you could already do yourself.

If you never turn this on, none of it happens and no record exists. iOS gives apps no way to read notifications at all, so the feature does not exist on iPhone.

6Secret Vault (Premium)

Photos and videos you move into the vault are encrypted on your device with AES-GCM. The content key is a random 256-bit key, which is itself wrapped by a key derived from your PIN using PBKDF2, and kept in the iOS keychain / Android keystore. Your PIN is never stored — not as text, not as a hash. Checking it works by attempting a decryption: it either succeeds or it does not.

Unlocking with Face ID, Touch ID or a fingerprint is handled entirely by your phone's own secure hardware. Breeze gets back only a yes or a no; your biometric data never reaches the app.

7Shrink Videos (iOS, Premium)

When you shrink a clip, the re-encoded copy is written inside the app's own sandbox, checked, and saved back into your library with the original's capture date and location preserved. The original is deleted only once the smaller copy is confirmed to be there. Nothing is uploaded, and the app keeps no copy afterwards.

8Purchases

Breeze Premium is sold entirely through the App Store and Google Play. Payments are processed by Apple and Google — we never see your card details, billing address or store account. Your Premium status is validated with the store and held on your device.

Breeze has no sign-in, so a purchase is tied to your Apple Account or Google Play account rather than to any account with us. Reinstalling and tapping "Restore purchases" brings it back. We do not operate a license server for Breeze and receive no information that identifies you from either store.

9Analytics

Breeze contains no analytics SDK, no crash-reporting SDK, no advertising SDK and no attribution or install-tracking SDK. There is no Firebase, no Google Analytics, and no third-party measurement of any kind inside the app.

We do not know how many times you opened Breeze, which tools you used, how much space you recovered, or whether it crashed. If you want us to know something about how it behaves, you have to tell us — see Contact.

10The one connection the app makes

Breeze sends none of your data over the network. It does make one outbound request, and it is only fair to name it: the app's typeface (DM Sans) is downloaded from Google Fonts the first time it is needed, then cached on the device. Like any web request that reaches Google's servers and carries your device's IP address. It contains none of your files, and nothing about how you use the app. It is covered by Google's privacy policy.

Everything else the app can open — a store listing, a subscription page, a support email — is handed to your browser or mail app when you tap it, and from that point the destination's own policy applies.

11Permissions, and what happens if you say no

Every permission is asked for at the moment a feature needs it, with an explanation first, and can be withdrawn in system settings whenever you like. Refusing one hides the features that depend on it and nothing more.

12What we don't do

• No ads, and no advertising SDKs in the app;
• No analytics, and no tracking of how you use the app;
• We do not sell, rent or share your personal data with anyone;
• No data is used to train AI models;
• No account, no cloud sync, no backup server — there is nothing of yours on our side to lose.

Our website (gmsoftwareltd.com) uses Google Tag Manager for basic visit statistics; that applies to the website only, not to the app. See the Cookies Policy.

13Data retention and deletion

• On-device data: delete the app and it is all gone — settings, scan results, notification log and encrypted vault.
• Notification history: deleted automatically after 30 days, or immediately when you clear it from the Notifications screen.
• Scan results: replaced by your next scan.
• Vault contents: kept until you remove them or uninstall. Export anything you want to keep first — see the warning in section 6.
• Emails you send us: kept while we deal with your question and for a reasonable period afterwards, then deleted.

Your photos, videos and contacts are not ours to delete. They belong to your device and are untouched when you uninstall Breeze.

14Security

The strongest protection here is that there is nothing to attack: data that is never transmitted cannot be intercepted, and a user database that does not exist cannot be breached. On top of that:

• Vault contents are encrypted with AES-GCM and a PBKDF2-derived key; the wrapped key lives in the platform keychain / keystore.
• One-time codes are removed from the notification log at the moment of capture, so an unredacted code never exists on disk.
• The app runs inside the platform sandbox and reads your library through the system media database rather than copying files out of it.
• Releases are signed and distributed only through the App Store and Google Play.

No protection is absolute — if your phone itself is compromised, data on it is at risk whatever an app does. If you think you have found a security problem in Breeze, please email us before disclosing it publicly.

15Your rights

Privacy laws including the GDPR (EU and UK), the CCPA/CPRA (California) and Vietnam's Decree 13/2023/ND-CP give you rights of access, correction, deletion and portability over personal data a company holds about you. We hold none — there is no account, no server record and no profile — so in almost every case there is nothing for us to look up, export or delete on your behalf, and the controls in section 13 are faster and more complete than any request to us could be.

Where we do hold something it is an email you sent us, and we will act on a request about it within 30 days. Write to developer@gmsoftwareltd.com. If you are in the EU or UK you also have the right to complain to your national data protection authority.

16Children

Breeze is not directed at children under 13, and we do not knowingly collect personal information from children. The app has no social features, no advertising and no profiling.

17Changes to this policy

If we change this policy we will update this page and the effective date at the top. Significant changes will be noted in the app's release notes. The shorter copy inside the app, under Settings → Privacy policy, is kept in step with this page deliberately — if they ever disagree, please tell us, because one of them is a bug.

18Contact

GM Software Ltd
Email: developer@gmsoftwareltd.com

See also the Terms of Use, the Refund Policy, the Cookies Policy and the Third-Party Notices.