Privacy Policy
Effective 22 September 2026 · Applies to com.ayzalsoft.easygallerycleaner
GalleryPilot: Smart Cleaner finds duplicate, blurry and oversized photos and videos on your phone. This policy explains exactly what it touches, what it keeps, and what it sends anywhere.
The short version
- We do not collect, transmit or store your personal data on any server.
- Your photos and videos are never uploaded. All analysis runs on your phone.
- No account, no sign-in, no profile, no advertising, no analytics, no tracking.
- Settings and cleanup history are saved on your device only, and removed when you uninstall.
1. Who we are
GalleryPilot: Smart Cleaner is published by Ayzalsoft. For any question about this policy or about your data, write to mhk73982@gmail.com.
2. What we collect
Nothing. We operate no servers, no accounts and no databases connected to this app. We receive no information about you, your device or your gallery, and we have no way to identify an individual user.
The app contains no analytics library, no advertising network, no crash reporting service and no social media SDK.
3. What the app reads on your device
To do its job the app reads the photos and videos in the folders you select on the Select Folders screen. For each item it examines the image content in order to measure sharpness, brightness, noise and composition, to compute a fingerprint used for finding duplicates, and to read the file's size, format and date.
This work happens entirely on your phone. Image data is never sent off the device, to us or to anyone else.
4. What is stored, and where
Everything the app saves is stored in its own private storage area on your device. None of it is backed up to us or synchronised anywhere.
Preferences and results
- Your settings: selected folders, language, light or dark theme, trash and reminder preferences, similarity and size thresholds.
- The display name you optionally enter for the greeting on the home screen.
- Cleanup history: the date, number of items and number of bytes of each cleanup, used for the Stats and Weekly Summary screens. It records counts, not file names.
- Scan results, cached so a repeat scan is fast.
Trash Bin
When Delete via Trash Bin is on, deleted files are moved into the app's private storage and kept for 30 days so you can restore them. The record holds the file name, its original location, its size and the deletion date. Emptying the trash, or letting the 30 days pass, erases the files.
Locked Album
Photos you lock are moved out of your gallery into the app's private storage area, where other apps cannot read them. The app remembers each item's original location so it can be restored.
Your PIN is never stored as text. It is salted and put through 120,000 rounds of PBKDF2-SHA256, and only that result is kept, in storage protected by the Android Keystore. We cannot read your PIN, and neither can anything else on the device.
Please be aware: the Locked Album keeps files out of the public gallery and behind your fingerprint or PIN, but the files themselves are not encrypted. It protects against someone casually browsing your gallery. It is not a secure vault, and it will not withstand someone with full access to an unlocked or rooted device. Please do not rely on it to protect genuinely sensitive material.
Excluded from Android backup
Android can copy an app's private files to your Google Drive automatically. We have explicitly excluded the Locked Album, the Trash Bin and your PIN from both cloud backup and device-to-device transfer, so locked and deleted photos stay on the phone they were locked on. Your settings and cleanup history are still restored if you set up a new device.
5. Permissions, and why each is needed
| Permission | Why the app asks |
|---|---|
| READ_MEDIA_IMAGES READ_MEDIA_VIDEO | Required. Without access to your photos and videos the app cannot scan anything. On Android 12 and older this is READ_EXTERNAL_STORAGE instead. |
| READ_MEDIA_VISUAL_USER_SELECTED | Lets you grant access to selected photos only, rather than your whole library, on Android 14 and newer. |
| WRITE_EXTERNAL_STORAGE | Used on Android 10 and older to delete files, move items into albums and save compressed videos. |
| USE_BIOMETRIC USE_FINGERPRINT | Optional. Only used to unlock the Locked Album with your fingerprint. Your biometric data stays with Android and is never seen by the app. |
| POST_NOTIFICATIONS | Optional. Only used for the weekly cleanup reminder, which you can turn off in Settings. |
| RECEIVE_BOOT_COMPLETED | Re-registers that weekly reminder after the phone restarts. |
| VIBRATE | Notification feedback. |
| INTERNET ACCESS_NETWORK_STATE | Not used to send your media anywhere. Required by the Google components described in section 6, and to open the Play Store, your email app or this privacy policy when you tap the matching item in Settings. |
6. Third-party components
The app is not completely offline, and we would rather be precise about that than claim otherwise. These are the only occasions it uses the network. None of them carries your photos, videos or any data about them.
Google Play Services — ML Kit
Smart Tagging and QR code detection use Google's ML Kit. The recognition models are delivered and run by Google Play Services on your device rather than being bundled into the app, which keeps the download small. Downloading a model contacts Google. Your images are processed locally by the model and are not sent to Google. See the Google Privacy Policy.
Google Fonts
The app's typeface is fetched from Google Fonts the first time it runs. That request reveals your IP address to Google, as any web request does. No other information is included.
Google Play
Tapping Rate Us opens the Play Store listing or Play's in-app review sheet. Your review, if you leave one, is handled by Google under its own policy.
Your email and sharing apps
Tapping Send Feedback opens your own email app with a draft addressed to us. The draft includes the app version, your Android version and device model, and your language setting, so we can reproduce problems. Nothing is sent until you press send, and you can edit or delete any of it first. If you do write to us, we receive your email address and whatever you choose to tell us, and we use it only to answer you.
Share App and Share Report hand a short line of text to whichever app you pick. That app's own policy then applies.
7. Children
This app is a general-purpose utility. It is not directed at children, and we do not knowingly collect information from anyone, including children, because we do not collect information at all.
8. Keeping and deleting your data
Because nothing reaches us, there is nothing for us to retain or delete on your behalf, and no request you need to send us.
Everything the app has saved lives on your device, and you can remove it at any time:
- Empty Trash Bin in Settings erases deleted items immediately.
- Unlock items in the Locked Album to return them to your gallery.
- Clear storage in Android Settings › Apps › GalleryPilot resets the app to a fresh state.
- Uninstalling the app removes all of its settings, history and cached results.
Before you uninstall: anything still sitting in the Trash Bin or the Locked Album is kept in the app's private storage and is deleted along with it. Restore what you want to keep first.
9. Security
Your data stays in the app's private storage area, which Android keeps separate from other apps. We hold no copy of it, so there is no server of ours that could be breached. Your Locked Album PIN is stored only as a salted, stretched hash held by the Android Keystore, and the Locked Album, the Trash Bin and that PIN are all excluded from Android's automatic backup. Please also read the note about the Locked Album in section 4, which is deliberately honest about its limits.
10. Changes to this policy
If a future version of the app changes what it accesses or sends, this page will be updated and the effective date at the top will change. Material changes will be noted in the Play Store release notes.
11. Contact
Ayzalsoft — mhk73982@gmail.com
You can also reach us from the app, at Settings › Send Feedback.