Privacy Policy

Last updated: October 26, 2026 · Version 1.1

Abrezo is an app for sharing photos with a small group of people close to you. There are no public profiles, there is no user search, and nobody can find you unless you gave them your invite link.

This policy explains what data we collect, what we use it for, and what you can do about it. It is written to be understood without a lawyer.

1. Who is responsible for your data

The data controller is Roberto Requena, operating Abrezo.app, based in Los Teques, estado Miranda (Venezuela). You can reach us at hola@abrezo.app about anything in this policy.

2. What we collect

We collect the minimum needed for the app to work. We do not ask for an email address, a postal address, or any government ID.

Data	When we get it	What for
Phone number	At sign-up	It is your account identifier. We verify it with an SMS code.
Display name you choose	At sign-up	So your friends know who sent each photo.
Date of birth	At sign-up	Only to check that you are 13 or older. It is never shown to anyone else.
Profile picture	If you choose to add one	Optional. The app works without it.
Photos you send and their captions	Every time you send one	To deliver them to the people you picked.
Reactions	When you react to a photo	To show the sender who reacted and with which emoji.
Your friends and groups	When invites are shared or redeemed	To know who you can send photos to. Your groups are private: nobody else sees how you organized them.
People you blocked	When you block someone	To stop delivering their content to you.
Notification identifiers	Automatically, per device	To send you push notifications. They are cleaned up on their own once a device stops existing.
Language and preferences	Automatically and from settings	To show the app in your language and honor options such as “upload on Wi-Fi only”.
Technical usage and crash data	While you use the app	To know what breaks and what is slow. See section 5.

What we do NOT collect

Your contact list. The app never reads it. Invites work by you sharing a link yourself, over WhatsApp or anywhere else.
Your location. Neither in the foreground nor in the background.
Your photos' metadata. Before uploading any image, the app strips its EXIF data — that includes GPS coordinates and the device model. What gets uploaded is the image and nothing else.
Your email address, unless you write to us.

3. Who can see your photos

Only the people you picked when you sent them. At send time you choose whether it goes to all your friends, to a group, or to specific people, and that list is fixed at that moment.

Photos are stored behind download links that cannot be guessed, and the security rules stop anyone else from reading them by direct path. When you delete a photo we delete the file: links that had already been handed out stop working.

What we cannot control: whether someone you sent a photo to takes a screenshot or photographs it with another phone. Only send to people you trust.

4. Content moderation

Every photo goes through automated analysis before delivery, to detect sexual or violent content. That analysis is done by Google's Cloud Vision service, which inspects the image and returns a score. Rejected images are not delivered.

You can also report a photo. Once reports add up on the same photo, it is automatically pulled from everyone's feed. Reports are kept even if the reported account is deleted, because they are the record of why a moderation decision was made.

5. Technical and diagnostic data

We use Google tooling to understand how the app performs:

Usage analytics: which screens open and which actions complete, in aggregate. It tells us whether the product is understandable, not who you are.
Crash reports: when the app closes unexpectedly, the technical detail of the error is sent along with the device model and OS version.
Performance: load and upload times.
Integrity checks: we verify that requests come from a genuine install of the app and not from a script, to curb abuse.

We do not use this data for advertising and we do not sell it.

6. Who we share data with

We do not sell your data. We do not hand it to advertisers. We share it only with the infrastructure providers that make the app run:

Google Cloud / Firebase (Google LLC): stores the database and the photos, handles sign-in, runs the server logic, and sends push notifications.
Google Cloud Vision: analyzes photos for moderation (section 4).
Apple and Google, if you choose to sign in with your Apple or Google account. In that case we receive an account identifier from them.

We may also disclose data if a competent authority compels us through a valid order.

7. Where your data is stored

Your profile, photos, friendships, and groups are stored on Google Cloud servers in São Paulo, Brazil (region southamerica-east1). We picked that region to keep data in the region and keep the app fast.

The technical and diagnostic data in section 5 is processed on Google's global infrastructure, which may sit outside your country. By accepting this policy you consent to that transfer, which the app needs in order to work.

8. How long we keep it

Your profile, friendships, and groups: for as long as your account exists.
Your photos: until you delete them or delete your account.
Moderation reports: kept even after the account involved is gone, for 2 years.

9. How to delete your account

In the app: Profile → Delete account. No need to write to us and no approval to wait for.

Deleting the account removes, in cascade:

your profile and everything under it;
your photos and their thumbnails, including the copies sitting in other people's feeds — your photos disappear from their phones too;
your profile picture;
your friendships on both sides, so nothing is left behind in your friends' lists;
your sign-in account, which frees up the phone number.

This is irreversible. We keep no backup for restoring deleted accounts.

10. Your rights

Depending on where you live, the law gives you rights over your data. In Mexico, LFPDPPP grants the ARCO rights: access, rectification, cancellation, and opposition. In Brazil, LGPD adds portability and confirmation of processing. Other countries in the region recognize equivalent rights.

In practice, here is what you can do:

See and correct your data: name and profile picture can be changed in the app at any time.
Delete it: from Profile → Delete account.
Request a copy or object to a specific use: write to hola@abrezo.app. We answer within 30 business days.

11. Minors

Abrezo is for people 13 and older. We ask for your date of birth at sign-up and block registration below that age.

If you are a parent or guardian and believe a child under 13 created an account, write to hola@abrezo.app and we will remove it.

12. Permissions the app asks for

Camera: to take the photos you send. Without it the app cannot do its job.
Photo library: only if you pick an existing photo instead of taking one.
Notifications: to tell you when a photo or a reaction arrives. You can decline and the app still works.

All of them can be revoked from your system settings.

13. Security

Data travels encrypted and is stored encrypted at rest, by default on Google Cloud infrastructure. Access rules for the database and the storage are enforced on the server, not in the app: even if someone modified the app, they could not read data that is not theirs.

No system is perfect. If we detect a breach that affects you, we will notify you and report it to the relevant authority within the deadlines the law sets.

14. Changes to this policy

If we change something important, we will update the date above and tell you inside the app before the change takes effect.

15. Contact

Questions, requests, or complaints: hola@abrezo.app.

If our answer does not satisfy you, you can go to the data protection authority in your country.