Downsize — Privacy Policy
Effective date: August 19, 2026
Last updated: August 19, 2026
The short version
Downsize reduces the size of your photos and videos entirely on your device. Your photos and videos are never uploaded, never sent to us, and never leave your iPhone — we cannot see them. We use Firebase Analytics and Crashlytics to collect anonymous usage statistics and crash reports (no photo content, ever). Downsize shows no ads and does not track you. The free tier includes a daily conversion limit; Downsize Pro removes it with a one-time purchase.
Data Controller
Downsize is developed and maintained by Gilmar Quinelato, an independent developer based in the United Kingdom. For any privacy-related inquiries, contact: gilmarsquinelato@gmail.com
Data We Do NOT Collect
Downsize does not collect, upload, transmit, or store on any server:
Your photos or videos, or any content, thumbnails, or previews of them
Personal information (name, email address, phone number)
Precise location
User accounts, passwords, or login credentials
Contacts, health, financial, or messaging data
Advertising identifiers (the app contains no advertising or tracking SDK)
On-Device Processing
All media processing — scanning your library, measuring sizes, compressing, resizing, converting formats, and generating before/after comparisons — runs entirely on your device using Apple's frameworks (PhotoKit, Image I/O, AVFoundation). No photo or video data is ever sent to a third-party server or API. Your originals are never modified; Downsize saves a separate optimized copy, and deleting anything is always a separate, explicit action you confirm through the system.
Photos Library Access
Downsize requests access to your photo library for two purposes:
Read access — to scan your library on-device and find the photos and videos that take up the most space. Reading never downloads iCloud originals just to display them, and content is never uploaded.
Add access — to save the optimized copies you create back to your library.
You can grant full or limited access, or revoke access at any time in Settings › Privacy & Security › Photos. If you choose the "metadata" options in a recipe, Downsize can also strip location or other optional metadata from the optimized copy for extra privacy.
Data We DO Collect (Anonymous Analytics)
Downsize uses Google Firebase Analytics and Firebase Crashlytics to collect limited, anonymous data that helps us improve the app:
Usage events: which screens you visit and which features you use (e.g. "a video was optimized", "the comparison was opened"), plus non-identifying parameters such as media type and bytes saved — never the content of your photos or videos.
Crash reports: stack traces, device model, OS version, and app state at the time of a crash.
Standard metadata: app version, session duration, approximate (city-level) location derived from IP address, and device type.
Entitlement tier: whether you are a Free or Pro user, recorded as a non-identifying segment. No user account or user identifier is assigned, and analytics data is not linked to your real identity.
Legal Basis for Processing (UK/EU GDPR)
App functionality (on-device processing): necessary to perform the service you chose to use — Article 6(1)(b).
Anonymous analytics and crash reporting: legitimate interest in understanding stability and feature usage to improve the app — Article 6(1)(f). No personal identifiers are collected.
Data Storage
App data is stored locally on your device using Apple's SwiftData framework — this includes your app settings, processing history for the current session, and cached scan results. Downsize does not use iCloud sync and operates no servers of its own. Your daily free-usage allowance is stored securely in the device Keychain (a count and date only — no personal data) so the limit is consistent across reinstalls.
Data Retention & Deletion
App data lives on your device for as long as the app is installed. To delete all local Downsize data, delete the app from your device. Anonymous analytics/crash data held by Google is retained according to Google's retention policies; because it contains no personal identifiers tied to you, it cannot be selectively linked to or deleted for an individual. Because no advertising or tracking data is collected, there is nothing further to opt out of.
International Data Transfers
Anonymous analytics and crash data processed by Google (Firebase) may be processed on servers in the United States and other countries. Google operates under Standard Contractual Clauses (SCCs) and the EU–US Data Privacy Framework for international transfers. See Google's Privacy Policy.
Third-Party Services
Downsize integrates the following third-party services:
Google Firebase Analytics — anonymous usage events. Google Privacy Policy
Google Firebase Crashlytics — crash reports with device information. Firebase Data Processing Terms
Apple StoreKit — manages the in-app purchase. Transactions are processed entirely by Apple; Downsize receives only entitlement status — never payment details or Apple ID information.
Downsize integrates no advertising, ad-tracking, or user-profiling SDK.
In-App Purchases
Downsize offers Downsize Pro, a one-time (non-consumable) purchase that removes the daily conversion limit. Purchases are handled entirely through Apple's App Store and StoreKit. Downsize does not process, collect, or store any payment information — it receives only whether you own the purchase.
Your Rights
Access & Portability: your media stays in your own photo library; app data is visible within the app.
Rectification: you control your library and settings directly.
Erasure: delete the app to remove all local data.
Objection & Restriction: you may object to analytics (legitimate interest) by contacting us.
Complaint: under UK GDPR you may complain to the Information Commissioner's Office (ICO); under EU GDPR, to your local supervisory authority.
For California residents (CCPA/CPRA): Downsize does not sell or share personal information, does not use personal information for cross-context behavioral advertising, and does not knowingly collect sensitive personal information.
Data Breach Notification
Downsize stores no personal data on its own servers (it has none). Analytics and crash data are handled by Google under its own security and breach-notification obligations. If a vulnerability in the app that could affect user data is discovered, we will promptly address it through an app update and, where required by law (UK GDPR Art. 33–34), notify the ICO.
Children's Privacy
Downsize is a general-audience utility and is not directed to children under 13. It does not knowingly collect personal information from children, shows no advertising, and does not track users. If you believe a child has used the app and you have concerns, contact us and we will assist. This applies under COPPA (United States) and UK/EU GDPR.
Governing Law
This policy is governed by the laws of England and Wales, without regard to conflict-of-law principles. For users in the European Economic Area, nothing here affects your mandatory rights under EU GDPR. For users in California, nothing here affects your rights under CCPA/CPRA.
Changes to This Policy
If this policy is updated, the new version will be published here with revised effective and update dates. Material changes affecting data collection will be reflected before they take effect.
Contact
Questions about this policy? Reach us at gilmarsquinelato@gmail.com
Downsize — Privacy Policy
Effective date: August 19, 2026
Last updated: August 19, 2026
The short version
Downsize reduces the size of your photos and videos entirely on your device. Your photos and videos are never uploaded, never sent to us, and never leave your iPhone — we cannot see them. We use Firebase Analytics and Crashlytics to collect anonymous usage statistics and crash reports (no photo content, ever). Downsize shows no ads and does not track you. The free tier includes a daily conversion limit; Downsize Pro removes it with a one-time purchase.
Data Controller
Downsize is developed and maintained by Gilmar Quinelato, an independent developer based in the United Kingdom. For any privacy-related inquiries, contact: gilmarsquinelato@gmail.com
Data We Do NOT Collect
Downsize does not collect, upload, transmit, or store on any server:
Your photos or videos, or any content, thumbnails, or previews of them
Personal information (name, email address, phone number)
Precise location
User accounts, passwords, or login credentials
Contacts, health, financial, or messaging data
Advertising identifiers (the app contains no advertising or tracking SDK)
On-Device Processing
All media processing — scanning your library, measuring sizes, compressing, resizing, converting formats, and generating before/after comparisons — runs entirely on your device using Apple's frameworks (PhotoKit, Image I/O, AVFoundation). No photo or video data is ever sent to a third-party server or API. Your originals are never modified; Downsize saves a separate optimized copy, and deleting anything is always a separate, explicit action you confirm through the system.
Photos Library Access
Downsize requests access to your photo library for two purposes:
Read access — to scan your library on-device and find the photos and videos that take up the most space. Reading never downloads iCloud originals just to display them, and content is never uploaded.
Add access — to save the optimized copies you create back to your library.
You can grant full or limited access, or revoke access at any time in Settings › Privacy & Security › Photos. If you choose the "metadata" options in a recipe, Downsize can also strip location or other optional metadata from the optimized copy for extra privacy.
Data We DO Collect (Anonymous Analytics)
Downsize uses Google Firebase Analytics and Firebase Crashlytics to collect limited, anonymous data that helps us improve the app:
Usage events: which screens you visit and which features you use (e.g. "a video was optimized", "the comparison was opened"), plus non-identifying parameters such as media type and bytes saved — never the content of your photos or videos.
Crash reports: stack traces, device model, OS version, and app state at the time of a crash.
Standard metadata: app version, session duration, approximate (city-level) location derived from IP address, and device type.
Entitlement tier: whether you are a Free or Pro user, recorded as a non-identifying segment. No user account or user identifier is assigned, and analytics data is not linked to your real identity.
Legal Basis for Processing (UK/EU GDPR)
App functionality (on-device processing): necessary to perform the service you chose to use — Article 6(1)(b).
Anonymous analytics and crash reporting: legitimate interest in understanding stability and feature usage to improve the app — Article 6(1)(f). No personal identifiers are collected.
Data Storage
App data is stored locally on your device using Apple's SwiftData framework — this includes your app settings, processing history for the current session, and cached scan results. Downsize does not use iCloud sync and operates no servers of its own. Your daily free-usage allowance is stored securely in the device Keychain (a count and date only — no personal data) so the limit is consistent across reinstalls.
Data Retention & Deletion
App data lives on your device for as long as the app is installed. To delete all local Downsize data, delete the app from your device. Anonymous analytics/crash data held by Google is retained according to Google's retention policies; because it contains no personal identifiers tied to you, it cannot be selectively linked to or deleted for an individual. Because no advertising or tracking data is collected, there is nothing further to opt out of.
International Data Transfers
Anonymous analytics and crash data processed by Google (Firebase) may be processed on servers in the United States and other countries. Google operates under Standard Contractual Clauses (SCCs) and the EU–US Data Privacy Framework for international transfers. See Google's Privacy Policy.
Third-Party Services
Downsize integrates the following third-party services:
Google Firebase Analytics — anonymous usage events. Google Privacy Policy
Google Firebase Crashlytics — crash reports with device information. Firebase Data Processing Terms
Apple StoreKit — manages the in-app purchase. Transactions are processed entirely by Apple; Downsize receives only entitlement status — never payment details or Apple ID information.
Downsize integrates no advertising, ad-tracking, or user-profiling SDK.
In-App Purchases
Downsize offers Downsize Pro, a one-time (non-consumable) purchase that removes the daily conversion limit. Purchases are handled entirely through Apple's App Store and StoreKit. Downsize does not process, collect, or store any payment information — it receives only whether you own the purchase.
Your Rights
Access & Portability: your media stays in your own photo library; app data is visible within the app.
Rectification: you control your library and settings directly.
Erasure: delete the app to remove all local data.
Objection & Restriction: you may object to analytics (legitimate interest) by contacting us.
Complaint: under UK GDPR you may complain to the Information Commissioner's Office (ICO); under EU GDPR, to your local supervisory authority.
For California residents (CCPA/CPRA): Downsize does not sell or share personal information, does not use personal information for cross-context behavioral advertising, and does not knowingly collect sensitive personal information.
Data Breach Notification
Downsize stores no personal data on its own servers (it has none). Analytics and crash data are handled by Google under its own security and breach-notification obligations. If a vulnerability in the app that could affect user data is discovered, we will promptly address it through an app update and, where required by law (UK GDPR Art. 33–34), notify the ICO.
Children's Privacy
Downsize is a general-audience utility and is not directed to children under 13. It does not knowingly collect personal information from children, shows no advertising, and does not track users. If you believe a child has used the app and you have concerns, contact us and we will assist. This applies under COPPA (United States) and UK/EU GDPR.
Governing Law
This policy is governed by the laws of England and Wales, without regard to conflict-of-law principles. For users in the European Economic Area, nothing here affects your mandatory rights under EU GDPR. For users in California, nothing here affects your rights under CCPA/CPRA.
Changes to This Policy
If this policy is updated, the new version will be published here with revised effective and update dates. Material changes affecting data collection will be reflected before they take effect.
Contact
Questions about this policy? Reach us at gilmarsquinelato@gmail.com